Novell ZENworks Desktop Management 6.5 - ActiveX Control CanUninstall() Remote Buffer Overflow

Novell ZENworks Desktop Management 6.5 - ActiveX Control CanUninstall Remote Buffer Overflow source: https://www.securityfocus.com/bid/31435/info Novell ZENworks Desktop Management ActiveX control is prone to a buffer-overflow vulnerability because the application fails to adequately check...

chilkat-overwrite.txt

Chilkat XML ActiveX File overwriting vulnerability PoCon msn.exe for fun Discovered by: shinnai PoC by: e.wiZz! In the wild... File: ChilkatUtil.dll 'Wscript.echo typenametarget targetFile = "C:\Program Files\Chilkat Software Inc\Chilkat XML ActiveX\ChilkatUtil.dll" prototype = "Function SaveToFi...

NMS DVD Burning SDK 'NMSDVDX.dll' ActiveX控件任意文件覆盖漏洞

BUGTRAQ ID: 31374 CNCAN ID：CNCAN-2008092609 NMS DVD Burning SDK是一款用于刻录DVD光盘的工具包。 NMS DVD Burning SDK包含的ActiveX控件存在任意文件覆盖问题，远程攻击者可以利用漏洞以登录用户进程权限执行任意程序。 问题是'NMSDVDX.dll' ActiveX控件处理"EnableLog"和"LogMessage"方法存在问题，构建恶意WEB页，诱使用户访问，可覆盖系统文件，执行任意程序。 Numedia Soft Inc. NMSDVDX DVD Burning SDK 1.008 Numedia...

chilkat-execdos.txt

Chilkat IMAP ActiveX File Execution&IE DoS www.chilkasoft.com By: e.wiZz! Info: Bosnian Idiot FTW! Site: infected.blogger.ba Greetz: suN8Hclf,Luigi and peoples from hakin9 forum In the wild... File: ChilkatMailv79.dll ProgID: ChilkatMail2.ChilkatMailMan2.1 CLSID:...

Chilkat IMAP ActiveX 7.9 - File Execution / Denial of Service

Chilkat IMAP ActiveX File Execution&IE DoS www.chilkasoft.com By: e.wiZz! Info: Bosnian Idiot FTW! Site: infected.blogger.ba Greetz: suN8Hclf,Luigi and peoples from hakin9 forum In the wild... File: ChilkatMailv79.dll ProgID: ChilkatMail2.ChilkatMailMan2.1 CLSID:...

Novell ZENworks Desktop Management 6.5 - ActiveX Control 'CanUninstall()' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/31435/info Novell ZENworks Desktop Management ActiveX control is prone to a buffer-overflow vulnerability because the application fails to adequately check boundaries on user-supplied input. An attacker can exploit this issue to execute arbitrary code in...

NuMedia Soft DVD Burning SDK Activex Control Remote Code Execution Vulnerability

The host is installed CDBurnerXP, which is prone to ActiveX control based remote code execution vulnerability. OpenVAS Vulnerability Test $Id: secpodnmsdvdburningsdkactvxvuln900132.nasl 7332 2017-09-29 14:16:56Z cfischer $ Description: NuMedia Soft DVD Burning SDK Activex Control Remote Code...

NuMedia Soft DVD Burning SDK Activex Control RCE Vulnerability

CDBurnerXP is prone to an ActiveX control based remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

ICONICS Vessel / Gauge / Switch 8.02.140 ActiveX BOF Exploit (meta)

No description provided by source. $Id: iconicsdlgwrapper.rb 1 2008-09-21 22:43:00Z kf $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Chilkat XML ActiveX控件存在多个漏洞

BUGTRAQ ID: 31332 CNCAN ID：CNCAN-2008092401 Chilkat XML是一款XML解析器组件。 Chilkat XML包含的ActiveX控件存在设计错误，远程攻击者可以利用漏洞在目标系统上建立或覆盖系统文件。 问题是ActiveX控件的"SaveToFile"和"SaveToTempFile"方法允许传递特殊构建的参数给"filename"或"templateFilename"，可导致以应用程序权限覆盖或建立任意文件。 而且"AppendBinary"方法允许写任意字节到已经建立的文件中。 Chilkat ChilkatUtil.dll 3.0....

BurnAware NMSDVDXU ActiveX Remote Arbitrary File Creation/Execution

No description provided by source. ----------------------------------------------------------------------------- BurnAware NMSDVDXU ActiveX Control Remote Arbitrary File Creation/Execution url: http://www.burnaware.com File: NMSDVDXU.dll = 1.0.0.13 CLSID: 0355854A-7F23-47E2-B7C3-97EE8DD42CD8...

ICONICS Vessel Gauge Switch 8.02.140 - ActiveX Buffer Overflow (Metasploit)

ICONICS Vessel Gauge Switch 8.02.140 - ActiveX Buffer Overflow Metasploit $Id: iconicsdlgwrapper.rb 1 2008-09-21 22:43:00Z kf $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more...

ICONICS Vessel / Gauge / Switch 8.02.140 - ActiveX Buffer Overflow (Metasploit)

$Id: iconicsdlgwrapper.rb 1 2008-09-21 22:43:00Z kf $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

burnaware-exec.txt

----------------------------------------------------------------------------- BurnAware NMSDVDXU ActiveX Control Remote Arbitrary File Creation/Execution url: http://www.burnaware.com File: NMSDVDXU.dll compatUI.RunApplication 1, "calc.exe", 1...

BurnAware - NMSDVDXU ActiveX Arbitrary File CreationExecution

BurnAware - NMSDVDXU ActiveX Arbitrary File CreationExecution ----------------------------------------------------------------------------- BurnAware NMSDVDXU ActiveX Control Remote Arbitrary File Creation/Execution url: http://www.burnaware.com File: NMSDVDXU.dll compatUI.RunApplication 1,...

Chilkat XML ActiveX Remote Arbitrary File Creation/Execution Exploit

No description provided by source. ----------------------------------------------------------------------------- Chilkat XML ActiveX Remote Arbitrary File Creation/Execution url: www.chilkatsoft.com File: ChilkatUtil.dll = 3.0.3.0 CLSID: 5022FAE8-B780-4B78-B8DC-1AF1145A4F42 ProgID:...

BurnAware NMSDVDXU ActiveX Remote Arbitrary File Creation/Execution

Exploit for unknown platform in category remote exploits =================================================================== BurnAware NMSDVDXU ActiveX Remote Arbitrary File Creation/Execution ===================================================================...

BurnAware - NMSDVDXU ActiveX Arbitrary File Creation/Execution

----------------------------------------------------------------------------- BurnAware NMSDVDXU ActiveX Control Remote Arbitrary File Creation/Execution url: http://www.burnaware.com File: NMSDVDXU.dll compatUI.RunApplication 1, "calc.exe", 1...

Macrovision InstallShield Update Service Agent ActiveX Memory Corruption (CVE-2008-2470)

Macrovision InstallShield is a software tool for creating installers or software packages. A memory corruption vulnerability has been reported in Macrovision InstallShield Update Service. The vulnerability is due to a design error in the Macrovision InstallShield Update Service while processing...

Chilkat XML - ActiveX Arbitrary File Creation/Execution

----------------------------------------------------------------------------- Chilkat XML ActiveX Remote Arbitrary File Creation/Execution url: www.chilkatsoft.com File: ChilkatUtil.dll = 3.0.3.0 CLSID: 5022FAE8-B780-4B78-B8DC-1AF1145A4F42 ProgID: ChilkatUtil.CkData.1 Descr.: Chilkat CkData Marke...