SmartVmd ActiveX 1.1 - Remote File Deletion

Author : Houssamix SmartVmd ActiveX V 1.1 remote file deletion exploit download : http://www.smartvmd.com/setup/SetupActiveXVmd.msi Note : StartVideoSaving insecure method allowed us to delete files in pc vitime / Report for Clsid: E3462D53-47A6-11D8-8EF6-DAE89272743C RegKey Safe for Script: Faux...

SmartVmd ActiveX 1.1 - Remote File Deletion

SmartVmd ActiveX 1.1 - Remote File Deletion Author : Houssamix SmartVmd ActiveX V 1.1 remote file deletion exploit download : http://www.smartvmd.com/setup/SetupActiveXVmd.msi Note : StartVideoSaving insecure method allowed us to delete files in pc vitime / Report for Clsid:...

SmartVmd ActiveX v 1.1 Remote File Deletion Exploit

Exploit for unknown platform in category remote exploits =================================================== SmartVmd ActiveX v 1.1 Remote File Deletion Exploit =================================================== Author : Houssamix SmartVmd ActiveX V 1.1 remote file deletion exploit download :...

Excel Viewer ActiveX buffer overflow

Buffer overflow in Open method...

Symantec AppStream Client LaunchObj ActiveX Control Multiple Unsafe Methods (SYM09-001)

The version of the LaunchObj ActiveX control, a component included with Symantec AppStream Client / Altiris Streaming Agent and installed on the remote Windows host, reportedly contains a number of unsafe methods, such as 'installAppMgr', that can be used to download and execute arbitrary code. I...

CVE-2009-0134

Insecure method vulnerability in the EasyGrid.SGCtrl.32 ActiveX control in EasyGrid.ocx 1.0.0.1 in AAA EasyGrid ActiveX 3.51 allows remote attackers to create and overwrite arbitrary files via the 1 DoSaveFile or 2 DoSaveHtmlFile method. NOTE: vector 1 could be leveraged for code execution by...

Design/Logic Flaw

Insecure method vulnerability in the EasyGrid.SGCtrl.32 ActiveX control in EasyGrid.ocx 1.0.0.1 in AAA EasyGrid ActiveX 3.51 allows remote attackers to create and overwrite arbitrary files via the 1 DoSaveFile or 2 DoSaveHtmlFile method. NOTE: vector 1 could be leveraged for code execution by...

CVE-2009-0134

Insecure method vulnerability in the EasyGrid.SGCtrl.32 ActiveX control in EasyGrid.ocx 1.0.0.1 in AAA EasyGrid ActiveX 3.51 allows remote attackers to create and overwrite arbitrary files via the 1 DoSaveFile or 2 DoSaveHtmlFile method. NOTE: vector 1 could be leveraged for code execution by...

CVE-2009-0134

The CVE-2009-0134 entry concerns the EasyGrid.ocx 1.0.0.1 EasyGrid ActiveX control (AAA EasyGrid ActiveX 3.51). The vulnerability is an insecure method vulnerability in the SGCtrl.32 control that allows remote attackers to create and overwrite arbitrary files via DoSaveFile or DoSaveHtmlFile. Not...

Easy Grid ActiveX控件任意文件覆盖漏洞

BUGTRAQ ID: 33272 Easy Grid ActiveX控件是用于打印、预览表格、图标、公式、表达式的工具。 EasyGrid.SGCtrl.32 ActiveX控件（EasyGrid.ocx）没有安全地调用DoSaveFile方式，如果用户受骗访问了恶意网页并向该方式传送了特制参数的话，就会导致向用户系统写入任意文件。 Easy Grid Control Team Easy Grid ActiveX 3.51 厂商补丁： Easy Grid Control Team ----------------------...

Symantec AppStream客户端LaunchObj ActiveX控件任意文件下载漏洞

BUGTRAQ ID: 33247 CVECAN ID: CVE-2008-4388 Symantec AppStream是Windows的应用程序部署框架。 AppStream Windows客户端所提供的LaunchObj ActiveX控件没有安全地调用installAppMgr方式，如果用户受骗访问了恶意网页并对该方式传送了特制参数的话，就会导致向用户系统下载并执行任意代码。 Symantec AppStream Client 5.2 临时解决方法： 在IE中禁用LaunchObj ActiveX控件，为以下CLSID设置kill bit：...

MetaProducts MetaTreeX 1.5.100 - ActiveX File Overwrite

MetaProducts MetaTreeX 1.5.100 - ActiveX File Overwrite Author : Houssamix MetaProducts MetaTreeX V 1.5.100 Remote File Overwrite Exploit Note : SaveToFile is vuln to / Report for Clsid: 67E66985-F81A-11D6-BC0F-F7B40157DC26 RegKey Safe for Script: Faux RegKey Safe for Init: Faux Implements...

Ciansoft PDFBuilderX 2.2 ActiveX Arbitrary File Overwrite Exploit

No description provided by source. b Ciansoft PDFBuilderX 2.2 Arbitrary File Overwrite br/ p0c br/ Alfons Luja br/ Pozdrowienia dla odFiecznych fanÓf br/ Tesw Eporue br/ -9002- br/ l00l br/ b/ object classid='clsid:00E7C7F8-71E2-498A-AB28-A3D72FC74485' id='kupa'/object script / Class PDFDoc GUID:...

MetaProducts MetaTreeX V 1.5.100 ActiveX File Overwrite Exploit

Exploit for unknown platform in category remote exploits =============================================================== MetaProducts MetaTreeX V 1.5.100 ActiveX File Overwrite Exploit =============================================================== Author : Houssamix MetaProducts MetaTreeX V...

MetaProducts MetaTreeX V 1.5.100 ActiveX File Overwrite Exploit

No description provided by source. HTML BODY b Author : Houssamix br/ br/ br/ MetaProducts MetaTreeX V 1.5.100 Remote File Overwrite Exploit br/ Note : SaveToFile is vuln to br/ b/ object id=hsmx classid="clsid:67E66985-F81A-11D6-BC0F-F7B40157DC26"/object SCRIPT / Report for Clsid:...

MetaProducts MetaTreeX 1.5.100 - ActiveX File Overwrite

Author : Houssamix MetaProducts MetaTreeX V 1.5.100 Remote File Overwrite Exploit Note : SaveToFile is vuln to / Report for Clsid: 67E66985-F81A-11D6-BC0F-F7B40157DC26 RegKey Safe for Script: Faux RegKey Safe for Init: Faux Implements IObjectSafety: Vrai IDisp Safe: Safe for untrusted: caller,dat...

Symantec AppStream ActiveX Unauthorized Access

SUMMARY Vulnerabilities were reported in an ActiveX control that Symantecs AppStream 5.2.x Client installs. Exploitation of this issue could possibly lead to unauthorized information disclosure, system information corruption or potentially allow arbitrary code execution in the context of the user...

Ciansoft PDFBuilderX 2.2 - ActiveX Arbitrary File Overwrite

Ciansoft PDFBuilderX 2.2 - ActiveX Arbitrary File Overwrite Ciansoft PDFBuilderX 2.2 Arbitrary File Overwrite p0c Alfons Luja Pozdrowienia dla odFiecznych fanÓf Tesw Eporue -9002- l00l / Class PDFDoc GUID: 00E7C7F8-71E2-498A-AB28-A3D72FC74485 RegKey Safe for Script: False RegKey Safe for Init:...

PDFBuilderX ActiveX控件SaveToFile()方式任意文件覆盖漏洞

BUGTRAQ ID: 33233 PDFBuilderX是用于创建和保存PDF文件的ActiveX控件。 PDFBuilderXTrial.PDFDoc ActiveX控件（PDFBuilderXTrial.ocx）没有正确地验证对SaveToFile方式所提供的输入，如果用户受骗访问了恶意网页并向该方式传送了恶意参数的话，就可能导致向系统上写入任意文件。 Ciansoft PDFBuilderX 2.2.0.1 临时解决方法： 为受影响的ActiveX控件设置kill-bit。 厂商补丁： Ciansoft --------...

Ciansoft PDFBuilderX 2.2 - ActiveX Arbitrary File Overwrite

Ciansoft PDFBuilderX 2.2 Arbitrary File Overwrite p0c Alfons Luja Pozdrowienia dla odFiecznych fanÓf Tesw Eporue -9002- l00l / Class PDFDoc GUID: 00E7C7F8-71E2-498A-AB28-A3D72FC74485 RegKey Safe for Script: False RegKey Safe for Init: False Implements IObjectSafety: True IDisp Safe: Safe for...