Garmin GPS navigator ActiveX unauthorized access

GARMINAXCONTROL.GarminAxControlt.1 ActiveX allows device access without user's confirmation...

Secunia Research: Garmin Communicator Plug-In Domain Locking Security Bypass

====================================================================== Secunia Research 07/05/2009 - Garmin Communicator Plug-In Domain Locking Security Bypass - ====================================================================== Table of Contents Affected...

暴风影音2009(Config.dll)ActiveX远程栈溢出漏洞

暴风影音是国内一款相当流行的万能播放器 http://www.baofeng.com/ clsid:BD103B2B-30FB-4F1E-8C17-D8F6AADBCC05 C:\Program Files\StormII\Config.dll Sub SetAttributeValue ByVal lpQueryStr As String , ByVal bstrAttributeName As String , ByVal lpValueStr As String 当参数lpQueryStr是一个超长字符串时，发生栈溢出，利用堆填充技术，攻击者可以很轻松的利用此漏洞执行任意代码 分析...

Symantec Norton Ghost Symantec.EasySetup.1 ActiveX控件拒绝服务漏洞

BUGTRAQ ID: 34696 CVECAN ID: CVE-2009-1517 Symantec Norton Ghost是一个备份恢复系统，允许用户将系统恢复到之前的快照状态。 Norton Ghost的EasySetup安装向导的EasySetupInt.dll库提供了名为Symantec.EasySetup.1的ActiveX控件，该控件没有正确地验证对GetBackupLocationPath、CallUninstall、SetupDeleteVolume、...

CVE-2009-1517

Multiple insecure method vulnerabilities in the Symantec.EasySetup.1 ActiveX control in EasySetupInt.dll 14.0.4.30167 in the EasySetup wizard in Symantec Norton Ghost 14.0 allow remote attackers to cause a denial of service browser crash and possibly execute arbitrary code via unspecified input t...

Design/Logic Flaw

Multiple insecure method vulnerabilities in the Symantec.EasySetup.1 ActiveX control in EasySetupInt.dll 14.0.4.30167 in the EasySetup wizard in Symantec Norton Ghost 14.0 allow remote attackers to cause a denial of service browser crash and possibly execute arbitrary code via unspecified input t...

CVE-2009-1516

Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp Merak Mail Server 9.4.1 might allow context-dependent attackers to execute arbitrary code via a large value in the second argument to the Base64FileEncode method, as possibly demonstrated by a web...

CVE-2009-1516

CVE-2009-1516 affects IceWarp Merak Mail Server 9.4.1, where the IceWarpServer.APIObject ActiveX control (api.dll) is vulnerable to a stack-based buffer overflow via a large value in the second argument of Base64FileEncode. This can lead to arbitrary code execution under context-dependent conditi...

CVE-2009-1517

Multiple insecure method vulnerabilities in the Symantec.EasySetup.1 ActiveX control in EasySetupInt.dll 14.0.4.30167 in the EasySetup wizard in Symantec Norton Ghost 14.0 allow remote attackers to cause a denial of service browser crash and possibly execute arbitrary code via unspecified input t...

CVE-2009-1516

Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp Merak Mail Server 9.4.1 might allow context-dependent attackers to execute arbitrary code via a large value in the second argument to the Base64FileEncode method, as possibly demonstrated by a web...

CVE-2009-1517

CVE-2009-1517 affects Symantec Norton Ghost 14.0, via the Symantec.EasySetup.1 ActiveX control in EasySetupInt.dll version 14.0.4.30167. The vulnerability arises from unvalidated input to six methods (GetBackupLocationPath, CallUninstall, SetupDeleteVolume, CanUseEasySetup, CallAddInitialProtecti...

暴风影音ActiveX控件OnBeforeVideoDownload()函数栈溢出漏洞

BUGTRAQ ID: 34789 暴风影音是在中国非常流行的万能多媒体播放软件。 暴风影音mps.dll库所提供的MPS.StormPlayer.1 ActiveX控件没有正确地验证对OnBeforeVideoDownload函数所传送的输入参数。如果用户受骗访问了恶意网页并向该函数提供了超长输入的话，就可以触发栈溢出，导致执行任意指令。 BaoFeng 暴风影音 2.9 BaoFeng 暴风影音 2.8 BaoFeng 暴风影音 2.7 临时解决方法： 为clsid：6BE52E1D-E586-474F-A6E2-1A85A9B4D9FB设置kill-bit。 厂商补丁： BaoFe...

Symantec WinFax ActiveX buffer overflow

Buffer overflow in Symantec Fax Viewer Control ActiveX...

BaoFeng ActiveX OnBeforeVideoDownload() Remote BOF Exploit

No description provided by source. BaoFeng mps.dll Remote Code Execution Exploit By: MITBOY Download: www.baofeng.com Problem DLL : mps.dll Problem Func : OnBeforeVideoDownload html body object classid="clsid:6BE52E1D-E586-474F-A6E2-1A85A9B4D9FB" id="target"/object input type="button"...

BaoFeng ActiveX OnBeforeVideoDownload() Remote BOF Exploit

Exploit for windows platform in category remote exploits ========================================================== BaoFeng ActiveX OnBeforeVideoDownload Remote BOF Exploit ========================================================== BaoFeng mps.dll Remote Code Execution Exploit By: MITBOY Download...

Symantec Fax Viewer Control ActiveX Control AppendFax Overflow

The version of the Symantec Fax Viewer Control ActiveX control, a component included with Symantec Winfax Pro and installed on the remote Windows host, reportedly contains a stack-based buffer overflow that can be triggered by calling the 'AppendFax' method with an overly long argument. If an...

BaoFeng - ActiveX 'OnBeforeVideoDownload()' Remote Buffer Overflow

BaoFeng mps.dll Remote Code Execution Exploit By: MITBOY Download: www.baofeng.com Problem DLL : mps.dll Problem Func : OnBeforeVideoDownload function test var shellcode =...

Symantec Fax Viewer Control 10 (DCCFAXVW.DLL) Remote BOF Exploit

No description provided by source. !-- Symantec Fax Viewer Control v10 DCCFAXVW.DLL remote buffer overflow exploit IE7 by Nine:Situations:Group::trotzkista site: http://retrogod.altervista.org/ tested against: Symantec WinFax Pro 10.03 Internet Explorer 7, XP SP3 some details: CLSID:...

BaoFeng - ActiveX OnBeforeVideoDownload() Remote Buffer Overflow

BaoFeng - ActiveX OnBeforeVideoDownload Remote Buffer Overflow BaoFeng mps.dll Remote Code Execution Exploit By: MITBOY Download: www.baofeng.com Problem DLL : mps.dll Problem Func : OnBeforeVideoDownload function test var shellcode =...

BaoFeng Storm mps.dll ActiveX OnBeforeVideoDownload Buffer Overflow

This module exploits a buffer overflow in BaoFeng's Storm media Player ActiveX control. Versions of mps.dll including 3.9.4.27 and lower are affected. When passing an overly long string to the method "OnBeforeVideoDownload" an attacker can execute arbitrary code. Module Options msf use...