CVE-2008-0082

CVE-2008-0082 concerns an ActiveX control (Messenger.UIAutomation.1) in Windows Messenger 4.7 and 5.1 that is marked as safe-for-scripting. This vulnerability allows a remote attacker to hijack the Messenger client, enabling actions such as changing user state, viewing or obtaining contact inform...

Trend Micro产品ObjRemoveCtrl类缓冲区溢出漏洞

BUGTRAQ ID:30633 CVE ID：CVE-2008-3364 CNCVE ID：CNCVE-20083364 多个Trend Micro产品处理ObjRemoveCtrl类存在安全问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 当通过WEB接口配置产品时OfficeScan Web控制台利用多个ActiveX控件，其中ObjRemoveCtrl类ActiveX控件存在边界错误，可触发基于堆栈的缓冲区溢出，精心构建WEB页，诱使用户访问可导致应用程序权限执行任意指令。 Trend Micro Client Server Messaging Security for...

Microsoft Security Bulletin MS08-041 – Critical Vulnerability in the ActiveX Control for the Snapshot Viewer for Microsoft Access Could Allow Remote Code Execution (955617)

Microsoft Security Bulletin MS08-041 – Critical Vulnerability in the ActiveX Control for the Snapshot Viewer for Microsoft Access Could Allow Remote Code Execution 955617 Published: August 12, 2008 Version: 1.0 General Information Executive Summary This security update resolves a privately report...

Microsoft Access ActiveX file download

SnapShot Viewer ActiveX allows file download to any location...

Microsoft Security Bulletin MS08-050 – Important Vulnerability in Windows Messenger Could Allow Information Disclosure (955702)

Microsoft Security Bulletin MS08-050 – Important Vulnerability in Windows Messenger Could Allow Information Disclosure 955702 Published: August 12, 2008 Version: 1.0 General Information Executive Summary This security update resolves a publicly reported vulnerability in supported versions of...

webshell upload asp file called Server ActiveX control overflow access shell-vulnerability warning-the black bar safety net

| --- Do windows System penetration testing when there is a webshell, but don't get the shell, used to elevate privileges, it is a very depressing thing. In General, the use of mdb jet engine overflow is more common, but sometimes depending on the server installed on third-party software, the use...

Trend Micro OfficeScan objRemoveCtrl ActiveX buffer overflow

Added: 08/11/2008 CVE: CVE-2008-3364 BID: 30407 OSVDB: 47213 Background Trend Micro OfficeScan is a centralized virus and security scan management system. Problem A buffer overflow in the objRemoveCtrl ActiveX control, which is automatically installed when OfficeScan is installed through the serv...

Trend Micro OfficeScan objRemoveCtrl ActiveX buffer overflow

Added: 08/11/2008 CVE: CVE-2008-3364 BID: 30407 OSVDB: 47213 Background Trend Micro OfficeScan is a centralized virus and security scan management system. Problem A buffer overflow in the objRemoveCtrl ActiveX control, which is automatically installed when OfficeScan is installed through the serv...

Trend Micro OfficeScan objRemoveCtrl ActiveX buffer overflow

Added: 08/11/2008 CVE: CVE-2008-3364 BID: 30407 OSVDB: 47213 Background Trend Micro OfficeScan is a centralized virus and security scan management system. Problem A buffer overflow in the objRemoveCtrl ActiveX control, which is automatically installed when OfficeScan is installed through the serv...

WebEx Meeting Manager WebexUCFObject ActiveX Control Buffer Overflow

The atucfobj module of the WebexUCFObject ActiveX control, used by WebEx Meeting Manager and installed on the remote host, reportedly contains a stack-based buffer overflow in its 'NewObject' method. If an attacker can trick a user on the affected host into viewing a specially crafted HTML...

Cisco WebEx Meeting Manager (atucfobj.dll) ActiveX Remote BOF Exploit

No description provided by source. html body object classid=clsid:32E26FD9-F435-4A20-A561-35D4B987CFDC id=target / /object script language=javascript // ksOSe 08/08/2008 // tested in IE6, XP SP1 var shellcode =...

Trend Micro OfficeScan objRemoveCtrl ActiveX buffer overflow

Added: 08/11/2008 CVE: CVE-2008-3364 BID: 30407 OSVDB: 47213 Background Trend Micro OfficeScan is a centralized virus and security scan management system. Problem A buffer overflow in the objRemoveCtrl ActiveX control, which is automatically installed when OfficeScan is installed through the serv...

Cisco WebEx Meeting Manager UCF - atucfobj.dll ActiveX Remote Buffer Overflow

Cisco WebEx Meeting Manager UCF - atucfobj.dll ActiveX Remote Buffer Overflow // ksOSe 08/08/2008 // tested in IE6, XP SP1 var shellcode =...

Cisco WebEx Meeting Manager (atucfobj.dll) ActiveX Remote BOF Exploit

Exploit for unknown platform in category remote exploits ===================================================================== Cisco WebEx Meeting Manager atucfobj.dll ActiveX Remote BOF Exploit ===================================================================== // ksOSe 08/08/2008 // tested in...

Cisco WebEx Meeting Manager UCF - 'atucfobj.dll' ActiveX Remote Buffer Overflow

// ksOSe 08/08/2008 // tested in IE6, XP SP1 var shellcode =...

CVE-2008-3558

Stack-based buffer overflow in the WebexUCFObject ActiveX control in atucfobj.dll in Cisco WebEx Meeting Manager before 20.2008.2606.4919 allows remote attackers to execute arbitrary code via a long argument to the NewObject method...

DSquare Exploit Pack: D2SEC_WEBEX

Name| d2secwebex ---|--- CVE| CVE-2008-3558 Exploit Pack| D2ExploitPack Description| WebEx Meeting Manager atucfobj.dll ActiveX Stack Overflow Notes|...

Aurigma Image Uploader多个ActiveX控件存在未明安全漏洞

BUGTRAQ ID: 30548 CNCAN ID：CNCAN-2008080603 Aurigma Image Uploader是一款功能强大的图像上传工具。 Aurigma Image Uploader多个ActiveX控件存在未明安全问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令等攻击。 目前没有详细漏洞细节提供。 Aurigma Image Uploader 5.1 Aurigma Image Uploader 4.7 可参考如下解决方案工具： Aurigma Image Uploader 5.1 Aurigma AurigmaKillBit.zip...

WebEx UCF atucfobj.dll ActiveX NewObject Method Buffer Overflow

This module exploits a stack-based buffer overflow in WebEx's WebexUCFObject ActiveX Control. If a long string is passed to the 'NewObject' method, a stack- based buffer overflow will occur when copying attacker-supplied data using the sprintf function. It is noteworthy that this vulnerability wa...

McAfee Remediation Client ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in McAfee Remediation Agent 4.5.0.41. When sending an overly long string to the DeleteSnapshot method of enginecom.dll 3.7.0.9 an attacker may be able to execute arbitrary code. This control is not marked safe for scripting, so choose your attack vecto...