GdPicture Pro - ActiveX 'gdpicture4s.ocx' File Overwrite / Exec

var cmd = "cmd /c net user test test /add & net localgroup Administrators test /add"; var outFile = "c:\windows\pchealth\helpctr\system\errors\badurl.htm"; var BMP = "\x42\x4d\x42\x00\x00\x00\x00\x00\x00\x00\x3e" + "\x00\x00\x00\x28\x00\x00\x00...

PT-2008-5592 · Numedia Soft · Nms Dvd Burning Sdk

Name of the Vulnerable Software and Affected Versions: NuMedia Soft NMS DVD Burning SDK Activex NMSDVDX.DVDEngineX.1 version 1.013C and earlier Description: The issue allows remote attackers to overwrite and create arbitrary files via calls to the EnableLog and LogMessage methods. This can...

GdPicture Pro ActiveX (gdpicture4s.ocx) File Overwrite / Exec Exploit

Exploit for unknown platform in category remote exploits ===================================================================== GdPicture Pro ActiveX gdpicture4s.ocx File Overwrite / Exec Exploit ===================================================================== object...

GdPicture Pro - ActiveX gdpicture4s.ocx File Overwrite Exec

GdPicture Pro - ActiveX gdpicture4s.ocx File Overwrite Exec var cmd = "cmd /c net user test test /add & net localgroup Administrators test /add"; var outFile = "c:\windows\pchealth\helpctr\system\errors\badurl.htm"; var BMP = "\x42\x4d\x4...

PT-2008-5593 · Chilkat · Chilkat Xml Chilkatutil.Ckdata.1 Activex Control

Name of the Vulnerable Software and Affected Versions: Chilkat XML ChilkatUtil.CkData.1 ActiveX control versions 3.0.3.0 and earlier Description: The issue allows remote attackers to create, overwrite, and modify arbitrary files for execution via calls to specific methods. This can potentially be...

CVE-2008-4300

A certain ActiveX control in adsiis.dll in Microsoft Internet Information Services IIS allows remote attackers to cause a denial of service browser crash via a long string in the second argument to the GetObject method. NOTE: this issue was disclosed by an unreliable researcher, so it might be...

Design/Logic Flaw

A certain ActiveX control in adsiis.dll in Microsoft Internet Information Services IIS allows remote attackers to cause a denial of service browser crash via a long string in the second argument to the GetObject method. NOTE: this issue was disclosed by an unreliable researcher, so it might be...

Design/Logic Flaw

A certain ActiveX control in iisext.dll in Microsoft Internet Information Services IIS allows remote attackers to set a password via a string argument to the SetPassword method. NOTE: this issue could not be reproduced by a reliable third party. In addition, the original researcher is unreliable...

CVE-2008-4300

A certain ActiveX control in adsiis.dll in Microsoft Internet Information Services IIS allows remote attackers to cause a denial of service browser crash via a long string in the second argument to the GetObject method. NOTE: this issue was disclosed by an unreliable researcher, so it might be...

CVE-2008-4301

A certain ActiveX control in iisext.dll in Microsoft Internet Information Services IIS allows remote attackers to set a password via a string argument to the SetPassword method. NOTE: this issue could not be reproduced by a reliable third party. In addition, the original researcher is unreliable...

CVE-2008-4301

CVE-2008-4301 concerns a vulnerability in the ActiveX control in iisext.dll used by Microsoft Internet Information Services (IIS). The affected component is an ActiveX control; the reported issue allows remote attackers to set a password via a string argument to the SetPassword method. The core p...

CVE-2008-4300

CVE-2008-4300 affects a specific ActiveX control in adsiis.dll used by Microsoft Internet Information Services (IIS). The vulnerability allows remote attackers to cause a denial of service (browser crash) by sending a long string as the second argument to the GetObject method. The description not...

IAS Helper COM Component (iashlpr.dll) activex remote DOS

""""""""""""""""""""""""""""""""""""""""""""""""""""""""""" """ :::::: :: :: :: :: :: :::: """ """ :: :: :: :: :::::: .. :::: :: """ """ ::::: ::: ::::: :: :: :: :: :: :::: """ """ :: :: :: :: : :: :: :: :: :: :: """ """ :::::: :: :: ::::: :: :::::: :: :: :::: rs.ir """ """ :: """ """ """...

CVE-2008-4299: Undefined Security Weakness

A certain ActiveX control in the Microsoft Internet Authentication Service IAS Helper COM Component in iashlpr.dll allows remote attackers to cause a denial of service browser crash via a large integer value in the first argument to the PutProperty method. NOTE: this issue was disclosed by an...

PT-2008-5562 · Microsoft · Internet Information Services

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Information Services IIS affected versions not specified Description: A certain ActiveX control in iisext.dll allows remote attackers to set a password via a string argument to the SetPassword method. However, this issue...

Internet Information Server and IAS ActiveX unauthorized access and DoS

ActiveX allows privileged actions to be silently executed...

CVE-2008-4300: Undefined Security Weakness

A certain ActiveX control in adsiis.dll in Microsoft Internet Information Services IIS allows remote attackers to cause a denial of service browser crash via a long string in the second argument to the GetObject method. NOTE: this issue was disclosed by an unreliable researcher, so it might be...

Chilkat IMAP ActiveX 7.9 File Execution / IE DoS Exploit

No description provided by source. Chilkat IMAP ActiveX File Execution&IE DoS www.chilkasoft.com By: e.wiZz! Info: Bosnian Idiot FTW! Site: infected.blogger.ba Greetz: suN8Hclf,Luigi and peoples from hakin9 forum In the wild... File: ChilkatMailv79.dll ProgID: ChilkatMail2.ChilkatMailMan2.1 CLSID...

Chilkat IMAP ActiveX 7.9 - File Execution IE Denial of Service

Chilkat IMAP ActiveX 7.9 - File Execution IE Denial of Service Chilkat IMAP ActiveX File Execution&IE DoS www.chilkasoft.com By: e.wiZz! Info: Bosnian Idiot FTW! Site: infected.blogger.ba Greetz: suN8Hclf,Luigi and peoples from hakin9 forum In the wild... File: ChilkatMailv79.dll ProgID:...

Chilkat IMAP ActiveX 7.9 File Execution / IE DoS Exploit

Exploit for unknown platform in category remote exploits ======================================================== Chilkat IMAP ActiveX 7.9 File Execution / IE DoS Exploit ======================================================== Chilkat IMAP ActiveX File Execution&IE DoS www.chilkasoft.com By:...