CVE-2007-3148

Buffer overflow in the Yahoo! Webcam Viewer ActiveX control in ywcvwr.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the receive method...

CVE-2007-3147

A stack buffer overflow exists in the Yahoo! Webcam Upload ActiveX control (ywcupl.dll version 2.0.1.4) provided by Yahoo! Messenger 8.1.0.249 . The vulnerability is caused by boundary errors when processing a long server property value passed to the Server() method followed by a call to the Send...

CVE-2007-3148

A stack buffer overflow vulnerability exists in the Yahoo! Webcam Viewer ActiveX control (specifically within ywcvwr.dll 2.0.1.4 ) for Yahoo! Messenger 8.1.0.249 . The flaw is caused by boundary errors when processing a long server property value via the receive method . A remote attacker can exp...

CVE-2007-3147

Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the send method. NOTE: some of these details are obtained from third party information...

zenturi-activex.txt

----------------------------------------------------------------------------- Zenturi ProgramChecker ActiveX Control Multiple Insecure Methods url: http://www.programchecker.com/activeintro.aspx author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written fo...

Yahoo! Messenger Webcam ActiveX Multiple Overflows

Binary data 4079.prm...

Yahoo! Messenger WebCam ActiveX multiple buffer overflows

Few buffer overflows in Ywcvwr.dll library...

Microsoft Html Popup / Outlook Express Address Book ActiveX DoS

Crash on element displaying...

EEYE: Yahoo Webcam ActiveX Controls Multiple Buffer Overflows

Yahoo Webcam ActiveX Controls Multiple Buffer Overflows Release Date: June 8, 2007 Date Reported: June 5, 2007 Severity: High Remote Code Execution Vendor: Yahoo!, Inc. Systems Affected: Yahoo Messenger 8 for Windows Overview: eEye Digital Security has discovered two critical vulnerabilities in...

zenturi-navig.txt

----------------------------------------------------------------------------- Zenturi ProgramChecker ActiveX Control "NavigateUrl" Insecure Method url: http://www.programchecker.com/activeintro.aspx author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org Tested on Windo...

CVE-2007-3167: Undefined Security Weakness

Stack-based buffer overflow in the Vivotek Motion Jpeg ActiveX control aka MjpegControl in MjpegDecoder.dll 2.0.0.13 allows remote attackers to execute arbitrary code via a long PtzUrl property value...

Zoomify Viewer ActiveX control multiple stack buffer overflows

Overview The Zoomify Viewer ActiveX control contains multiple stack buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Zoomify provides software to incorporate zoomable images into web sites. One of the Zoomify produc...

Yahoo! Messenger Webcam ActiveX Buffer Overflows

The remote host contains the 'Webcam' ActiveX controls included with Yahoo! Messenger. The version of at least one of these controls on the remote host has a buffer overflow. If an attacker can trick a user on the affected host into visiting a specially crafted web page, this issue could be...

Zenturi ProgramChecker ActiveX Multiple Insecure Methods Exploit

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"----------------------------------------------------------------------------- bZenturi ProgramChecker ActiveX Control Multiple Insecure Methods/b url:...

Zenturi ProgramChecker ActiveX NavigateUrl() Insecure Method Exploit

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"----------------------------------------------------------------------------- bZenturi ProgramChecker ActiveX Control "NavigateUrl" Insecure Method/b url:...

Yahoo! Messenger Webcam 8.1 (Ywcvwr.dll) Download / Execute Exploit

No description provided by source. / Compile in LCC-win32 Free! Download and exec any file you like! Have Fun! / include stdio.h include string.h include stdlib.h char file = "Clickhere.html"; FILE fp = NULL; unsigned char sc =...

雅虎通Webcam Viewer ActiveX控件远程栈溢出漏洞

雅虎通是一款非常流行的即时通讯工具。 雅虎通的Webcam Viewer ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞控制用户机器。 雅虎通的Webcam Viewer（ywcvwr.dll）ActiveX控件没有正确地验证对Server属性的输入。如果用户受骗访问了恶意站点向该属性传送了超长字符串然后又调用了Receive方式的话，就可能触发栈溢出，导致执行任意指令。 Yahoo! Messenger 8.1.0.249 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://messenger.yahoo.com/...

Yahoo! Messenger Webcam 8.1 (Ywcupl.dll) Download / Execute Exploit

No description provided by source. / Compile in LCC-win32 Free! Download and exec any file you like! Have Fun! / include stdio.h include string.h include stdlib.h char file = "Clickhere.html"; FILE fp = NULL; unsigned char sc =...

Zenturi ProgramChecker ActiveX Multiple Insecure Methods Exploit

Exploit for unknown platform in category remote exploits ================================================================ Zenturi ProgramChecker ActiveX Multiple Insecure Methods Exploit ================================================================...

Yahoo! Messenger Webcam 8.1 (Ywcupl.dll) Download / Execute Exploit

Exploit for unknown platform in category remote exploits =================================================================== Yahoo! Messenger Webcam 8.1 Ywcupl.dll Download / Execute Exploit =================================================================== / Compile in LCC-win32 Free! Download...