Microsoft Windows Defender - ActiveX Heap Overflow (PoC)

Exploits title :Microsoft Windows Defender ActiveX Heap Overflow PoC tested on :windows 7 Microsoft Windows Defender targetFile = "C:\Program Files\Windows Defender\MsMpCom.dll" prototype = "Sub DeleteValue ByVal bstrKeyName As String , ByVal bstrValueName As String " memberName = "DeleteValue"...

AOL 9.5 - ActiveX Heap Overflow

AOL 9.5 - ActiveX Heap Overflow Product: AOL 9.5 Vulnerability: ActiveX - Heap Overflow Discussion: Vulnerability is in Activex Control "CDDBControl.dll" Sending a string to BindToFile , triggering the vulnerability. Successful exploitation allow remote attackers to execute arbitrary code. Credit...

AOL 9.5 ActiveX Heap Overflow Vulnerability

Exploit for unknown platform in category remote exploits =========================================== AOL 9.5 ActiveX Heap Overflow Vulnerability =========================================== Product: AOL 9.5 Vulnerability: ActiveX - Heap Overflow Discussion: Vulnerability is in Activex Control...

AOL 9.5 Heap Overflow

Product: AOL 9.5 Vulnerability: ActiveX - Heap Overflow Discussion: Vulnerability is in Activex Control "CDDBControl.dll" Sending a string to BindToFile , triggering the vulnerability. Successful exploitation allow remote attackers to execute arbitrary code. Credits: Celil 'karak0rsan' Unuver and...

Microsoft Windows Defender - ActiveX Heap Overflow (PoC)

Microsoft Windows Defender - ActiveX Heap Overflow PoC Exploits title :Microsoft Windows Defender ActiveX Heap Overflow PoC tested on :windows 7 Microsoft Windows Defender targetFile = "C:\Program Files\Windows Defender\MsMpCom.dll" prototype = "Sub DeleteValue ByVal bstrKeyName As String , ByVal...

IE的ActiveX本地执行代码漏洞

clsid:F935DC22-1CF0-11D0-ADB9-00C04FD58A0B 这段代码运行后并不会立即执行，它会向注册表中写入一个启动项，重启后就可以看到结果了！ IE6,7,8 暂时使用其它非IE内核的浏览器 html object classid='clsid:F935DC22-1CF0-11D0-ADB9-00C04FD58A0B' id='target' /object script language='vbscript' targetFile = "c:\WINDOWS\system32\wshom.ocx" prototype = "Sub RegWrite ByVa...

CVE-2010-0356

Stack-based buffer overflow in the MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX control in MoviePlayer.ocx 6.8.0.0 in Viscom Software Movie Player Pro SDK ActiveX 6.8 allows remote attackers to execute arbitrary code via a long strFontName parameter to the DrawText method...

Stack overflow

Stack-based buffer overflow in the MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX control in MoviePlayer.ocx 6.8.0.0 in Viscom Software Movie Player Pro SDK ActiveX 6.8 allows remote attackers to execute arbitrary code via a long strFontName parameter to the DrawText method...

CVE-2010-0356

Viscom Software Movie Player Pro SDK ActiveX 6.8 exposes a stack-based buffer overflow in MOVIEPLAYER.MoviePlayerCtrl.1 (MoviePlayer.ocx 6.8.0.0). A long strFontName passed to DrawText can allow remote code execution. Public exploits exist (Metasploit and others) and show attacker-hosted pages or...

CVE-2010-0356

Stack-based buffer overflow in the MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX control in MoviePlayer.ocx 6.8.0.0 in Viscom Software Movie Player Pro SDK ActiveX 6.8 allows remote attackers to execute arbitrary code via a long strFontName parameter to the DrawText method...

Windows Media Player 11 ActiveX launchURL() files download

No description provided by source. !------- This is a vulnerability into Windows Media Player ActiveX launchURL function which someone can download what ever file into the vulnerable machine !!! Discovered and written by Jacky! Tested version: 11.0.5358.4827 Tested machine: Windows XP SP3 & Windo...

Gracenote CDDBControl - ActiveX Control 'ViewProfile' Method Heap Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/37834/info Gracenote CDDBControl is prone to a stack-based buffer-overflow vulnerability because the application fails to adequately check boundaries on user-supplied input. An attacker can exploit this issue to execute arbitrary code in the context of th...

PT-2010-2142 · Viscom · Viscom Software Movie Player Pro Sdk Activex

Name of the Vulnerable Software and Affected Versions: Viscom Software Movie Player Pro SDK ActiveX version 6.8.0.0 Description: The issue is related to a stack-based buffer overflow in the MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX control. This occurs when a long strFontName parameter is passed to t...

Gracenote CDDBControl - ActiveX Control ViewProfile Method Heap Buffer Overflow (PoC)

Gracenote CDDBControl - ActiveX Control ViewProfile Method Heap Buffer Overflow PoC source: https://www.securityfocus.com/bid/37834/info Gracenote CDDBControl is prone to a stack-based buffer-overflow vulnerability because the application fails to adequately check boundaries on user-supplied inpu...

MS KB979267: Flash 6 ActiveX Control On Windows XP Multiple Vulnerabilities

The Macromedia Flash Player 6 ActiveX control that comes bundled with Windows XP is installed on the remote host. This version has multiple memory corruption vulnerabilities. By tricking a user into viewing a specially crafted web page, a remote attacker may be able to exploit these issues to...

Baidu Security Center FireFoxProxy ActiveX Remote Exec 0day POC

No description provided by source. Exploit Title: Baidu Security Center FireFoxProxy ActiveX Remote Exec 0day POC Date: 2010.01.17 Author: superli Software Link: http://an.baidu.com/ Version: 2.0 Tested on: xpsp3 ie6 Greeting to all the guys of Baidu Security Center,please dont use Kingsoft sht t...

TrendMicro Web-Deployment ActiveX Remote Exec 0day POC

Exploit for unknown platform in category remote exploits ====================================================== TrendMicro Web-Deployment ActiveX Remote Exec 0day POC ====================================================== Exploit Title: TrendMicro Web-Deployment ActiveX Remote Exec 0day POC Date:...

QvodPlayer ColorFilter Codec ActiveX Remote Exec 0day POC

No description provided by source. Exploit Title: QvodPlayer ColorFilter Codec ActiveX Remote Exec 0day POC Date: 2010.01.17 Author: superli Software Link: http://www.qvod.com/ Version: 3.5.0 Tested on: xpsp3 ie6 most of the video player contain the ColoeFilter codec which offered by...

Adobe GetPlus get_atlcom ActiveX Remote Exec 0day POC

No description provided by source. Exploit Title: Adobe GetPlus getatlcom ActiveX Remote Exec 0day POC Date: 2010.01.17 Author: superli Software Link: http://get.adobe.com/flashplayer/?promoid=BUIGP Version: 1,6,2,48 Tested on: xpsp3 ie6 Code :...

Vulnerability Note VU#204889 Windows XP Macromedia Flash 6 ActiveX control use-after-free vulnerability

Vulnerability Note VU204889 Windows XP Macromedia Flash 6 ActiveX control use-after-free vulnerability Overview The Macromedia Flash ActiveX control that is provided with Windows XP contains a memory corruption vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary...