zenturi-overflow.txt

------------------------------------------------------------------------ Zenturi ProgramChecker ActiveX sasatl.dll Remote Buffer Overflow PoC url: http://www.programchecker.com/activeintro.aspx original advisory: http://secunia.com/advisories/25473/ Will Dormann, CERT/CC, is credited with the...

Yahoo! Messenger Webcam 8.1 ActiveX Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================== Yahoo! Messenger Webcam 8.1 ActiveX Remote Buffer Overflow Exploit ================================================================== shellcode =...

Yahoo! Messenger Webcam 8.1 - ActiveX Remote Buffer Overflow

Yahoo! Messenger Webcam 8.1 - ActiveX Remote Buffer Overflow shellcode = unescape"%u9090%u9090%u9090%uC929%uE983%uD9DB%uD9EE%u2474" + "%u5BF4%u7381%uA913%u4A67%u83CC%uFCEB%uF4E2%u8F55" + "%uCC0C%u67A9%u89C1%uEC95%uC936%u66D1%u47A5%u7FE6" + "%u93C1%u6689%u2FA1%u2E87%uF8C1%u6622%uFDA4%uFE69" +...

Yahoo! Messenger Webcam 8.1 - ActiveX Remote Buffer Overflow (2)

Yahoo! Messenger Webcam 8.1 - ActiveX Remote Buffer Overflow 2 This affects the viewer ywcvwr.dll with yahoo messenger latest version tested. Fixed bug in last post x=0;xi shellcode = unescape"%u9090%u9090%u9090%uC929%uE983%uD9DB%uD9EE%u2474" + "%u5BF4%u7381%uA913%u4A67%u83CC%uFCEB%uF4E2%u8F55" +...

Yahoo! Messenger Webcam 8.1 ActiveX Remote Buffer Overflow Exploit 2

Exploit for unknown platform in category remote exploits ==================================================================== Yahoo! Messenger Webcam 8.1 ActiveX Remote Buffer Overflow Exploit 2 ==================================================================== This affects the viewer ywcvwr.dl...

FlipViewer FlipViewerX.dll ActiveX控件多个栈溢出漏洞

FlipViewer是用于阅读FlipBooks电子书的阅读器。 FlipViewer的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用控制用户机器。 FlipViewer的FlipViewerX.dll库所提供的FViewerLoading ActiveX控件在处理UID、Opf、PAGENO、LaunchMode、SubID、BookID、LibraryID、SubURL和LoadOpf属性时存在多个栈溢出漏洞。如果用户受骗访问了恶意站点并向这些属性传送了超长参数的话，就可能触发溢出，导致执行任意指令。 E-Book Systems FlipViewer 4.0...

FlipViewer ActiveX Control < 4.1 Buffer Overflow Vulnerabilities

The Windows remote host contains the FlipViewer ActiveX control, which is used for viewing electronic documents. The version of this ActiveX control on the remote host reportedly contains multiple stack-based buffer overflow vulnerabilities. A remote attacker may be able to leverage these issues ...

Yahoo! Messenger Webcam 8.1 - ActiveX Remote Buffer Overflow

shellcode = unescape"%u9090%u9090%u9090%uC929%uE983%uD9DB%uD9EE%u2474" + "%u5BF4%u7381%uA913%u4A67%u83CC%uFCEB%uF4E2%u8F55" + "%uCC0C%u67A9%u89C1%uEC95%uC936%u66D1%u47A5%u7FE6" + "%u93C1%u6689%u2FA1%u2E87%uF8C1%u6622%uFDA4%uFE69" + "%u48E6%u1369%u0D4D%u6A63%u0E4B%u9342%u9871%u638D" +...

Yahoo! Messenger Webcam 8.1 - ActiveX Remote Buffer Overflow (2)

This affects the viewer ywcvwr.dll with yahoo messenger latest version tested. Fixed bug in last post x=0;xi shellcode = unescape"%u9090%u9090%u9090%uC929%uE983%uD9DB%uD9EE%u2474" + "%u5BF4%u7381%uA913%u4A67%u83CC%uFCEB%uF4E2%u8F55" + "%uCC0C%u67A9%u89C1%uEC95%uC936%u66D1%u47A5%u7FE6" +...

Stack overflow

Multiple stack-based buffer overflows in the FViewerLoading ActiveX control FlipViewerX.dll in E-Book Systems FlipViewer before 4.1 allow remote attackers to cause a denial of service crash or execute arbitrary code via long 1 UID, 2 Opf, 3 PAGENO, 4 LaunchMode, 5 SubID, 6 BookID, 7 LibraryID, 8...

CVE-2007-2919

Multiple stack-based buffer overflows in the FViewerLoading ActiveX control FlipViewerX.dll in E-Book Systems FlipViewer before 4.1 allow remote attackers to cause a denial of service crash or execute arbitrary code via long 1 UID, 2 Opf, 3 PAGENO, 4 LaunchMode, 5 SubID, 6 BookID, 7 LibraryID, 8...

CVE-2007-2919

The CVE-2007-2919 entry describes multiple stack-based buffer overflows in the FViewerLoading ActiveX control (FlipViewerX.dll) of E-Book Systems FlipViewer prior to version 4.1. The vulnerability occurs when processing long values for properties including UID, Opf, PAGENO, LaunchMode, SubID, Boo...

Design/Logic Flaw

A certain ActiveX control in sasatl.dll in Zenturi ProgramChecker allows remote attackers to download arbitrary files to the client system via the DownloadFile function...

Buffer overflow

Multiple buffer overflows in an ActiveX control boisweb.dll in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allow remote attackers to execute arbitrary code via the 1 the second parameter to the DownloadAndExecute method and 2 third parameter to the AddFileEx method, a different...

CVE-2007-3071

Buffer overflow in the GetWebStoreURL function in a certain ActiveX control in eSellerateControl365.dll 3.6.5.0 in eSellerate SDK allows user-assisted remote attackers to execute arbitrary code via a long first argument...

CVE-2007-2419

Multiple buffer overflows in an ActiveX control boisweb.dll in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allow remote attackers to execute arbitrary code via the 1 the second parameter to the DownloadAndExecute method and 2 third parameter to the AddFileEx method, a different...

CVE-2007-3076

A certain ActiveX control in sasatl.dll in Zenturi ProgramChecker allows remote attackers to download arbitrary files to the client system via the DownloadFile function...

CVE-2007-3076

The CVE-2007-3076 entry concerns the Zenturi ProgramChecker ActiveX control (sasatl.dll). The connected documents confirm that the ActiveX control contains a vulnerability in the DownloadFile function that allows remote attackers to download arbitrary files to a user’s system. Additional connecte...

CVE-2007-2419

Multiple buffer overflows in an ActiveX control boisweb.dll in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allow remote attackers to execute arbitrary code via the 1 the second parameter to the DownloadAndExecute method and 2 third parameter to the AddFileEx method, a different...

CVE-2007-2419

CVE-2007-2419: A buffer overflow in the boisweb.dll ActiveX control used by Macrovision FLEXnet Connect 6.0 and Update Service 3.x–5.x allows remote code execution. The vulnerability is triggered by specific parameters to DownloadAndExecute (second parameter) and AddFileEx (third parameter). Tipp...