CVE-2008-4830

CVE-2008-4830 is an insecure method vulnerability in SAP GUI’s KWEdit ActiveX control (KWEDIT.DLL 6400.1.1.41 and 7100.1.1.43). The SaveDocumentAs method can allow an attacker to overwrite arbitrary files, and the OpenDocument method can read or execute arbitrary files on a remote host. Affected ...

CVE-2008-4830

Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 KWEDIT.DLL 6400.1.1.41 and 7.10 Patch 5 KWEDIT.DLL 7100.1.1.43 allows remote attackers to 1 overwrite arbitrary files via the SaveDocumentAs method or 2 read or execute arbitrary files via the OpenDocument method...

CVE-2007-2238

Multiple stack-based buffer overflows in the Whale Client Components ActiveX control WhlMgr.dll, as used in Microsoft Intelligent Application Gateway IAG before 3.7 SP2, allow remote attackers to execute arbitrary code via long arguments to the 1 CheckForUpdates or 2 UpdateComponents methods...

CVE-2007-2238

CVE-2007-2238 describes multiple stack-based buffer overflows in the Whale Client Components ActiveX control (WhlMgr.dll) used by Microsoft Intelligent Application Gateway (IAG) before 3.7 SP2. The vulnerabilities allow remote code execution when an attacker supplies overly long arguments to the ...

Microsoft IAG 2007 ActiveX控件栈溢出漏洞

BUGTRAQ ID: 34532 CVECAN ID: CVE-2007-2238 Microsoft的Intelligent Application Gateway（IAG）2007是全面的远程访问网关，提供基于SSL的应用程序访问、保护和端点安全管理。 IAG所使用的Whale客户端组件（由WhlMgr.dll文件提供）没有正确地验证对CheckForUpdates和 UpdateComponents方式所传送的输入参数。如果用户受骗访问了恶意网页并向上述方式提供了超长输入参数的话，就可以触发栈溢出，导致执行任意代码。 Microsoft Intelligent Applicati...

SAP GUI KWEdit ActiveX控件不安全SaveDocumentAs()调用漏洞

BUGTRAQ ID: 34524 CVECAN ID: CVE-2008-4830 SAPgui是SAP软件的图形用户界面客户端。 SAPgui所捆绑的KWEdit ActiveX控件（KWEDIT.DLL）提供了不安全的SaveDocumentAs函数。如果用户受骗访问了恶意网页的话，该函数可能将 HTML文档保存到指定的位置。如果结合OpenDocument方式的话，远程攻击者就可以泄露任意文件的内容，或在用户系统上执行任意代码。 SAP Sapgui 7.10 Patch 5 SAP Sapgui 6.40 Patch 29 SAP ---...

Microsoft Whale Intelligent Application Gateway ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in Microsoft Whale Intelligent Application Gateway Whale Client. When sending an overly long string to CheckForUpdates method of WhlMgr.dll 3.1.502.64 an attacker may be able to execute arbitrary code. Module Options msf use...

SAP GUI KWEdit ActiveX Control SaveDocumentAs() Insecure Method

The version of the KWEdit ActiveX control on the remote host is reportedly affected by a remote code execution vulnerability. The control provides the insecure method 'SaveDocumentAs', which saves an HTML document to a specified location. This can be exploited in combination with e.g. the...

EnjoySAP SAP GUI ActiveX Control Arbitrary File Download

This module allows remote attackers to place arbitrary files on a users file system by abusing the "CompDownload" method in the SAP KWEdit ActiveX Control kwedit.dll 6400.1.1.41. Module Options msf use exploit/windows/browser/enjoysapgui/compdownload msf undefinedcompdownload show actions...

Microsoft Whale Intelligent Application Gateway Whale Client Components ActiveX control stack buffer overflows

Overview The Microsoft Whale Intelligent Application Gateway Whale Client Components ActiveX control contains multiple stack buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Whale Communications Intelligent...

CVE-2009-0218

Insecure method vulnerability in Particle Software IntraLaunch Application Launcher ActiveX control in IntraLaunch.ocx, as used in LDRA TBbrowse and possibly other products, allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2009-0218

Insecure method vulnerability in Particle Software IntraLaunch Application Launcher ActiveX control in IntraLaunch.ocx, as used in LDRA TBbrowse and possibly other products, allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2009-0218

CVE-2009-0218 involves Particle Software’s IntraLaunch ActiveX control (IntraLaunch.ocx) used by LDRA TBbrowse. The ActiveX control is not restricted to any domain/zone and is marked Safe for Scripting, enabling web pages to trigger arbitrary code execution on affected systems. Exploitation could...

CVE-2009-0218

Insecure method vulnerability in Particle Software IntraLaunch Application Launcher ActiveX control in IntraLaunch.ocx, as used in LDRA TBbrowse and possibly other products, allows remote attackers to execute arbitrary code via unknown vectors...

DiViS-Web ActiveX控件AddSiteEx()方式堆溢出漏洞

BUGTRAQ ID: 34468 DiViS-Web是Chance-i视频监控系统所使用的基于WEB的控制软件。 DiViS-Web ActiveX控件（ActiveView.cab）没有正确地验证对AddSiteEx函数所传送的输入参数，如果用户受骗访问了恶意网页并向该参数传送了超长参数的话，就可以触发堆溢出，导致执行任意代码。 Chance-i DiViS-Web 3.0.0.7 临时解决方法： 为clsid 66F7F252-3FE1-4650-B1E5-94B2A38271C5设置kill-bit。 厂商补丁： Chance-i --------...

Update Protection against IBM Access Support ActiveX GetXMLValue Method Buffer Overflow

IBM Access Support ActiveX Control contains a buffer overflow vulnerability. The IBM Access Support ActiveX control is used by the vendor to collect system information, such as make, model, serial number, OS version, etc. This control is available on the IBM / Lenovo web site, and may also come...

[DSECRG-09-035] Chance-i DiViS DVR ActiveX - Heap Overflow

Digital Security Research Group DSecRG Advisory DSECRG-09-035 original advisory: http://dsecrg.com/pages/vul/DSECRG-09-035.html Application: Chance-i DiViS-Web DVR System ActiveX control Versions Affected: 3,0,0,7 Vendor URL: http://www.chance-i.com/ Bug: Heap Overflow Exploits: YES Reported:...

Chance-i DiViS-Web DVR System ActiveX Control Heap Overflow PoC

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-09-035 original advisory: http://dsecrg.com/pages/vul/DSECRG-09-035.html Application: Chance-i DiViS-Web DVR System ActiveX control Versions Affected: 3,0,0,7 Vendor URL: http://www.chance-i.com/ Bug: Heap...

Chance-i DiViS-Web DVR System - ActiveX Control Heap Overflow (PoC)

Chance-i DiViS-Web DVR System - ActiveX Control Heap Overflow PoC Digital Security Research Group DSecRG Advisory DSECRG-09-035 original advisory: http://dsecrg.com/pages/vul/DSECRG-09-035.html Application: Chance-i DiViS-Web DVR System ActiveX control Versions Affected: 3,0,0,7 Vendor URL:...

Chance-i DiViS-Web DVR System ActiveX Control Heap Overflow PoC

Exploit for unknown platform in category dos / poc =============================================================== Chance-i DiViS-Web DVR System ActiveX Control Heap Overflow PoC =============================================================== Digital Security Research Group DSecRG Advisory...