CVE-2008-4049

CVE-2008-4049 affects the Friendly Technologies FriendlyPPPoE Client (version 3.0.0.57) via the ActiveX control fwRemoteCfg.dll version 3.3.3.1. The RunApp method accepts arguments that allow remote attackers to execute arbitrary programs. This vulnerability is described across multiple sources i...

CVE-2008-4050

The CVE-2008-4050 entry concerns a flaw in the ActiveX control fwRemoteCfg.dll (version 3.3.3.1) used by Friendly Technologies’ FriendlyPPPoE Client (v3.0.0.57). The vulnerability allows remote attackers to (1) create and read arbitrary registry values via the RegistryValue method and (2) read ar...

CVE-2008-4049

A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to execute arbitrary programs via arguments to the RunApp method...

Design/Logic Flaw

The Microsoft Windows Image Acquisition Logger ActiveX control allows remote attackers to force the download of arbitrary files onto a client system via a URL in the first argument to the Open method, in conjunction with a full destination pathname in the first argument to the Save method. NOTE:...

CVE-2008-3008

Stack-based buffer overflow in the WMEncProfileManager ActiveX control in wmex.dll in Microsoft Windows Media Encoder 9 Series allows remote attackers to execute arbitrary code via a long first argument to the GetDetailsString method, aka "Windows Media Encoder Buffer Overrun Vulnerability."...

sqlvdir-overflow.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - r4s4al ---QKrun1x-P47tr1ck - FeDeReR -MAGE -JeTFyrE and all darkc0de members ---...

Adobe Acrobat 9 ActiveX Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ======================================================== Adobe Acrobat 9 ActiveX Remote Denial of Service Exploit ======================================================== arg1="acroie:///DoS" target.src = arg1 0day.today 2018-04-02...

Microsoft Windows Media Encoder 9 'wmex.dll' ActiveX控件缓冲区溢出漏洞（MS08-055）

BUGTRAQ ID: 31065 CVE ID：CVE-2008-3008 CNCVE ID：CNCVE-20083008 Microsoft Windows Media Encoder 9是一款视频音频编码工具。 Microsoft Windows Media Encoder 9包含的WMEX.DLL ActiveX存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 构建特殊的WEB页，诱使用户访问，可触发此漏洞。目前没有详细漏洞细节提供。 Microsoft Windows Media Encoder 9 x64 + Microsoft Advanced Windo...

Microsoft Windows Image Acquisition Logger ActiveX控件任意文件覆盖漏洞

BUGTRAQ ID: 31069 CNCAN ID：CNCAN-2008090905 Microsoft Windows Image Acquisition是一款用于数码相机和扫描仪之类的影像设备的服务。 Microsoft Windows Image Acquisition Logger ActiveX控件存在设计问题，远程攻击者可以利用漏洞以应用程序权限覆盖系统任意文件。 相关的ActiveX控件的CLSID为A1E75357-881A-419E-83E2-BB16DB197C68，由于对Save方法缺少充分检查，可导致以应用程序权限覆盖系统任意文件。 Microsoft...

Adobe Acrobat 9 ActiveX Remote Denial of Service Exploit

No description provided by source. !-- Jeremy Brown [email protected]/jbrownsec.blogspot.com Adobe Acrobat 9 Remote DoS -- Tested on AA9/IE7/Vista I can't seem to reproduce this on XP! Oh well. Of course the most popular app for reading pdfs is SfS/SfI : Basically it will crash with any uri th...

Adobe Acrobat 9 - ActiveX Remote Denial of Service

arg1="acroie:///DoS" target.src = arg1 milw0rm.com 2008-09-11...

Adobe Acrobat 9 - ActiveX Remote Denial of Service

Adobe Acrobat 9 - ActiveX Remote Denial of Service arg1="acroie:///DoS" target.src = arg1 milw0rm.com 2008-09-11...

CVE-2008-3008

A stack-based buffer overflow exists in the WMEncProfileManager ActiveX control within wmex.dll in Microsoft Windows Media Encoder 9 Series . A remote attacker can execute arbitrary code by providing a long first argument to the GetDetailsString method. The vulnerability can be triggered by a mal...

Peachtree Accounting 2004 (PAWWeb11.ocx) ActiveX Insecure Method

Exploit for unknown platform in category remote exploits ================================================================ Peachtree Accounting 2004 PAWWeb11.ocx ActiveX Insecure Method ================================================================ arg1="C:/WINDOWS/system32/calc.exe"...

Peachtree Accounting 2004 (PAWWeb11.ocx) ActiveX Insecure Method

No description provided by source. !-- Jeremy Brown [email protected]/jbrownsec.blogspot.com Peachtree Accounting Remote SfS/SfI Exploit Tested on Peachtree Accounting 2004 / Windows XP / IE6 All Peachtree software that includes PAWWeb11.ocx are assumed vulnerable -- htmlbody object id=target...

Peachtree Accounting 2004 - 'PAWWeb11.ocx' ActiveX Insecure Method

arg1="C:/WINDOWS/system32/calc.exe" target.ExecutePreferredApplication arg1 milw0rm.com 2008-09-10...

Peachtree Accounting 2004 - PAWWeb11.ocx ActiveX Insecure Method

Peachtree Accounting 2004 - PAWWeb11.ocx ActiveX Insecure Method arg1="C:/WINDOWS/system32/calc.exe" target.ExecutePreferredApplication arg1 milw0rm.com 2008-09-10...

Microsoft Windows Media Encoder ActiveX code execution

Control supports unsafe methods...

VMware Products Multiple Vulnerabilities (VMSA-2008-0014)

A VMware product installed on the remote host is affected by multiple vulnerabilities : - ActiveX controls provided by VMware for IE could be exploited to cause a denial of service condition or execute arbitrary code on the remote system. CVE-2007-5438, CVE-2008-3691-CVE-2008-3696, CVE-2008-3892 ...

CVE-2008-3957

The Microsoft Windows Image Acquisition Logger ActiveX control allows remote attackers to force the download of arbitrary files onto a client system via a URL in the first argument to the Open method, in conjunction with a full destination pathname in the first argument to the Save method. NOTE:...