iDefense COMRaider - ActiveX Control Multiple Insecure Method Vulnerabilities

iDefense COMRaider - ActiveX Control Multiple Insecure Method Vulnerabilities source: https://www.securityfocus.com/bid/35725/info The iDefense COMRaider ActiveX control is prone to multiple insecure-method vulnerabilities. Successfully exploiting these issues allows remote attackers to create...

iDefense COMRaider - ActiveX Control Multiple Insecure Method Vulnerabilities

source: https://www.securityfocus.com/bid/35725/info The iDefense COMRaider ActiveX control is prone to multiple insecure-method vulnerabilities. Successfully exploiting these issues allows remote attackers to create arbitrary directories and copy arbitrary local files. This may lead to a...

Integrity Clientless Security (ICS) Update 3.7.267.0

Check Point Integrity ™ Clientless Security ICS protects your Web site by detecting and disabling spyware processes and allowing you to enforce security policies before a user logs onto your network. Using ICS you can prevent users with potentially harmful software from accessing your Web site, a...

McAfee 3.6.0.608 naPolicyManager.dll ActiveX Arbitrary Data Write Vuln

Exploit for windows platform in category remote exploits ====================================================================== McAfee 3.6.0.608 naPolicyManager.dll ActiveX Arbitrary Data Write Vuln ====================================================================== McAfee, Inc. 3.6.0.608 Poli...

McAfee 3.6.0.608 - naPolicyManager.dll ActiveX Arbitrary Data Write

McAfee 3.6.0.608 - naPolicyManager.dll ActiveX Arbitrary Data Write GOODFELLAS Security Research TEAM http://goodfellas.shellcode.com.ar Greetings to str0ke McAfee, Inc. 3.6.0.608 Policy Manager naPolicyManager.dll Arbitrary Data Write...

Microsoft IE缓存内容跨域信息泄露漏洞(MS09-019)

BUGTRAQ ID: 35200 CVECAN ID: CVE-2009-1140 Internet Explorer是Windows操作系统中默认捆绑的WEB浏览器。 Internet Explorer缓存数据的方式存在一个信息泄露漏洞，可错误地允许调用缓存内容，从而绕过Internet Explorer区域限制。 Internet Explorer提供了URL安全区域功能，根据可信任程度对网站和应用定义了不同的权限组。默认下，所有不在“本地Intranet”区中且没有明确在 “受限站点”或“可信站点”中所列出的站点都分配到了Internet区域中，默认的安全区设置为“中-高”。...

Microsoft IE DHTML和HTML对象多个内存破坏漏洞(MS09-019)

BUGTRAQ ID: 35198,35222,35223,35224,35234,35235 CVECAN ID: CVE-2009-1141,CVE-2009-1528,CVE-2009-1529,CVE-2009-1530,CVE-2009-1531,CVE-2009-1532 Internet Explorer是Windows操作系统中默认捆绑的WEB浏览器。 Internet Explorer在解析网页中的DHTML和HTML对象时存在多个内存破坏和未初始化或已删除对象访问漏洞。如果用户受骗访问了恶意网页，就可能导致拒绝服务或执行任意代码。 Microsoft Internet...

SAP AG SAPgui sapirrfc.dll ActiveX控件缓冲区溢出漏洞

BUGTRAQ ID: 35256 SAPgui是SAP软件的图形用户界面客户端。 SAP GUI所捆绑的SAPIrRfc ActiveX组件（sapirrfc.dll，GUID = F6908F83-ADA6-11D0-87AA-00AA00198702）没有正确的验证用户对Accept函数所传送的参数。如果用户受骗访问了恶意网页并向该函数传送了超长参数的话，就可能触发缓冲区溢出，导致在目标系统上执行任意代码。 SAP Sapgui 6.4 厂商补丁： SAP --- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

CORE-2008-0826 - Internet Explorer Security Zone restrictions bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Internet Explorer Security Zone restrictions bypass 1. Advisory Information Title: Internet Explorer Security Zone restrictions bypass Advisory ID: CORE-2008-0826...

Core Security Technologies Advisory 2008.0826

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Internet Explorer Security Zone restrictions bypass 1. Advisory Information Title: Internet Explorer Security Zone restrictions bypass Advisory ID: CORE-2008-0826...

MS KB969898: Cumulative Security Update of ActiveX Kill Bits

The remote host is missing a list of kill bits for ActiveX controls that are known to contain vulnerabilities. If these ActiveX controls are ever installed on the remote host, either now or in the future, they would expose it to various security issues. %NASLMINLEVEL 70300 C Tenable Network...

Code injection

eBay Enhanced Picture Uploader ActiveX control EPUWALcontrol.dll before 1.0.27 allows remote attackers to execute arbitrary commands via the PictureUrls property...

CVE-2008-2475

eBay Enhanced Picture Uploader ActiveX control EPUWALcontrol.dll before 1.0.27 allows remote attackers to execute arbitrary commands via the PictureUrls property...

CVE-2008-2475

The CVE-2008-2475 entry concerns the eBay Enhanced Picture Uploader ActiveX control (EPUWALcontrol.dll) prior to version 1.0.27. The underlying flaw allows remote command execution through the PictureUrls property when the ActiveX control is used in a page, enabling arbitrary commands to run with...

Worldweaver DX Studio Player shell.execute() Command Execution

This module exploits a command execution vulnerability within the DX Studio Player from Worldweaver for versions 3.0.29 and earlier. The player is a browser plugin for IE ActiveX and Firefox dll. When an unsuspecting user visits a web page referring to a specially crafted .dxstudio document, an...

eBay Enhanced Picture Uploader ActiveX control vulnerable to arbitrary command execution

Overview The eBay Enhanced Picture Uploader ActiveX control allows arbitrary commands to be executed. Description The eBay Enhanced Picture Uploader ActiveX control is used by the eBay web site to give Internet Explorer users additional functionality when uploading pictures to an auction. This...

Internet Explorer Security Zone restrictions bypass

Advisory ID Internal CORE-2008-0826 1. Advisory Information Title: Internet Explorer Security Zone restrictions bypass Advisory ID: CORE-2008-0826 Date published: 2009-06-09 Date of last update: 2009-06-09 Vendors contacted: Microsoft Release mode: Coordinated release 2. Vulnerability Information...

SAP GUI 6.4 ActiveX (Accept) Remote Buffer Overflow PoC

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-09-015 Original Advisory: http://dsecrg.com/pages/vul/show.php?id=115 Application: SAP GUI for Windows, EnjoySAP Versions Affected: Version 6.4 Vendor URL: http://SAP.com Bugs: Buffer Overflow Exploits: YES...

SAP GUI 6.4 - ActiveX (Accept) Remote Buffer Overflow (PoC)

SAP GUI 6.4 - ActiveX Accept Remote Buffer Overflow PoC Digital Security Research Group DSecRG Advisory DSECRG-09-015 Original Advisory: http://dsecrg.com/pages/vul/show.php?id=115 Application: SAP GUI for Windows, EnjoySAP Versions Affected: Version 6.4 Vendor URL: http://SAP.com Bugs: Buffer...

[DSECRG-09-015] SAP GUI 6.4 Buffer Overflow vulnerability

Digital Security Research Group DSecRG Advisory DSECRG-09-015 Original Advisory: http://dsecrg.com/pages/vul/show.php?id=115 Application: SAP GUI for Windows, EnjoySAP Versions Affected: Version 6.4 Vendor URL: http://SAP.com Bugs: Buffer Overflow Exploits: YES Reported: 13.11.2008 Vendor respons...