Trend Micro HouseCall ActiveX memory corruption

Use-after-free vulnerability...

CVE-2008-2434: Improper Control of Generation of Code

The Trend Micro HouseCall ActiveX control 6.51.0.1028 and 6.6.0.1278 in HousecallActiveX.dll allows remote attackers to download an arbitrary library file onto a client system via a "custom update server" argument. NOTE: this can be leveraged for code execution by writing to a Startup folder...

Trend Micro HouseCall notifyOnLoadNative()函数任意代码执行漏洞

CVECAN ID: CVE-2008-2435 HouseCall是用于检查计算机是否被病毒、间谍软件感染的应用程序。 HouseCall ActiveX控件（HousecallActiveX.dll）中存在使用后释放漏洞，如果用户受骗访问了包含有特制notifyOnLoadNative回调函数的网页的话，就会引用之前已释放的内存。成功利用这个漏洞允许在用户机器上执行任意代码。 Trend Micro HouseCall Server Edition - 6.6 Trend Micro ----------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Phoenician Casino Active-X Exploit

Phoenician Casino FlashAX ActiveX Remote Code Execution FTW! By: e.wiZz! Blog: kidnap't by government .ba Business mail : [email protected] Info: you can erase my blog,arrest me,do whatever...i'm still Bosnian Idiot FTW!. Greetz: Coolest guys around: aluigi,shinnai and hakin9.org In the wild...

[Full-disclosure] Secunia Research: Trend Micro HouseCall "notifyOnLoadNative()" Vulnerability

====================================================================== Secunia Research 21/12/2008 - Trend Micro HouseCall "notifyOnLoadNative" Vulnerability - ====================================================================== Table of Contents Affected...

CVE-2008-5691

Heap-based buffer overflow in the Phoenician Casino FlashAX ActiveX control 1.0.0.7 allows remote attackers to execute arbitrary code via a long argument to the SetID method...

CVE-2008-5691

CVE-2008-5691 describes a heap-based buffer overflow in the Phoenician Casino FlashAX ActiveX control 1.0.0.7. The overflow is triggered by a long argument to the SetID method, allowing remote code execution according to the description. Related records (NVD/NVD-derived and CVE lists) confirm the...

CVE-2008-5691

Heap-based buffer overflow in the Phoenician Casino FlashAX ActiveX control 1.0.0.7 allows remote attackers to execute arbitrary code via a long argument to the SetID method...

Evans FTP EvansFTP.ocx ActiveX控件多个远程溢出漏洞

BUGTRAQ ID: 32814 Evans FTP是以ActiveX FTP控件形式提供的FTP编程解决方案。 EvansFTP.ocx ActiveX控件控件没有正确地验证对RemoteAddress、ProxyPrefix、ProxyName、Password、ProxyBypassList、LoginName和CurrentDirectory属性所传送的参数。如果用户受骗访问了恶意网页并向上述属性传送了超长字符串参数的话，就可以触发缓冲区溢出，导致执行任意指令。 Evans Programming Evans FTP 临时解决方法： 为Clsid...

Visual FoxPro vfp6r.dll ActiveX Control DoCmd command execution

Added: 12/19/2008 CVE: CVE-2008-0236 BID: 27205 OSVDB: 40380 Background Visual FoxPro is a tool for developing database applications. Problem The vfp6r.dll ActiveX control allows command execution when a user opens a web page which uses the DoCmd method. Resolution Set the kill bit for class ID...

Phoenician Casino FlashAX ActiveX Remote Code Execution Exploit

No description provided by source. Phoenician Casino FlashAX ActiveX Remote Code Execution FTW! By: e.wiZz! Blog: kidnap't by government .ba Business mail : [email protected] Info: you can erase my blog,arrest me,do whatever...i'm still Bosnian Idiot FTW!. Greetz: Coolest guys around:...

Visual FoxPro vfp6r.dll ActiveX Control DoCmd command execution

Added: 12/19/2008 CVE: CVE-2008-0236 BID: 27205 OSVDB: 40380 Background Visual FoxPro is a tool for developing database applications. Problem The vfp6r.dll ActiveX control allows command execution when a user opens a web page which uses the DoCmd method. Resolution Set the kill bit for class ID...

Visual FoxPro vfp6r.dll ActiveX Control DoCmd command execution

Added: 12/19/2008 CVE: CVE-2008-0236 BID: 27205 OSVDB: 40380 Background Visual FoxPro is a tool for developing database applications. Problem The vfp6r.dll ActiveX control allows command execution when a user opens a web page which uses the DoCmd method. Resolution Set the kill bit for class ID...

CVE-2008-5691: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the Phoenician Casino FlashAX ActiveX control 1.0.0.7 allows remote attackers to execute arbitrary code via a long argument to the SetID method...

Visual FoxPro vfp6r.dll ActiveX Control DoCmd command execution

Added: 12/19/2008 CVE: CVE-2008-0236 BID: 27205 OSVDB: 40380 Background Visual FoxPro is a tool for developing database applications. Problem The vfp6r.dll ActiveX control allows command execution when a user opens a web page which uses the DoCmd method. Resolution Set the kill bit for class ID...

Integrity Clientless Security (ICS) Update 3.7.249.0

Check Point Integrity ™ Clientless Security ICS protects your Web site by detecting and disabling spyware processes and allowing you to enforce security policies before a user logs onto your network. Using ICS you can prevent users with potentially harmful software from accessing your Web site, a...

Phoenician Casino FlashAX ActiveX Remote Code Execution Exploit

Exploit for unknown platform in category remote exploits =============================================================== Phoenician Casino FlashAX ActiveX Remote Code Execution Exploit =============================================================== Phoenician Casino FlashAX ActiveX Remote Code...

Phoenician Casino FlashAX - ActiveX Remote Code Execution

Phoenician Casino FlashAX - ActiveX Remote Code Execution Phoenician Casino FlashAX ActiveX Remote Code Execution FTW! By: e.wiZz! Blog: kidnap't by government .ba Business mail : [email protected] Info: you can erase my blog,arrest me,do whatever...i'm still Bosnian Idiot FTW!. Greetz: Coolest...

Phoenician Casino FlashAX - ActiveX Remote Code Execution

Phoenician Casino FlashAX ActiveX Remote Code Execution FTW! By: e.wiZz! Blog: kidnap't by government .ba Business mail : [email protected] Info: you can erase my blog,arrest me,do whatever...i'm still Bosnian Idiot FTW!. Greetz: Coolest guys around: aluigi,shinnai and hakin9.org In the wild...

VeryDOC PDF Viewer ActiveX Control Buffer Overflow Vulnerability

VeryDOC PDF Viewer is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...