CVE-2008-4923: Undefined Security Weakness

Multiple insecure method vulnerabilities in MW6 Technologies Aztec ActiveX control AZTECLib.MW6Aztec, Aztec.dll 3.0.0.1 allow remote attackers to overwrite arbitrary files via a full pathname argument to the 1 SaveAsBMP and 2 SaveAsWMF methods...

Chilkat Crypt Activex Arbitrary File Creation/Execution PoC

Exploit for unknown platform in category remote exploits =========================================================== Chilkat Crypt Activex Arbitrary File Creation/Execution PoC ===========================================================...

Chilkat Crypt - ActiveX Arbitrary File Creation/Execution

----------------------------------------------------------------------------- Chilkat Crypt Activex Component Arbitrary File Creation/Execution url: http://www.chilkatsoft.com File: ChilkatCrypt2.dll CLSID: 3352B5B9-82E8-4FFD-9EB1-1A3E60056904 ProgID: ChilkatCrypt2.ChilkatCrypt2.1 Descr.: Chilkat...

Chilkat Crypt - ActiveX Arbitrary File CreationExecution

Chilkat Crypt - ActiveX Arbitrary File CreationExecution ----------------------------------------------------------------------------- Chilkat Crypt Activex Component Arbitrary File Creation/Execution url: http://www.chilkatsoft.com File: ChilkatCrypt2.dll CLSID:...

Chilkat Crypt ActiveX WriteFile Unsafe Method

This module allows attackers to execute code via the 'WriteFile' unsafe method of Chilkat Software Inc's Crypt ActiveX control. This exploit is based on shinnai's exploit that uses an hcp:// protocol URI to execute our payload immediately. However, this method requires that the victim user be...

Aztec ActiveX 'Aztec.dll' ActiveX控件任意文件覆盖漏洞

BUGTRAQ ID: 31974 CNCAN ID：CNCAN-2008103002 MW6 Aztec ActiveX是一款条形码组件。 MW6 Aztec ActiveX 'Aztec.dll'存在设计问题，远程攻击者可以利用漏洞以应用程序权限覆盖系统文件。 控件对SaveAsBMP和SaveAsWMF方法处理存在问题，构建恶意WEB页，诱使用户访问，可导致以应用程序权限覆盖系统文件。 MW6 Technologies Aztec ActiveX 3.0.0.1 目前没有详细解决方案提供： http://www.mw6tech.com/products.html...

MW6 DataMatrix ActiveX (DataMatrix.dll) Insecure Method Exploit

No description provided by source. !-- By Dr.Pantagon DeltaSecurityCenter www.DeltaSecurity.ir Description : DataMatrix ActiveX ver : 3.0.0.1 CopyRight : MW6 Technologies, Inc. Download Link : http://www.mw6tech.com/datamatrix/try/MW6DataMatrix.zip This was written for educational purpose. Use it...

DjVu ActiveX Control 3.0 ImageURL Property Overflow Exploit

No description provided by source. !-- DjVu ActiveX Control ImageURL Property Overflow From DjVu.org : "DjVu pronounced "d�j� vu" is a digital document format with advanced compression technology and high performance value. DjVu allows for the distribution on the Internet and on DVD of very high...

CVE-2008-4800

The DebugDiag ActiveX control in CrashHangExt.dll, possibly 1.0, in Microsoft Debug Diagnostic Tool allows remote attackers to cause a denial of service NULL pointer dereference and Internet Explorer 6.0 crash via a large negative integer argument to the GetEntryPointForThread method. NOTE: this...

MW6 Barcode ActiveX (Barcode.dll) Insecure Method Exploit

No description provided by source. !-- By Dr.Pantagon DeltaSecurityCenter www.DeltaSecurity.ir Description : 1D Barcode ActiveX ver : 3.0.0.1 CopyRight : MW6 Technologies, Inc. Download Link : http://www.mw6tech.com/barcode/try/MW6Barcode.zip This was written for educational purpose. Use it at...

MW6 DataMatrix 'DataMatrix.dll' ActiveX控件任意文件覆盖漏洞

BUGTRAQ ID: 31980 CNCAN ID：CNCAN-2008103004 MW6 DataMatrix ActiveX是一款数据矩阵条码制作工具。 MW6 DataMatrix ActiveX 'DataMatrix.dll'存在设计问题，远程攻击者可以利用漏洞以应用程序权限覆盖系统文件。 控件对SaveAsBMP和SaveAsWMF方法处理存在问题，构建恶意WEB页，诱使用户访问，可导致以应用程序权限覆盖系统文件。 MW6 Technologies DataMatrix ActiveX 3.0 1 目前没有详细解决方案提供：...

Microsoft DebugDiag CrashHangExt.dll ActiveX控件拒绝服务漏洞

BUGTRAQ ID: 31996 CVECAN ID: CVE-2008-4800 调试诊断工具（DebugDiag）用于排除Win32用户态进程中挂起、内存泄露或崩溃等故障。 DebugDiag所提供的CrashHangExt.dll没有正确地验证某些输入参数，如果用户受骗访问了恶意网页的话，就会在使用该控件的应用（通常为IE）中触发空指针引用，导致拒绝服务的情况。 Microsoft DebugDiag 1.0 Microsoft --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Update Protection against CA Multiple Products ActiveX Control Buffer Overflow Vulnerability

A vulnerability was reported in multiple Computer Associates CA products. These products are all intended for enhancing corporate and client security. The vulnerability is due to insufficient boundary checking in the parameters passed to the affected ActiveX control installed by the products list...

Update Protection against VMware COM API ActiveX Control Buffer Overflow

A buffer overflow vulnerability was reported in VMware COM API. VMware API is developed by VMware Inc. to provide language-neutral interfaces to the VMware Virtual Infrastructure Management VIM Framework. The vulnerability is associated with a vulnerable ActiveX control. A remote attacker could...

Null pointer dereference

The DebugDiag ActiveX control in CrashHangExt.dll, possibly 1.0, in Microsoft Debug Diagnostic Tool allows remote attackers to cause a denial of service NULL pointer dereference and Internet Explorer 6.0 crash via a large negative integer argument to the GetEntryPointForThread method. NOTE: this...

DjVu 'DjVu_ActiveX_MSOffice.dll' ActiveX控件堆缓冲区溢出漏洞

BUGTRAQ ID: 31987 CNCAN ID：CNCAN-2008103102 DjVu是一款LizardTech公司提供的新一代图像格式化软件。 DjVu'DjVuActiveXMSOffice.dll' ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 问题是控件对ImageURl方法的参数缺少充分边界条件检查，构建恶意的WEB页，诱使用户访问可触发此漏洞。 DjVu 3.0 目前没有解决方案提供： http://djvu.org/ http://www.sebug.net/exploit/4995/...

MW6 PDF417 ActiveX (MW6PDF417.dll) Remote Insecure Method Exploit

No description provided by source. !-- By Dr.Pantagon DeltaSecurityCenter www.DeltaSecurity.ir Description : PDF417 ActiveX ver : 3.0.0.1 CopyRight : MW6 Technologies, Inc. Download Link :http://www.mw6tech.com/pdf417/try/MW6PDF417.zip This was written for educational purpose. Use it at your own...

MW6 Technologies Barcode ActiveX 'Barcode.dll' ActiveX控件任意文件覆盖漏洞

BUGTRAQ ID: 31979 CNCAN ID：CNCAN-2008103003 MW6 Barcode ActiveX是一款条形码生成控件。 MW6 Barcode ActiveX 'Barcode.dll'存在设计问题，远程攻击者可以利用漏洞以应用程序权限覆盖系统文件。 控件对SaveAsBMP和SaveAsWMF方法处理存在问题，构建恶意WEB页，诱使用户访问，可导致以应用程序权限覆盖系统文件。 MW6 Technologies Barcode ActiveX 3.0.0.1 目前没有详细解决方案提供： http://www.mw6tech.com/products.html...

MW6 Aztec ActiveX (Aztec.dll) Remote Insecure Method Exploit

No description provided by source. !-- By Dr.Pantagon DeltaSecurityCenter www.DeltaSecurity.ir Description : Aztec ActiveX ver : 3.0.0.1 CopyRight : MW6 Technologies, Inc. Download Link : http://www.mw6tech.com/aztec/MW6Aztec.ZIP This was written for educational purpose. Use it at your own risk...

Visagesoft eXPert PDF Viewer ActiveX控件任意文件覆盖漏洞

BUGTRAQ ID: 31984 CNCAN ID：CNCAN-2008103007 Visagesoft eXPert PDF Viewer是一款PDF阅读器插件。 Visagesoft eXPert PDF Viewer控件存在设计问题，远程攻击者可以利用漏洞以应用程序权限覆盖系统文件。 VSPDFViewerX.ocx控件对savePageAsBitmap"方法对用户提供的参数缺少过滤，构建恶意WEB页，诱使用户访问，可导致以应用程序权限覆盖系统文件。 Visagesoft eXPert PDF Viewer ActiveX 3.0.990 目前没有详细解决方案提供：...