迅雷看看 3.1.0 AvtiveX控件信息泄露漏洞

迅雷看看是迅雷公司出品的一款支持在线播放的视频播放软件 它所包含的DapCtrl控件包含有信息泄露漏洞 利用特殊构造的网页，攻击者可能通过调用.IsFileExist（文件名）方法获得返回值来发现是否存在本地文件，进而展开其他攻击。利用此漏洞攻击者无法获得文件的内容。 迅雷看看 = 3.2.0.248 临时解决方法： 为CLSID：ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8设置kill-bit。 厂商补丁： 迅雷网络技术有限公司 --------------------...

Yahoo Instant Messenger ActiveX DoS

Null pointer dereference...

EasyMail Objects EMSMTP.DLL 6.0.1 ActiveX Control Remote Buffer Overflow Vulnerability

No description provided by source. !-- Postcast Server Pro 3.0.61 / Quiksoft EasyMail SMTP Object emsmtp.dll 6.0.1 remote buffer overflow exploit ie6 / xp sp2 version passing more than 539 chars to SubmitToExpress method: EAX 00000400 ECX 0013DD24 ASCII "Error Creating File: AAAA ... EDX C0403FFF...

Yahoo! Messenger 9.0.0.2162 - YahooBridgeLib.dll ActiveX Control Remote Denial of Service

Yahoo! Messenger 9.0.0.2162 - YahooBridgeLib.dll ActiveX Control Remote Denial of Service arg1=String11284, "A" target.RegisterMe arg1...

Yahoo! Messenger 9 - YahooBridgeLib.dll ActiveX Control Remote Denial of Service

Yahoo! Messenger 9 - YahooBridgeLib.dll ActiveX Control Remote Denial of Service source: https://www.securityfocus.com/bid/37007/info Yahoo! Messenger is prone to a denial-of-service vulnerability because of a NULL-pointer dereference error. A successful attack allows a remote attacker to crash t...

Yahoo! Messenger 9.0.0.2162 'YahooBridgeLib.dll' ActiveX Control Remote Denial of Service

No description provided by source. ?XML version='1.0' standalone='yes' ? packagejob id='DoneInVBS' debug='false' error='true' object classid='clsid:58916BE6-BAFF-4F33-AEFE-B2AA03FE4C86' id='target' / script language='vbscript' arg1=String11284, "A" target.RegisterMe arg1 /script /job /package...

EasyMail Objects EMSMTP.DLL 6.0.1 ActiveX Control Remote BOF

Exploit for unknown platform in category remote exploits ====================================================================================== EasyMail Objects EMSMTP.DLL 6.0.1 ActiveX Control Remote Buffer Overflow Vulnerability...

Yahoo! Messenger 9.0.0.2162 'YahooBridgeLib.dll' ActiveX Control Remote

Exploit for unknown platform in category dos / poc ========================================================================================= Yahoo! Messenger 9.0.0.2162 'YahooBridgeLib.dll' ActiveX Control Remote Denial of Service...

EasyMail Objects 'EMSMTP.DLL 6.0.1' - ActiveX Control Remote Buffer Overflow

!-- Postcast Server Pro 3.0.61 / Quiksoft EasyMail SMTP Object emsmtp.dll 6.0.1 remote buffer overflow exploit ie6 / xp sp2 version passing more than 539 chars to SubmitToExpress method: EAX 00000400 ECX 0013DD24 ASCII "Error Creating File: AAAA ... EDX C0403FFF EBX FFFFFFFF ESP 0013D5E4 EBP...

EasyMail Objects EMSMTP.DLL 6.0.1 - ActiveX Control Remote Buffer Overflow

EasyMail Objects EMSMTP.DLL 6.0.1 - ActiveX Control Remote Buffer Overflow !-- Postcast Server Pro 3.0.61 / Quiksoft EasyMail SMTP Object emsmtp.dll 6.0.1 remote buffer overflow exploit ie6 / xp sp2 version passing more than 539 chars to SubmitToExpress method: EAX 00000400 ECX 0013DD24 ASCII...

Yahoo! Messenger 9 - 'YahooBridgeLib.dll' ActiveX Control Remote Denial of Service

source: https://www.securityfocus.com/bid/37007/info Yahoo! Messenger is prone to a denial-of-service vulnerability because of a NULL-pointer dereference error. A successful attack allows a remote attacker to crash the application using the ActiveX control typically Internet Explorer, denying...

Yahoo! Messenger 9.0.0.2162 - 'YahooBridgeLib.dll' ActiveX Control Remote Denial of Service

arg1=String11284, "A" target.RegisterMe arg1...

Novell Groupwise Client ActiveX Control Buffer Overflow Vulnerability

This host is installed with Novell Groupwise Client ActiveX Control and is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: gbnovellgroupwiseclientactivexbofvuln.nasl 8201 2017-12-20 14:28:50Z cfischer $ Novell Groupwise Client ActiveX Control Buffer Overflow Vulnerability...

Novell Groupwise Client ActiveX Control Buffer Overflow Vulnerability

Novell Groupwise Client ActiveX Control is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Symantec Multiple Products AeXNSConsoleUtilities Buffer Overflow

Added: 11/06/2009 CVE: CVE-2009-3031 BID: 36698 OSVDB: 59597 Background Symantec Altiris Deployment Solution provides tools to deploy software on desktops and servers. Problem A stack buffer overflow vulnerability in the AeXNSConsoleUtilities.dll ActiveX control allows remote attackers to execute...

Symantec Multiple Products AeXNSConsoleUtilities Buffer Overflow

Added: 11/06/2009 CVE: CVE-2009-3031 BID: 36698 OSVDB: 59597 Background Symantec Altiris Deployment Solution provides tools to deploy software on desktops and servers. Problem A stack buffer overflow vulnerability in the AeXNSConsoleUtilities.dll ActiveX control allows remote attackers to execute...

Symantec Multiple Products AeXNSConsoleUtilities Buffer Overflow

Added: 11/06/2009 CVE: CVE-2009-3031 BID: 36698 OSVDB: 59597 Background Symantec Altiris Deployment Solution provides tools to deploy software on desktops and servers. Problem A stack buffer overflow vulnerability in the AeXNSConsoleUtilities.dll ActiveX control allows remote attackers to execute...

Symantec Multiple Products AeXNSConsoleUtilities Buffer Overflow

Added: 11/06/2009 CVE: CVE-2009-3031 BID: 36698 OSVDB: 59597 Background Symantec Altiris Deployment Solution provides tools to deploy software on desktops and servers. Problem A stack buffer overflow vulnerability in the AeXNSConsoleUtilities.dll ActiveX control allows remote attackers to execute...

Symantec Altiris ConsoleUtilities ActiveX控件缓冲区溢出漏洞

Bugraq ID: 36698 CVE ID：CVE-2009-3031 Symantec Altiris Deployment Solution是自动化的操作系统部署解决方案，用于从统一的位置部署和管理服务器、桌面和笔记本等。 在初次访问Altiris Deployment Solution等产品管理服务器的管理WEB站点时会安装一个ActiveX控件AeXNSConsoleUtilities.dll，此函数"BrowseAndSaveFile"存在一个基于栈的缓冲区溢出： Name: ConsoleUtilities Class Vendor: Altiris, Inc. Type...

BlackBerry桌面管理器ActiveX控件远程代码执行漏洞

Bugraq ID: 36903 CVE ID：CVE-2009-0306 BlackBerry Desktop Manager是一款用于管理黑莓智能手机的桌面管理器。 BlackBerry桌面管理器默认包含使用的Lotus Notes Intellisync DLL存在安全问题，远程攻击者可以利用漏洞以登录用户进程权限执行任意指令。 攻击者可以诱使用户点击恶意WEB站点链接如嵌入在EMAIL消息，浏览器或即使消息中触发此漏洞。 Research In Motion Blackberry Desktop Manager 4.2.2 + Macrovision FLEXnet Connec...