BaoFeng Storm mps.dll ActiveX OnBeforeVideoDownload Buffer Overflow

$Id: baofengstormonbeforevideodownload.rb 8685 2010-03-02 02:26:55Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Viscom Image Viewer CP Pro 8.0/Gold 6.0 ActiveX Control

This module exploits a stack based buffer overflow in the Active control file ImageViewer2.OCX by passing an overly long argument to an insecure TifMergeMultiFiles method. Exploitation results in code execution with the privileges of the user who browsed to the exploit page. The victim will first...

Microsoft OWC Spreadsheet msDataSourceObject Memory Corruption

$Id: ms09043owcmsdso.rb 8686 2010-03-02 07:50:25Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

Buffer Overflow Flaw in Lotus' iNotes

The Lotus iNotes ActiveX control for reading email from within a browser contains a programming error which can result in a buffer overflow. This could be exploited by an attacker to infect an iNotes user with spyware on visiting a crafted web page. Read the full article. The H Security...

DATEV eG ActiveX code execution

ExecuteExe unsafe method allows code execution...

Hyleos ChemView ActiveX Control Multiple Buffer Overflow Vulnerabilities

This host is installed with Hyleos ChemView ActiveX Control and is prone to multiple Buffer Overflow vulnerabilities. OpenVAS Vulnerability Test $Id: secpodhyleoschemviewactivexmultbofvuln.nasl 6532 2017-07-05 07:42:05Z cfischer $ Hyleos ChemView ActiveX Control Multiple Buffer Overflow...

NSOADV-2010-003: DATEV ActiveX Control remote command execution

NSOADV-2010-003: DATEV ActiveX Control remote command execution 111101111 11111 00110 00110001111 111111 01 01 1 11111011111111 11111 0 11 01 0 11 1 1 111011001 11111111101 1 11 0110111 1 1111101111 1001 0 1 10 11 0 10 11 1111111 1 111 111001 111111111 0 10 1111 0 11 11 111111111 1 1101 10 00111 ...

Hyleos ChemView ActiveX Control Multiple Buffer Overflow Vulnerabilities

Hyleos ChemView ActiveX Control is prone to multiple Buffer Overflow vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Google Researcher Ships Exploit to Defeat ASLR+DEP

A prominent security researcher has released an exploit that uses a new technique to defeat ALSR + DEP on Microsoft’s Windows operating system. The exploit, released by Google security researcher “SkyLined,” uses the ret-into-libc technique to bypass DEP Data Execution Prevention and launch code...

getPlus insufficient domain name validation vulnerability

------------------------------------------------------------------------ getPlus insufficient domain name validation vulnerability ------------------------------------------------------------------------ Yorick Koster, April 2009...

getPlus ActiveX code execution

Insufficient validation of domain name...

CVE-2010-0689

The ExecuteExe method in the DVBSExeCall Control ActiveX control 1.0.0.1 in DVBSExeCall.ocx in DATEV Base System aka Grundpaket Basis allows remote attackers to execute arbitrary commands via unspecified vectors...

Design/Logic Flaw

The ExecuteExe method in the DVBSExeCall Control ActiveX control 1.0.0.1 in DVBSExeCall.ocx in DATEV Base System aka Grundpaket Basis allows remote attackers to execute arbitrary commands via unspecified vectors...

CVE-2010-0689

The ExecuteExe method in the DVBSExeCall Control ActiveX control 1.0.0.1 in DVBSExeCall.ocx in DATEV Base System aka Grundpaket Basis allows remote attackers to execute arbitrary commands via unspecified vectors...

CVE-2010-0689

The CVE-2010-0689 entry concerns DATEV Base System (Grundpaket Basis) DVBSExeCall.ocx ActiveX Control, version 1.0.0.1, whose ExecuteExe function is vulnerable to remote command execution. The vulnerability is triggered via unspecified vectors in the DVBSExeCall ActiveX control, allowing remote a...

iDefense Security Advisory 02.23.10: Multiple Vendor NOS Microsystems getPlus Downloader Input Validation Vulnerability

iDefense Security Advisory 02.23.10 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 23, 2010 I. BACKGROUND The getPlus Downloader is an application download and installation manager, distributed in the form of an ActiveX control. This control is used by Adobe Systems Inc. to install...

Symantec multiple antiviral applications buffer overflow

Buffer overflow on content parsing. Buffer overflow in ActiveX...

[DSECRG-09-039] Symantec Antivirus 10.0 ActiveX - buffer Overflow.

Digital Security Research Group DSecRG Advisory DSECRG-09-039 Application: Symantec Antivirus Client Proxy Versions Affected: Version 10 Vendor URL: http://symantec.com Bugs: Buffer Overflow Exploits: POC Reported: 04.05.2009 Vendor response: 07.05.2009 Date of Public Advisory: 17.02.2010...

CVE-2010-0189

A certain ActiveX control in NOS Microsystems getPlus Download Manager aka DLM or Downloader 1.5.2.35, as used in Adobe Download Manager, improperly validates requests involving web sites that are not in subdomains, which allows remote attackers to force the download and installation of arbitrary...

Buffer overflow

Buffer overflow in an ActiveX control SYMLTCOM.dll in Symantec N360 1.0 and 2.0; Norton Internet Security, AntiVirus, SystemWorks, and Confidential 2006 through 2008; and Symantec Client Security 3.0.x before 3.1 MR9, and 3.1.x before MR9; allows remote attackers to cause a denial of service cras...