SoftCab Sound Converter - 'sndConverter.ocx' ActiveX Insecure Method

Exploited By : ThE g0bL!N function Doit File = "Dz.exe" dz.SaveFormatFile SoftCab Sound Converter ActiveX sndConverter.ocx Insecure Method Exploit...

SoftCab Sound Converter ActiveX Insecure Method Exploit (sndConverter.ocx)

No description provided by source. !-- Author: ThE g0bL!N Software Link: http://www.softcab.com/ftp/converteractivex.zip Version: Tested on: Xp sp2 -- titleExploited By : ThE g0bL!N /title BODY object id=dz classid="clsid:66757BFC-DA0C-41E6-B3FE-B6D461223FF5"/object SCRIPT function Doit File =...

SoftCab Sound Converter ActiveX Insecure Method Exploit

Exploit for unknown platform in category web applications ========================================================================== SoftCab Sound Converter ActiveX Insecure Method Exploit sndConverter.ocx ========================================================================== Exploited By : T...

SoftCab Sound Converter - sndConverter.ocx ActiveX Insecure Method

SoftCab Sound Converter - sndConverter.ocx ActiveX Insecure Method Exploited By : ThE g0bL!N function Doit File = "Dz.exe" dz.SaveFormatFile SoftCab Sound Converter ActiveX sndConverter.ocx Insecure Method Exploit...

Novell iPrint Client ActiveX Control Multiple Buffer Overflows (CVE-2008-2431)

Novell iPrint Client is an application that allows users to install and manage printers, or submit print job from a web browser. Novell iPrint Client is bundled with a set of ActiveX controls that implement various functions. There exist multiple buffer overflow vulnerabilities in Novell iPrint...

Special ActiveX repurposing attacks tips and techniques-vulnerability warning-the black bar safety net

Copyright c 2 0 0 9 Czy Invicta Hack01@Live! cn All rights reserved. == 0x00 Foreword In this article, I am not against ActiveX controls the basic attack scenarios will be discussed. I'm here to be discussed is the use of a lot of interesting tricks and techniques to the development and utilizati...

CA eTrust PestPatrol Anti-Spyware 'ppctl.dll' ActiveX Control BOF Vulnerability

This host is installed with CA eTrust PestPatrol Anti-Spyware and is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: gbetrustpestpatrolactvxctrlbofvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ CA eTrust PestPatrol Anti-Spyware 'ppctl.dll' ActiveX Control BOF Vulnerability...

CA eTrust PestPatrol Anti-Spyware 'ppctl.dll' ActiveX Control BOF Vulnerability

CA eTrust PestPatrol Anti-Spyware is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SAP RFC SDK — Memory Corruption

Application: RFC SDK SAP AG Versions Affected: RFC SDK 6400-7.20 and SAP GUI 7.10-7.20 Vendor URL: Bugs: Buffer Overflow Exploits: YES Reported: 16.12.2009 Vendor response: 16.12.2009 Date of SAP Security Note Published: 14.09.2010 Date of Public Advisory: 14.12.2010 Author: Alexey Sintsov...

SAP GUI WebViewer3D ActiveX Control Arbitrary File Overwrite (CVE-2007-4475)

The SAP GUI is the GUI client in SAP's 3-tier architecture of database, application server and client. A vulnerability was reported in the SAP GUI. The vulnerability is caused due to a boundary error in the bundled EAI WebViewer3D ActiveX control webviewer3d.dll when processing arguments passed t...

HP LoadRunner XUpload.ocx ActiveX Control Arbitrary File Download

An arbitrary file download vulnerability exists in an HP LoadRunner ActiveX control. The vulnerability is due to a design flaw in a certain method. The method can be leveraged by attackers to execute arbitrary programs on the vulnerable host...

SAP RFC SDK — Format String

Application: RFC SDK SAP AG Versions Affected: RFC SDK 6.40 7.11 Vendor URL: Bugs: Format String Vulnerability Exploits: YES Reported: 15.12.2009 Vendor response: 18.12.2009 Date of SAP Security Note Published: 14.09.2010 Date of Public Advisory: 14.12.2010 Author: Alexey Sintsov Description SAP...

Facebook Photo Uploader ActiveX Control FileMask Method Buffer Overflow (CVE-2008-0660)

Facebook is a social networking website which allows its users to publish their photos. The website publishes an ActiveX control, ImageUploader4.ocx, to assist photo uploading. A buffer overflow vulnerability exists in the Facebook Photo Uploader ActiveX control. The flaw is due to a boundary err...

Oracle Document Capture ActiveX — Insecure method, buffer overflow

Application: Oracle Document Capture Versions Affected: Oracle Document Capture 10.1.3.5 Vendor URL: Bugs: Insecure method. Buffer overflow. Exploits: YES Reported: 14.12.2009 Vendor response: 15.12.2009 Date of Public Advisory: 24.01.2011 CVE-number: CVE-2010-3599 Author: Alexandr Polyakov...

Microsoft VB Common Controls Animation Object Buffer Overflow (MS08-070; CVE-2008-4255)

The Microsoft Visual Studio 6.0 integrated development environment IDE suite is designed for building Windows based applications and Web solutions. The product contains several tools which can be used to design programs in languages such as Visual C++, or Visual Basic. Microsoft Basic 6.0 is...

Internet Explorer COM Object Instantiation Memory Corruption (CVE-2006-4495)

Microsoft Internet Explorer allows HTML documents to embed ActiveX controls for the authoring of dynamic web content. ActiveX controls are based on Component Object Model COM technology. The invocation of an ActiveX control is performed by Internet Explorer by internally instantiating an object. ...

Microsoft IE XHTML DOM操控内存破坏漏洞（MS09-072）

BUGTRAQ ID: 37188 CVE ID: CVE-2009-3671 Internet Explorer是Windows操作系统中默认捆绑的WEB浏览器。 Internet Explorer操控和解析某些HTML标签的方式存在内存破坏漏洞，以畸形方式获得各种对象会导致调用悬浮指针，这可以通过heap spray进一步利用。攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。成功利用此漏洞的攻击者可以获得与登录用户相同的用户权限。 Microsoft Internet Explorer 8.0 临时解决方法： 将Internet...

Adobe Flash Player ActiveX控件信息泄漏漏洞

Bugraq ID: 37272 CVE ID：CVE-2009-3951 Adobe Flash Player是一款Flash文件处理程序。 Flash Player ActiveX控件中漏洞，允许获得windows平台本地文件名，导致敏感信息泄漏。 攻击者可以构建恶意WEB页，诱使用户访问来触发。 Adobe Flex 3.0 Adobe Flash Player 10.0.32 18 Adobe Flash Player 10.0.22 .87 Adobe Flash Player 10.0.15 .3 Adobe Flash Player 10.0.12 .36 Adobe...

Microsoft IE CAttrArray对象远程代码执行漏洞（MS09-072）

BUGTRAQ ID: 37213 CVE ID: CVE-2009-3674 Internet Explorer是Windows操作系统中默认捆绑的WEB浏览器。 Internet Explorer在解除分配对CAttrArray对象的循环引用期间存在内存破坏漏洞。如果在关闭网页之前释放了CAttrArray对象，IE在解除分配循环指针期间会访问已释放的内存，这可能导致以当前登录用户的权限执行任意指令。 Microsoft Internet Explorer 8.0 临时解决方法： 将Internet...

Design/Logic Flaw

Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 on Windows allows remote attackers to obtain the names of local files via unknown vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-482...