windows-ms08053.txt

============================================================================= MS08-053 Windows Media Encoder wmex.dll ActiveX Control Buffer Overflow ============================================================================= Calc execution POC Exploit for WinXP SP2 PRO English / IE6.0 SP2 Foun...

Peachtree Accounting 'PAWWeb11.ocx' ActiveX控件不安全方法漏洞

BUGTRAQ ID: 31096 CNCAN ID：CNCAN-2008091105 Peachtree Accounting是一款商务会计软件。 Peachtree Accounting包含的'PAWWeb11.ocx' ActiveX控件存在不安全方法调用问题，远程攻击者可以利用漏洞以应用程序权限执行任意应用程序。 "ExecutePreferredApplication"方法对用户提交的参数缺少正确检查，直接提交系统应用程序可导致以控件权限执行。 Sage Peachtree Accounting 2004...

Microsoft SQL Server sqlvdir.dll ActiveX控件缓冲区溢出漏洞

BUGTRAQ ID: 31129 Microsoft SQL Server是一款流行的SQL数据库系统。 SQL Server所安装的sqlvdir.dll ActiveX控件（默认路径为C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlvdir.dll，clsid：FC13BAA2-9C1A-4069-A221-31A147636038）所暴露的ISQLVDirControl接口没有正确的验证用户输入参数，如果用户受骗访问了恶意网页并向该方式传送了超长参数的话，就可能触发缓冲区溢出，导致执行任意代码。 Microsoft S...

Trend Micro objRemoveCtrl ActiveX Control Multiple Buffer Overflows (CVE-2008-3364)

Trend Micro OfficeScan is a centralized virus and security scan management system. A buffer overflow vulnerability has been reported in Trend Micro OfficeScan. The vulnerability is due to a boundary error in the OfficeScan ActiveX control objRemoveCtrl. To trigger this issue, an attacker may crea...

Windows Media Encoder wmex.dll ActiveX Control BOF Exploit (MS08-053)

No description provided by source. html pre ============================================================================= MS08-053 Windows Media Encoder wmex.dll ActiveX Control Buffer Overflow ============================================================================= Calc execution POC Exploi...

Windows Media Encoder wmex.dll ActiveX BOF Exploit (MS08-053)

No description provided by source. html pre ============================================================================= MS08-053 Windows Media Encoder wmex.dll ActiveX Control Buffer Overflow ============================================================================= Calc execution POC Exploi...

Microsoft Windows Media Encoder (XP SP2) - 'wmex.dll' ActiveX Buffer Overflow (MS08-053)

============================================================================= MS08-053 Windows Media Encoder wmex.dll ActiveX Control Buffer Overflow ============================================================================= Calc execution POC Exploit for WinXP SP2 PRO English / IE6.0 SP2 Foun...

Microsoft Windows Media Encoder 9 ActiveX Control Buffer Overflow (MS08-053; CVE-2008-3008)

Windows Media Encoder is a tool for capturing audio and video content. A remote code execution vulnerability has been reported in the Windows Media Encoder 9 Series.The vulnerability is due to an error in a Windows Media Encoder 9 Series ActiveX control that was never intended to be instantiated ...

Microsoft Windows Media Encoder (XP SP2) - wmex.dll ActiveX Buffer Overflow (MS08-053)

Microsoft Windows Media Encoder XP SP2 - wmex.dll ActiveX Buffer Overflow MS08-053 ============================================================================= MS08-053 Windows Media Encoder wmex.dll ActiveX Control Buffer Overflow...

Windows Media Encoder wmex.dll ActiveX BOF Exploit (MS08-053)

Exploit for unknown platform in category remote exploits ============================================================= Windows Media Encoder wmex.dll ActiveX BOF Exploit MS08-053 =============================================================...

CVE-2008-4050

A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to 1 create and read arbitrary registry values via the RegistryValue method, and 2 read arbitrary files via the GetTextFile method...

CVE-2008-4049

A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to execute arbitrary programs via arguments to the RunApp method...

CVE-2008-4048

Heap-based buffer overflow in a certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to execute arbitrary code via a long third argument to the CreateURLShortcut method...

Design/Logic Flaw

A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to 1 create and read arbitrary registry values via the RegistryValue method, and 2 read arbitrary files via the GetTextFile method...

Heap overflow

Heap-based buffer overflow in a certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to execute arbitrary code via a long third argument to the CreateURLShortcut method...

Security feature bypass

A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to execute arbitrary programs via arguments to the RunApp method...

EUVD-2008-4035

A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to 1 create and read arbitrary registry values via the RegistryValue method, and 2 read arbitrary files via the GetTextFile method...

CVE-2008-4048

Heap-based buffer overflow in a certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to execute arbitrary code via a long third argument to the CreateURLShortcut method...

CVE-2008-4050

A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to 1 create and read arbitrary registry values via the RegistryValue method, and 2 read arbitrary files via the GetTextFile method...

CVE-2008-4048

CVE-2008-4048 describes a heap-based buffer overflow in an ActiveX control of the fwRemoteCfg.dll 3.3.3.1 component used by the Friendly Technologies FriendlyPPPoE Client 3.0.0.57. The overflow is triggered by a long third argument to the CreateURLShortcut method, allowing remote attackers to exe...