CVE-2008-4549

The ImageShack Toolbar ActiveX control ImageShackToolbar.dll in ImageShack Toolbar 4.5.7, possibly including 4.5.7.69, allows remote attackers to force the upload of arbitrary image files to the ImageShack site via a file: URI argument to the BuildSlideShow method...

CVE-2008-4385: Improper Control of Generation of Code

Husdawg, LLC Systems Requirements Lab 3, as used by Instant Expert Analysis, allows remote attackers to force the download and execution of arbitrary programs via by specifiying a malicious website argument to the Init method in 1 a certain ActiveX control sysreqlab2.cab, sysreqlab.dll,...

Microsoft SQL Server 2000 Client Components ActiveX Control Buffer Overflow (CVE-2008-4110)

Microsoft SQL Server is a relational database management system RDBMS. A buffer overflow vulnerability has been reported in Microsoft SQL Server. The vulnerability is due to a boundary error in the Microsoft SQL Server 2000 Client Components ActiveX Control sqlvdir.dll when handling parameters...

Husdawg, LLC Systems Requirements Lab ActiveX control and Java applet vulnerable to arbitrary code download and execution

Overview The Husdawg, LLC. System Requirements Lab ActiveX control and Java applet allow an unauthenticated remote attacker to download and execute arbitrary code. Description Husdawg, LLC. provides an ActiveX control and signed Java Applet that are used for benchmarking the capabilities of a PC...

mspicturepusher-activex.txt

'PicturePusherControl.PostURL = "http://127.0.0.1/?aaaa=1" PicturePusherControl.PostURL = "http://192.168.1.1/?aaaa=1" PicturePusherCont...

Microsoft PicturePusher 'PipPPush.dll' ActiveX控件任意文件下载漏洞

BUGTRAQ ID: 31632 CNCAN ID：CNCAN-2008100909 Microsoft Digital Image是一款图像管理处理工具。 其包含的PicturePusher 'PipPPush.dll' ActiveX控件存在设计问题，远程攻击者可以利用漏洞从任意位置下载文件到受影响的电脑。 控件允许构建定制的POST请求实现上传功能，使用浏览器作为代理可以回弹，并通过AddString方法注入文件名子字段。类似的POST请求如下： POST /?aaaa=1 HTTP/1.1 Content-Type: multipart/form-data;...

CVE-2008-4493

Microsoft PicturePusher ActiveX control PipPPush.DLL 7.00.0709, as used in Microsoft Digital Image 2006 Starter Edition, allows remote attackers to force the upload of arbitrary files by using the AddString and Post methods and a modified PostURL to construct an HTTP POST request. NOTE: this issu...

Design/Logic Flaw

Microsoft PicturePusher ActiveX control PipPPush.DLL 7.00.0709, as used in Microsoft Digital Image 2006 Starter Edition, allows remote attackers to force the upload of arbitrary files by using the AddString and Post methods and a modified PostURL to construct an HTTP POST request. NOTE: this issu...

CVE-2008-4493

Microsoft PicturePusher ActiveX control PipPPush.DLL 7.00.0709, as used in Microsoft Digital Image 2006 Starter Edition, allows remote attackers to force the upload of arbitrary files by using the AddString and Post methods and a modified PostURL to construct an HTTP POST request. NOTE: this issu...

CVE-2008-4493

The CVE describes a vulnerability in the Microsoft PicturePusher ActiveX control (PipPPush.DLL 7.00.0709) used by Microsoft Digital Image 2006 Starter Edition. The flaw arises from the AddString and Post methods, with a modified PostURL that allows an attacker to construct an HTTP POST request to...

Microsoft PicturePusher ActiveX Cross Site File Upload Attack PoC

Exploit for unknown platform in category remote exploits ================================================================= Microsoft PicturePusher ActiveX Cross Site File Upload Attack PoC ================================================================= OBJECT...

Microsoft PicturePusher ActiveX Cross Site File Upload Attack PoC

No description provided by source. !-- Microsoft PicturePusher ActiveX PipPPush.DLL 7.00.0709 remote Cross Site File Upload attack POC IE6 by Nine:Situations:Group::pyrokinesis bug discovered by rgod during early March 2008 tested software: Microsoft Digital Image 2006 Starter Edition works fine...

Microsoft PicturePusher - ActiveX Cross-Site Arbitrary File Upload

Microsoft PicturePusher - ActiveX Cross-Site Arbitrary File Upload 'PicturePusherControl.PostURL = "http://127.0.0.1/?aaaa=1" PicturePusherControl.PostURL = "http://192.168.1.1/?aaaa=1" PicturePusherControl.Add...

CVE-2008-4493: Improper Input Validation

Microsoft PicturePusher ActiveX control PipPPush.DLL 7.00.0709, as used in Microsoft Digital Image 2006 Starter Edition, allows remote attackers to force the upload of arbitrary files by using the AddString and Post methods and a modified PostURL to construct an HTTP POST request. NOTE: this issu...

Microsoft PicturePusher - ActiveX Cross-Site Arbitrary File Upload

'PicturePusherControl.PostURL = "http://127.0.0.1/?aaaa=1" PicturePusherControl.PostURL = "http://192.168.1.1/?aaaa=1" PicturePusherControl.AddSeperator CRLF = unescape"%0d%0a" FormElementName="aaaa""; file...

iseemedia 'LPControl.dll' LPViewer ActiveX控件多个缓冲区溢出漏洞

BUGTRAQ ID: 31604 CVE ID：CVE-2008-4384 CNCVE ID：CNCVE-20084384 iseemedia是一款图像处理软件。 iseemedia LPViewer ActiveX控件存在多个基于栈的缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 LPControl.dll文件提供了iseemedia LPViewer ActiveX控件，控件对url, toolbar, 和enableZoomPastMax方法处理缺少充分的边界检查，构建恶意HTML文档，诱使用户访问，可导致以应用程序权限执行任意指令。 iseemedia...

CVE-2008-4384

Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control LPControl.dll, as acquired by Roxio and iseemedia, allow remote attackers to execute arbitrary code via the 1 url, 2 toolbar, and 3 enableZoomPastMax methods...

CVE-2008-4471

Directory traversal vulnerability in the CExpressViewerControl class in the DWF Viewer ActiveX control AdView.dll 9.0.0.96, as used in Revit Architecture 2009 SP2 and Autodesk Design Review 2009, allows remote attackers to overwrite arbitrary files via ".." sequences in the argument to the SaveAS...

Directory traversal

Directory traversal vulnerability in the CExpressViewerControl class in the DWF Viewer ActiveX control AdView.dll 9.0.0.96, as used in Revit Architecture 2009 SP2 and Autodesk Design Review 2009, allows remote attackers to overwrite arbitrary files via ".." sequences in the argument to the SaveAS...

Stack overflow

Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control LPControl.dll, as acquired by Roxio and iseemedia, allow remote attackers to execute arbitrary code via the 1 url, 2 toolbar, and 3 enableZoomPastMax methods...