CVE-2007-3493

The CVE-2007-3493 entry concerns an ActiveX control in NCTWavChunksEditor2.dll 2.6.1.148 used by NCTAudioStudio (NCTAudioStudio2) 2.7, which allows remote attackers to create or overwrite arbitrary files by passing a full pathname to CreateFile. Connected sources also reference CVE-2007-3400, des...

CVE-2007-3488

CVE-2007-3488 is a heap-based buffer overflow in the viewer ActiveX control of Sony Network Cameras. Affected models include SNC-RZ25N (pre-1.30), SNC-P1/P5 (pre-1.29), SNC-CS10/CS11 (pre-1.06), SNC-DF40N/DF70N (pre-1.18), SNC-RZ50N/CS50N (pre-2.22), SNC-DF85N/DF80N/DF50N (pre-1.12), and SNC-RX57...

CVE-2007-3488

Heap-based buffer overflow in the viewer ActiveX control in Sony Network Camera SNC-RZ25N before 1.30; SNC-P1 and SNC-P5 before 1.29; SNC-CS10 and SNC-CS11 before 1.06; SNC-DF40N and SNC-DF70N before 1.18; SNC-RZ50N and SNC-CS50N before 2.22; SNC-DF85N, SNC-DF80N, and SNC-DF50N before 1.12; and...

AMX Corp. VNC ActiveX Control (AmxVnc.dll 1.0.13.0) BoF Exploit

No description provided by source. !-- 21.17 23/06/2007 AMX Corp. VNC ActiveX Control AmxVnc.dll 1.0.13.0 remote buffer overflow exploit / tested against IE6 on xp sp2 it found this one inside GHDB, dork by JimmyNeutron: WebControl intitle:"AMX NetLinx" description: "AMX Netlinx is a server...

amx-activex.txt

'metasploit one, add a user "su" with pass "tzu" scode = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%49%49%49%49%49%49%37%49%49%49%49%49%49%49%49%49%49%49%51%5a%6a%44%58%50%30%41%30%41%6b%41%41%54%42%41%32%...

CVE-2007-3488: Undefined Security Weakness

Heap-based buffer overflow in the viewer ActiveX control in Sony Network Camera SNC-RZ25N before 1.30; SNC-P1 and SNC-P5 before 1.29; SNC-CS10 and SNC-CS11 before 1.06; SNC-DF40N and SNC-DF70N before 1.18; SNC-RZ50N and SNC-CS50N before 2.22; SNC-DF85N, SNC-DF80N, and SNC-DF50N before 1.12; and...

Sony Network Camera SNC-P5 v1.0 ActiveX viewer Heap Overflow PoC

No description provided by source. !-- Sony Network Camera SNC-P5 v1.0 ActiveX viewer Heap Overflow PoC Camera info http://bssc.sel.sony.com/BroadcastandBusiness/DisplayModel?id=79540 SNC-P5 External API documentation...

AMX Corp. VNC ActiveX Control (AmxVnc.dll 1.0.13.0) BoF Exploit

Exploit for unknown platform in category remote exploits =============================================================== AMX Corp. VNC ActiveX Control AmxVnc.dll 1.0.13.0 BoF Exploit =============================================================== script language='...

AMX Corp. VNC ActiveX Control - AmxVnc.dll 1.0.13.0 Remote Buffer Overflow

AMX Corp. VNC ActiveX Control - AmxVnc.dll 1.0.13.0 Remote Buffer Overflow 'metasploit one, add a user "su" with pass "tzu" scode = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%49%49%49%49%49%49%37%49%49%49%49%49%49%49%49%49%49%49%51%5a%6a%44%58%50%30%41%30%41%6b%41%41%54%42%41%32%41%41%32%4...

sony-heap.txt

Sub tryMe buff = String15000, "A" viewer.PrmSetNetworkParam buff, 1 End Sub...

HP Photo Digital Imaging ActiveX unauthorized access

Unsafe saveXMLAsFile method in hpqxml.dll...

AMX Corp. VNC ActiveX Control - 'AmxVnc.dll 1.0.13.0' Remote Buffer Overflow

'metasploit one, add a user "su" with pass "tzu" scode = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%49%49%49%49%49%49%37%49%49%49%49%49%49%49%49%49%49%49%51%5a%6a%44%58%50%30%41%30%41%6b%41%41%54%42%41%32%41%41%32%42%41%30%42%41%58%38%41%42%50%75%68%69%39%6c%38%68%31%54%43%30%47%70%57%70%4...

Design/Logic Flaw

A certain ActiveX control in Avaxswf.dll 1.0.0.1 in Civitech Avax Vector 1.3 allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the WriteMovie method...

CVE-2007-3459

A certain ActiveX control in Avaxswf.dll 1.0.0.1 in Civitech Avax Vector 1.3 allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the WriteMovie method...

CVE-2007-3459

A CVE-2007-3459 entry describes a vulnerability in Civitech Avax Vector 1.3 where the ActiveX control Avaxswf.dll version 1.0.0.1 permits remote attackers to create or overwrite arbitrary files by supplying a full pathname to the WriteMovie method. The issue affects the ActiveX component and can ...

Stack overflow

Stack-based buffer overflow in the BeginPrint method in a certain ActiveX control in RKD Software barcodetools.com BarCodeAx.dll 4.9 allows remote attackers to execute arbitrary code via a long argument...

CVE-2007-3435

Stack-based buffer overflow in the BeginPrint method in a certain ActiveX control in RKD Software barcodetools.com BarCodeAx.dll 4.9 allows remote attackers to execute arbitrary code via a long argument...

Avaxswf.dll v.1.0.0.1 from Avax Vector ActiveX Arbitrary Data Write

No description provided by source. :. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: Avaxswf.dll v.1.0.0.1 from Avax Vector software ActiveX Arbitrary Data Write ============================================================================...

Avax Vector ActiveX unauthorized access

WriteMovie method allows write access to the disk...

CVE-2007-3435

CVE-2007-3435 describes a stack-based buffer overflow in the BeginPrint method of RKD Software’s BarCodeAx.dll (ActiveX) v4.9, allowing remote code execution via a long argument. Public references document the vulnerable component as BarCodeAx.dll and confirm exploitation vectors through the Begi...