CVE-2008-3878

CVE-2008-3878 affects Ultra Office Control (OfficeCtrl.ocx) in Ultra Shareware Ultra Office Control: stack-based buffer overflow in HttpUpload with overly long strUrl, strFile, and strPostData parameters, enabling remote code execution. Public records show documented exploitation paths (e.g., Met...

CVE-2008-3879

The CVE-2008-3879 issue affects Ultra Office Control (ActiveX) in OfficeCtrl.ocx 2.0.2008.801 and earlier. The vulnerable components are the Open method (URL argument) and Save method (SaveAsDocument argument). A remote attacker can trick a client into downloading arbitrary files by supplying a U...

Anzio Web Print Object ActiveX Control Remote BOF Vulnerability

The host is running Anzio, which is prone to a heap-based buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodanziowebprintobjbofvuln900115.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: Anzio Web Print Object ActiveX Control Remote BOF Vulnerability Authors: Sharath S...

Ultra Office ActiveX Control Multiple Vulnerabilities

This host is running Ultra Office Control, which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodultraofficeactivexcontrolmultvuln900208.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: Ultra Office ActiveX Control Multiple Vulnerabilities Authors: Veerendra GG Update...

VMWare multiple applications security vulnerabilities

Multiple ActiveX vulnerabilities, privilege escalation, ISAPI filters DoS, third party components updates...

VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2008-0014 Synopsis: Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information...

Ultra Office ActiveX Control Multiple Vulnerabilities

Ultra Office Control is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VMware COM API ActiveX Remote Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ================================================= VMware COM API ActiveX Remote Buffer Overflow PoC ================================================= ----------------------------------------------------------------------------- VMWare COM API...

Friendly Technologies 'fwRemoteCfg.dll' ActiveX控件信息泄漏漏洞

BUGTRAQ ID: 30939 CNCAN ID：CNCAN-2008090102 Friendly Technologies是一款提供类似L2TP和PPPoE客户端的解决方案。 Friendly Technologies fwRemoteCfg.dll存在输入验证错误，远程攻击者可以利用漏洞获得敏感信息。 fwRemoteCfg.dll用于提供拨号相关功能，由于对RegistryValue, readreg, readme方法缺少充分过滤，可导致攻击者构建恶意WEB页，诱使用户访问可获得敏感信息。 Friendly Technologies fwRemoteCfg.dll...

VMware存在多个安全漏洞

BUGTRAQ ID:30934 CVE ID：CVE-2008-3691 CVE-2008-3692 CVE-2008-3693 CVE-2008-3694 CVE-2008-3695 CVE-2008-3696 CNCVE ID：CNCVE-20083691 CNCVE-20083692 CNCVE-20083693 CNCVE-20083694 CNCVE-20083695 CNCVE-20083696 VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。 多个VMWare...

VMware - COM API ActiveX Remote Buffer Overflow (PoC)

VMware - COM API ActiveX Remote Buffer Overflow PoC ----------------------------------------------------------------------------- VMWare COM API Buffer Overflow url: http://www.vmware.com/ Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.net This was written for educational...

ActiveX control remote buffer overflow-vulnerability warning-the black bar safety net

----------------------------------------------------------------------------- Ultra Office ActiveX Control Remote Buffer Overflow url: http://www.ultrashareware.com Author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.net This was written for educational purpose. Use it at your...

ActiveX remote arbitrary file exploit-vulnerability warning-the black bar safety net

Ultra Office ActiveX Control Remote Arbitrary File Corruption url: http://www.ultrashareware.com Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose. Use it at your own risk. Author will be not responsible for any damage...

VMware - COM API ActiveX Remote Buffer Overflow (PoC)

----------------------------------------------------------------------------- VMWare COM API Buffer Overflow url: http://www.vmware.com/ Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.net This was written for educational purpose. Use it at your own risk. Author will be not...

LogMeIn Remote Access Utility ActiveX Memory Corruption DoS

No description provided by source. html body pre LogMeIn Remote Access Utility ActiveX Memory Corruption 0day PoC DoS Software vendor URL: http://www.logmein.com Vulnerability at: RACtrl.dll propset for: fgcolor, bgcolor, fmcolor Author: Yag Kohha skyhole at gmail.com eax=024521b8 ebx=00000002...

Friendly Technologies (fwRemoteCfg.dll) ActiveX Command Exec Exploit

No description provided by source. !-- In addition to the overflow found in the "Friendly Technologies" dialers ActiveX, Here is a "remote command execution" exploit. Its so sad people dont actually Think... Greetz to Binaryvision ====================== - http://www.binaryvision.org.il/ --...

Friendly Technologies (fwRemoteCfg.dll) ActiveX Remote BOF Exploit

No description provided by source. !-- "Friendly Technologies" provide software like L2TP and PPPoE clients to ISPs, who give the software to their customers on CD so they have less trouble setting up thire connections. They also provide remote configuration solutions .. not the best idea if you...

Friendly Technologies 'fwRemoteCfg.dll' ActiveX控件远程缓冲区溢出漏洞

BUGTRAQ ID:30891 CNCAN ID：CNCAN-2008082904 Friendly Technologies是一款提供类似L2TP和PPPoE客户端的解决方案。 Friendly Technologies fwRemoteCfg.dll存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 fwRemoteCfg.dll用于提供拨号相关功能，由于对其他参数缺少充分边界检查，构建恶意WEB页，诱使用户访问，可导致触发缓冲区溢出以应用程序权限执行任意指令。 Friendly Technologies fwRemoteCfg.dll 目前没有解决方案提供：...

Friendly Technologies 'fwRemoteCfg.dll' ActiveX控件任意命令执行漏洞

BUGTRAQ ID:30889 CNCAN ID：CNCAN-2008082903 Friendly Technologies是一款提供类似L2TP和PPPoE客户端的解决方案。 Friendly Technologies fwRemoteCfg.dll不正确调用方法，远程攻击者可以利用漏洞以应用程序权限执行任意命令。 fwRemoteCfg.dll用于提供拨号相关功能，由于对"RunApp"方法缺少充分检查，构建恶意WEB页，诱使用户访问，可导致以应用程序权限执行任意命令。 Friendly Technologies fwRemoteCfg.dll 目前没有解决方案提供：...

CVE-2008-3480

The CVE-2008-3480 issue affects the Anzio Web Print Object (WePO) ActiveX control, with stack/heap-based overflow when processing a long mainurl parameter in WePO 3.2.19 and 3.2.24 (and related components), enabling remote arbitrary code execution. CoreLabs/Core advisory CORE-2008-0624 documents ...