JcomBand toolbar on IE - ActiveX Buffer Overflow

JcomBand Exploit heap spray // Author: germayax & D3V!L FUCKER // Version: 2.5 // special thanx: for my best friend his0k4. // Geetz 2 :Sarbot511 ,thrid-devil. //calc from metasploit shellcode =...

JcomBand toolbar on IE ActiveX Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ====================================================== JcomBand toolbar on IE ActiveX Buffer Overflow Exploit ====================================================== JcomBand Exploit heap spray // Author: germayax & D3V!L FUCKER // Software...

JcomBand toolbar on IE - ActiveX Buffer Overflow

JcomBand toolbar on IE - ActiveX Buffer Overflow JcomBand Exploit heap spray // Author: germayax & D3V!L FUCKER // Version: 2.5 // special thanx: for my best friend his0k4. // Geetz 2 :Sarbot511 ,thrid-devil. //calc from metasploit shellcode =...

PT-2010-1407 · Awingsoft · Awingsoft Awakening Web3D Player +3

Name of the Vulnerable Software and Affected Versions: AwingSoft Awakening Web3D Player and Winds3D Viewer versions 3.5.0.0 Beta, 3.0.0.5, and earlier Description: The issue is related to a heap-based buffer overflow in the WindsPlayerIE.View.1 ActiveX control in WindsPly.ocx. This can be trigger...

迅雷5 XPPlayer Activex控件远程代码执行0day漏洞

Xunlei 是一款在线加速下载程序。更多详细信息请参考： http://www.xunlei.com F3E70CEA-956E-49CC-B444-73AFE593AD7F Xunlei 提供的XPPlayer ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 问题存在于DapFileSize，VodUrl等方法处理中，由于对参数缺少充分过滤，构建恶意WEB页，诱使用户访问，可导致以应用程序权限执行任意指令。 Xunlei5.9.14.1246以下所有版本 使用网际快车或QQ旋风代替迅雷下载 www.xunlei.com...

Touch22 Image22 ActiveX Control Buffer Overflow

Touch22 Image22 ActiveX is an application to create images for Microsoft Windows. A buffer overflow vulnerability has been discovered in Touch22 Image22 ActiveX. The vulnerability is due to an error in the application that fails to properly bounds check user-supplied data before copying it into a...

MW6 Technologies Barcode.dll ActiveX Control Buffer Overflow (CVE-2009-0298)

MW6 Technologies is a provider of barcode software. As part of its software MW6 Technologies includes various ActiveX controls that are used to process the barcode data. One of these ActiveX controls is barcode.dll. There exists a heap-based buffer overflow vulnerability in MW6 Technologies...

Symantec Altiris Deployment Solution ActiveX Control Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Symantec Altiris...

NCTAudioFile2 v2.x ActiveX Control SetFormatLikeSample() Buffer Overflow

$Id: nctaudiofile2setformatlikesample.rb 7867 2009-12-15 00:32:07Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

AwingSoft Winds3D Player 3.5 SceneURL Download and Execute

$Id: awingsoftwinds3dsceneurl.rb 7724 2009-12-06 05:50:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Oracle Document Capture 10g ActiveX Control Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Oracle Document...

Persits XUpload ActiveX MakeHttpRequest Directory Traversal

$Id: persitsxuploadtraversal.rb 7760 2009-12-08 21:24:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

HP LoadRunner 9.0 ActiveX AddFolder Buffer Overflow

$Id: hploadrunneraddfolder.rb 7724 2009-12-06 05:50:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Persits XUpload ActiveX AddFile Buffer Overflow

$Id: hploadrunneraddfile.rb 7724 2009-12-06 05:50:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

SoftCab Sound Converter Active-X Insecure Method

Exploited By : ThE g0bL!N function Doit File = "Dz.exe" dz.SaveFormatFile SoftCab Sound Converter ActiveX sndConverter.ocx Insecure Method Exploit...

CVE-2009-4453

Insecure method vulnerability in SoftCab Sound Converter ActiveX control sndConverter.ocx 1.2 allows remote attackers to create or overwrite arbitrary files via the SaveFormat method. NOTE: some of these details are obtained from third party information...

Design/Logic Flaw

Insecure method vulnerability in SoftCab Sound Converter ActiveX control sndConverter.ocx 1.2 allows remote attackers to create or overwrite arbitrary files via the SaveFormat method. NOTE: some of these details are obtained from third party information...

CVE-2009-4453

The CVE-2009-4453 issue affects SoftCab Sound Converter ActiveX control (sndConverter.ocx) version 1.2. The vulnerability stems from an insecure SaveFormat method that enables remote attackers to create or overwrite arbitrary files. This is documented across CVE/NVD entries as an insecure method ...

CVE-2009-4453

Insecure method vulnerability in SoftCab Sound Converter ActiveX control sndConverter.ocx 1.2 allows remote attackers to create or overwrite arbitrary files via the SaveFormat method. NOTE: some of these details are obtained from third party information...

SuSE9 Security Update : IBM Java 1.5.0 (YOU Patch Number 12564)

IBM Java 5 was updated to Service Refresh 11. It fixes lots of bugs and security issues. It also contains a timezone update for the current Fiji change timezone 1.6.9s. The update fixes the following security issues : - A vulnerability in the Java Runtime Environment with decoding DER encoded dat...