Intuit QuickBooks Online Edition ActiveX控件多个远程安全漏洞

BUGTRAQ ID: 25544 CVECAN ID: CVE-2007-4471,CVE-2007-0322 QuickBooks Online Edition是一款在线财务软件。 QuickBooks Online Edition的ActiveX控件处理在处理畸形用户请求时存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 如果用户受骗打开了恶意HTML文档的话，QuickBooks Online Edition...

Microsoft SQL Server Distributed Management Objects OLE DLL for SQL Enterprise Manager (sqldmo.dll) remote buffer overflow poc

!-- 18.48 01/09/2007 Microsoft SQL Server Distributed Management Objects OLE DLL for SQL Enterprise Manager sqldmo.dll remote buffer overflow poc file version: 2000.085.2004.00 product version: 8.05.2004 passing some fuzzy chars to Start method: EAX 00000000 ECX 00620062 EDX 00620062 EBX 1C3A3638...

mssql-overflow.txt

object classid='clsid:10020200-E260-11CF-AE68-00AA004A34D5' id='...

BaoFeng2 - 'mps.dll' ActiveX Multiple Remote Buffer Overflows (PoC)

BaoFeng2 Mps.dll Activex Multiple Remote Buffer Overflow PoC https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/4375.zip 09082007-storm.zip milw0rm.com 2007-09-08...

EDraw Office Viewer Component 5.2 ActiveX Remote BoF PoC

Exploit for unknown platform in category dos / poc ======================================================== EDraw Office Viewer Component 5.2 ActiveX Remote BoF PoC ========================================================...

暴风影音II mps.dll ActiveX栈溢出漏洞

No description provided by source. html object classid="clsid:6BE52E1D-E586-474f-A6E2-1A85A9B4D9FB" id='target'/object body SCRIPT language="javascript" var shellcode = unescape"%u9090"+"%u9090"+ "%uefe9%u0000%u5a00%ua164%u0030%u0000%u408b%u8b0c" +...

edraw-activex.txt

-------------------------------------------------------------------------------------------------------------- 0-day EDraw Office Viewer Component 5.2 officeviewer.ocx v. 5.2.218.1 "HttpDownloadFileToTempDir" Remote Buffer Overflow url: http://www.ocxt.com/officeviewer.php author: shinnai mail:...

EDraw Office Viewer Component 5.2 - ActiveX Remote Buffer Overflow (PoC)

EDraw Office Viewer Component 5.2 - ActiveX Remote Buffer Overflow PoC -------------------------------------------------------------------------------------------------------------- 0-day EDraw Office Viewer Component 5.2 officeviewer.ocx v. 5.2.218.1 "HttpDownloadFileToTempDir" Remote Buffer...

EDraw Office Viewer Component 5.2 - ActiveX Remote Buffer Overflow (PoC)

-------------------------------------------------------------------------------------------------------------- 0-day EDraw Office Viewer Component 5.2 officeviewer.ocx v. 5.2.218.1 "HttpDownloadFileToTempDir" Remote Buffer Overflow url: http://www.ocxt.com/officeviewer.php author: shinnai mail:...

Buffer overflow

Buffer overflow in the PowerPlayer.dll ActiveX control in PPStream 2.0.1.3829 allows remote attackers to execute arbitrary code via a long Logo parameter...

Buffer overflow

Multiple buffer overflows in the Broderbund Expressit 3DGreetings Player ActiveX control could allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-4472

Multiple buffer overflows in the Broderbund Expressit 3DGreetings Player ActiveX control could allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-4748

Buffer overflow in the PowerPlayer.dll ActiveX control in PPStream 2.0.1.3829 allows remote attackers to execute arbitrary code via a long Logo parameter...

CVE-2007-4748

Buffer overflow in the PowerPlayer.dll ActiveX control in PPStream 2.0.1.3829 allows remote attackers to execute arbitrary code via a long Logo parameter...

CVE-2007-4472

The CVE-2007-4472 issue affects the Broderbund Expressit 3DGreetings Player ActiveX control. The Nessus entry confirms multiple stack-based buffer overflows in this ActiveX control, which could allow a remote attacker to execute arbitrary code on a vulnerable Windows system when a user is persuad...

CVE-2007-4748

A buffer overflow exists in the PowerPlayer.dll ActiveX control within PPStream 2.0.1.3829 . The vulnerability is caused by the software's failure to properly validate the Logo parameter provided by the user. Remote attackers can exploit this by tricking a user into visiting a malicious webpage t...

CVE-2007-4472

Multiple buffer overflows in the Broderbund Expressit 3DGreetings Player ActiveX control could allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-4740

The HPRevolutionRegistryManager ActiveX control in Hp.Revolution.RegistryManager.dll 1 in Telecom Italy Alice Messenger allows remote attackers to create registry keys and values via the arguments to the WriteRegistry method...

Design/Logic Flaw

The HPRevolutionRegistryManager ActiveX control in Hp.Revolution.RegistryManager.dll 1 in Telecom Italy Alice Messenger allows remote attackers to create registry keys and values via the arguments to the WriteRegistry method...

CVE-2007-4740

The vulnerability CVE-2007-4740 affects the HPRevolutionRegistryManager ActiveX control in Hp.Revolution.RegistryManager.dll 1 used by Telecom Italia Alice Messenger. The issue allows a remote attacker to create registry keys and values by supplying arguments to the WriteRegistry method, exposing...