Lenovo Hotkey Driver 5.33 - Local Privilege Escalation

Lenovo Hotkey Driver 5.33 - Local Privilege Escalation Author: Chilik Tamir - Amdocs Power Security Testing Group Website: http://invalid-packet.blogspot.com/2010/03/full-disclosure-security-vulnerability.html Subject: Security vulnerability in Lenovo Hotkey Driver and Access Connections version...

Lenovo Privilege Escalation

Author: Chilik Tamir - Amdocs Power Security Testing Group Website: http://invalid-packet.blogspot.com/2010/03/full-disclosure-security-vulnerability.html Subject: Security vulnerability in Lenovo™ Hotkey™ Driver and Access Connections™ version =v5.33 Impact: A privilege escalation attack can be...

Lotus iNotes ActiveX控件URL处理栈溢出漏洞

BUGTRAQ ID: 38457 CVECAN ID: CVE-2010-0919 Lotus iNotes之前被称为Lotus Domino Web Access，是Lotus Domino服务器基于web的消息和协作界面。 Domino Web Access ActiveX控件（dwa8.dll，dwa8w.dll）在处理URL时没有执行长度检查便将其拷贝到了固定大小的栈缓冲区中，用户受骗访问了恶意网页并传送了超长参数的话就可以触发栈溢出，导致执行任意代码。 IBM Lotus iNotes 8.0 IBM Lotus iNotes 7.0 IBM Lotus iNotes 6.5...

Chilkat Crypt ActiveX WriteFile Unsafe Method

$Id: chilkatcryptwritefile.rb 8703 2010-03-03 21:17:31Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Lotus Domino Web Access ActiveX control InstallBrowserHelperDll buffer overflow

Added: 03/05/2010 BID: 38457 OSVDB: 62612 Background Lotus Domino Web Access provides capabilities similar to those of the Lotus Notes client, delivered through a web browser. It includes an ActiveX control implemented in inotes6w.dll, dwa7w.dll, dwa8w.dll, and dwa85w.dll. Problem A buffer overfl...

Lotus Domino Web Access ActiveX control InstallBrowserHelperDll buffer overflow

Added: 03/05/2010 BID: 38457 OSVDB: 62612 Background Lotus Domino Web Access provides capabilities similar to those of the Lotus Notes client, delivered through a web browser. It includes an ActiveX control implemented in inotes6w.dll , dwa7w.dll , dwa8w.dll , and dwa85w.dll. Problem A buffer...

Lotus Domino Web Access ActiveX control InstallBrowserHelperDll buffer overflow

Added: 03/05/2010 BID: 38457 OSVDB: 62612 Background Lotus Domino Web Access provides capabilities similar to those of the Lotus Notes client, delivered through a web browser. It includes an ActiveX control implemented in inotes6w.dll, dwa7w.dll, dwa8w.dll, and dwa85w.dll. Problem A buffer overfl...

Ultra Shareware Office Control ActiveX HttpUpload Buffer Overflow

$Id: ultraofficehttpupload.rb 8705 2010-03-04 06:19:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Lotus Domino Web Access ActiveX control InstallBrowserHelperDll buffer overflow

Added: 03/05/2010 BID: 38457 OSVDB: 62612 Background Lotus Domino Web Access provides capabilities similar to those of the Lotus Notes client, delivered through a web browser. It includes an ActiveX control implemented in inotes6w.dll , dwa7w.dll , dwa8w.dll , and dwa85w.dll. Problem A buffer...

Internet Explorer winhlp32.exe 'MsgBox()'远程代码执行漏洞

BUGTRAQ ID: 38463 CVECAN ID: CVE-2010-0483 Internet Explorer是Windows操作系统中默认捆绑的web浏览器。 用户可以使用VBScript从IE调用winhlp32.exe服务，如果向该服务传送了恶意的.HLP文件就会导致执行任意命令。 必需一些用户交互才可以触发这个漏洞，在显示MsgBox弹出框时用户需要按下F1。以下是MsgBox函数的句法： MsgBoxprompt,buttons,title,helpfile,context...

Internet Explorer HHCtrl.ocx Image Property Heap Corruption (MS06-046; CVE-2006-3357)

Microsoft Internet Explorer IE is the most widely used web browser application. The browser is capable of processing HTML, images, scripting languages, and various other popular Internet specifications. The browser is also compatible with Microsoft's Common Object Model COM scheme, whereby...

Authentium Command On Demand ActiveX Control - Multiple Buffer Overflow Vulnerabilities

source: https://www.securityfocus.com/bid/38544/info The CSS Web Installer ActiveX control in Authentium Command On Demand Online scanner is prone to multiple buffer-overflow vulnerabilities. An attacker can exploit these issues by enticing a victim to view a malicious webpage. Successful exploit...

Authentium Command on demand online scanner ActiveX buffer overflow

Buffer overflow in InstallProduct methods...

Authentium Command On Demand ActiveX Control - Multiple Buffer Overflow Vulnerabilities

Authentium Command On Demand ActiveX Control - Multiple Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/38544/info The CSS Web Installer ActiveX control in Authentium Command On Demand Online scanner is prone to multiple buffer-overflow vulnerabilities. An attacker can...

WebEx UCF atucfobj.dll ActiveX NewObject Method Buffer Overflow

$Id: webexucfnewobject.rb 8712 2010-03-04 17:41:26Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

iDefense Security Advisory 03.02.10: IBM Lotus Domino Web Access ActiveX Stack Buffer Overflow Vulnerability

iDefense Security Advisory 03.02.10 http://labs.idefense.com/intelligence/vulnerabilities/ Mar 02, 2010 I. BACKGROUND IBM Lotus Domino includes an ActiveX control called Domino Web Access, which provides Web-based access for Lotus Notes users. The control features functionality that is used for...

CVE-2009-4663

Heap-based buffer overflow in the Quiksoft EasyMail Objects 6 ActiveX control allows remote attackers to execute arbitrary code via a long argument to the AddAttachment method...

Heap overflow

Heap-based buffer overflow in the Quiksoft EasyMail Objects 6 ActiveX control allows remote attackers to execute arbitrary code via a long argument to the AddAttachment method...

CVE-2009-4663

CVE-2009-4663 affects Quiksoft EasyMail Objects AddAttachments() ActiveX Control (part of the EasyMail Objects suite). The vulnerability is a heap-based buffer overflow in the AddAttachment method that can be triggered by sending a long argument, enabling remote code execution. Multiple connected...

CVE-2010-0919

Stack-based buffer overflow in the Lotus Domino Web Access ActiveX control in IBM Lotus iNotes aka Domino Web Access or DWA 6.5, 7.0 before 7.0.4, 8.0, 8.0.2, and before 229.281 for Domino 8.0.2 FP4 allows remote attackers to execute arbitrary code via a long URL argument to an unspecified method...