11443 matches found
VeryDOC PDFView ActiveX组件堆溢出漏洞
BUGTRAQ ID: 32313 VeryDOC的PDF Viewer ActiveX是一个PDF文件查看器组件。 PDFVIEW.PdfviewCtrl.1 ActiveX控件（pdfview.ocx）的OpenPDF方式没有正确地验证用户输入参数，如果用户受骗访问了恶意网页并向该方式传送了超长字符串参数的话，就可以触发堆溢出，导致执行任意指令。 VeryDOC PDF Viewer ActiveX 2.0.0.1 临时解决方法： 为CLSID 433268D7-2CD4-43E6-AA24-2188672E7252设置kill-bit。 厂商补丁： VeryDOC -------...
Chilkat Socket ActiveX SaveLastError()任意文件覆盖漏洞
BUGTRAQ ID: 32333 Chilkat socket组件为TCP/IP套接字编程提供简单易用的API。 ChilkatSocket.ChilkatSocket.1 ActiveX控件（ChilkatSocket.dll）没有正确地验证对SaveLastError方式所提供的输入参数，如果远程攻击者受骗访问了恶意网页并向该方式传送了恶意输入的话，就可能导致以当前登录用户的权限覆盖和破坏系统上的任意文件。 Chilkat Software ChilkatSocket.DLL 2.3.1.1 临时解决方法： 为clsid...
GungHo LoadPrgAx vulnerable to arbitrary Java program execution
Overview LoadPrgAx ActiveX control from GungHo Online Entertainment, Inc. contains a vulnerability that allows an attacker to execute an arbitrary Java program. LoadPrgAx from GungHo Online Entertainment, Inc. is an ActiveX control that runs games provided by the company. LoadPrgAx contains a...
Novell iPrint Client nipplib.dll ActiveX Control Buffer Overflow (CVE-2008-2436)
Novell iPrint is an application that enables users to install and manage printers, or submit print job from a web browser. A buffer overflow vulnerability has been reported in Novell iPrint Client. The vulnerability is due to a boundary error in the Novell iPrint Client nipplib.dll ActiveX contro...
Microsoft Visual Studio MaskedEdit ActiveX Control Buffer Overflow (MS08-070; CVE-2008-3704)
Microsoft Visual Studio is designed for building Windows based applications and Web solutions. A buffer overflow vulnerability has been reported in Microsoft Visual Studio. The vulnerability is due to a memory corruption error in the Visual Basic MaskedEdit ActiveX control when it fails to proper...
iseemedia LPViewer ActiveX Control Multiple Buffer Overflows (CVE-2008-4384)
iseemedia is a software development company focused on the commercialization of advanced, rich content adaptation and distribution solutions for Web applications. iseemedia's platforms are used by websites worldwide. The iseemedia LPViewer ActiveX control contains multiple buffer overflow...
Chilkat Socket ActiveX 2.3.1.1 - Arbitrary File Creation
Chilkat Socket ActiveX 2.3.1.1 - Arbitrary File Creation ChilkatSocket.DLL Arbitrary File Creation Company Name : Chilkat Software, Inc. Vulnerable DLL : ChilkatSocket.DLL DLL's version : 2,3,1,1 Object Safety Report : Report for Clsid: 474FCCCD-1B89-4D34-9E09-45807F23289C RegKey Safe for Script:...
Chilkat Socket activex 2.3.1.1 Remote Arbitrary File Creation Exploit
Exploit for unknown platform in category remote exploits ===================================================================== Chilkat Socket activex 2.3.1.1 Remote Arbitrary File Creation Exploit ===================================================================== ChilkatSocket.DLL Arbitrary Fi...
VeryPDF PDFView OCX ActiveX OpenPDF Heap Overflow PoC
No description provided by source. !-- VeryPDF PDFView OCX ActiveX OpenPDF Heap Overflow Discovered & Written By: r0ut3r writ3r at gmail.com / www.bmgsec.com.au Advisory: http://www.bmgsec.com.au/advisory/39/ --------------------------------------------------- Tested on: WinXP Pro SP2 Version:...
verypdf-activex.txt
Sub Boom buff = String1006, "A" target.OpenPDF buff, 1, 1 End Sub...
VeryPDF PDFView OCX ActiveX OpenPDF Heap Overflow PoC
Exploit for unknown platform in category dos / poc ===================================================== VeryPDF PDFView OCX ActiveX OpenPDF Heap Overflow PoC ===================================================== Sub Boom buff = String1006, "A" target.OpenPDF buff, 1, 1 End Sub 0day.today 2018-04...
VeryPDF PDFView - OCX ActiveX OpenPDF Heap Overflow (PoC)
VeryPDF PDFView - OCX ActiveX OpenPDF Heap Overflow PoC Sub Boom buff = String1006, "A" target.OpenPDF buff, 1, 1 End Sub milw0rm.com 2008-11-15...
VeryPDF PDFView - OCX ActiveX OpenPDF Heap Overflow (PoC)
Sub Boom buff = String1006, "A" target.OpenPDF buff, 1, 1 End Sub milw0rm.com 2008-11-15...
VeryPDF PDFView - ActiveX Component Heap Buffer Overflow
VeryPDF PDFView - ActiveX Component Heap Buffer Overflow source: https://www.securityfocus.com/bid/32313/info The VeryPDF PDFView ActiveX control is prone to a heap buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently...
VeryPDF PDFView - ActiveX Component Heap Buffer Overflow
source: https://www.securityfocus.com/bid/32313/info The VeryPDF PDFView ActiveX control is prone to a heap buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer. An attacker can exploit this issue t...
CVE-2008-5089
Multiple insecure method vulnerabilities in the DDActiveReportsViewer2.ARViewer2 ActiveX control arview2.ocx in Data Dynamics ActiveReports 2.5.0.1314 allow remote attackers to overwrite arbitrary files via a call to the 1 Pages.Save, 2 PrintReport, or 3 Canvas.Save method...
Design/Logic Flaw
Multiple insecure method vulnerabilities in the DDActiveReportsViewer2.ARViewer2 ActiveX control arview2.ocx in Data Dynamics ActiveReports 2.5.0.1314 allow remote attackers to overwrite arbitrary files via a call to the 1 Pages.Save, 2 PrintReport, or 3 Canvas.Save method...
CVE-2008-5089
CVE-2008-5089 describes multiple insecure method vulnerabilities in the DDActiveReportsViewer2.ARViewer2 ActiveX control (arview2.ocx) of Data Dynamics ActiveReports 2.5.0.1314 . The underlying issue allows remote attackers to overwrite arbitrary files by calling one of three methods: Pages.Save ...
CVE-2008-5089
Multiple insecure method vulnerabilities in the DDActiveReportsViewer2.ARViewer2 ActiveX control arview2.ocx in Data Dynamics ActiveReports 2.5.0.1314 allow remote attackers to overwrite arbitrary files via a call to the 1 Pages.Save, 2 PrintReport, or 3 Canvas.Save method...