573 matches found
AOL IWinAmpActiveX Class ConvertFile() Buffer Overflow
//add user one, user "sun" pass "tzu" shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241" + "%u4142%u4230%u5841%u3850%u4241%u6d75%u6b...
AOL IWinAmpActiveX Class - 'ConvertFile()' Remote Buffer Overflow
//add user one, user "sun" pass "tzu" shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241" + "%u4142%u4230%u5841%u3850%u4241%u6d75%u6b39%u...
AOL IWinAmpActiveX Class ConvertFile() Remote BOF Exploit
Exploit for windows platform in category remote exploits ========================================================= AOL IWinAmpActiveX Class ConvertFile Remote BOF Exploit ========================================================= //add user one, user "sun" pass "tzu" shellcode =...
AOL IWinAmpActiveX Class ConvertFile() Remote BOF Exploit
No description provided by source. !-- AOL IWinAmpActiveX Class AmpX.dll 2.4.0.6 ConvertFile remote overflow exploit IE6/IE7 by rgod site: http://retrogod.altervista.org/ Notes by Nine:Situations:Group : an old unreleased one from rgod's archive, not the same of...
Conficker-infected PCs get update, better anti-security defenses
From Network World Jeremy Kirk Millions of PCs infected with the Conficker virus have received a series of updated files over peer-to-peer connections that improve the worm’s defenses against security products and also include a sniffer and some fake anti-virus software. This is just the latest...
AOL Instant Messenger AIM "Away" Message Local Exploit
No description provided by source. / subject: local PoC exploit for AIM 5.5.3595 vendor: http://www.aim.com cve: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0636 credits: Matt Murphy date: 10 August 2004 notes: exploits localy if an argument is supplied, otherwise prints the url...
AOL AIM SIPFoundry sipXtapi RTCP Processing Heap Overflow Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of AOL AIM. Successful exploitation requires the victim to accept a Video Messaging session with the attacker. The specific flaw exists in the SIP protocol implementation library, sipXtapi.dll. If a...
AOL AIM SIPFoundry sipXtapi RTP Processing Heap Overflow Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of any communication application utilizing the SIP Foundry API. This includes vendors such as AOL, Yahoo, Skype, Oracle, Nortel and more. Authentication is not required to exploit these vulnerabilitie...
ICQ消息处理远程格式串处理漏洞
BUGTRAQ ID: 28027 ICQ是一款流行的即时通讯聊天工具。 ICQ在生成HTML代码以在内嵌的Internet Explorer组件中显示消息时存在格式串错误，如果远程攻击者向其他用户发送了包含有格式串标识符的特制消息的话，就可以触发这个漏洞，导致执行任意指令。 AOL ICQ 6 临时解决方法： 启用“只允许来自我联系人名单上的用户的消息”选项并从联系人列表中删除不可信任的用户。 如果启用了“显示来自不认识人消息前请询问”选项的话，拒绝入站消息。 厂商补丁： AOL --- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
CVE-2007-6699
Multiple buffer overflows in the AIM PicEditor 9.5.1.8 ActiveX control in YGPPicEdit.dll in AOL You've Got Pictures YGP Picture Editor allow remote attackers to cause a denial of service browser crash via a long string in the 1 DisplayName, 2 FinalSavePath, 3 ForceSaveTo, 4 HiddenControls, 5...
CVE-2007-6699
CVE-2007-6699 concerns multiple buffer overflows in the AIM PicEditor 9.5.1.8 ActiveX control (YGPPicEdit.dll) used by AOL You've Got Pictures (YGP) Picture Editor. The vulnerability arises from handling long string values in specific properties (DisplayName, FinalSavePath, ForceSaveTo, HiddenCon...
AOL Radio MediaPlaybackControl.exe AmpX ActiveX控件栈溢出漏洞
BUGTRAQ ID: 27207 CVECAN ID: CVE-2007-6250 AOL的AmpX ActiveX控件是AOL Radio使用的用于播放网页中音频流的控件。 AmpX.dll所提供的AmpX ActiveX控件使用了名为AOLMediaPlaybackControl.exe的程序，而AOLMediaPlaybackControl中存在栈溢出漏洞。如果用户受骗访问了恶意网页并向AmpX ActiveX控件的AppendFileToPlayList方式传送了超长参数的话，就可以触发这个溢出，导致执行任意指令。 AOL AmpX.dll 2.6.1.11 临时解决方法：...
AOL Radio AOLMediaPlaybackControl.exe stack buffer overflow
Overview The AOL AOLMediaPlaybackControl application contains a stack buffer overflow, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description AOL Radio includes several ActiveX controls to stream audio in web pages. The AOL AmpX and...
AOL Radio AmpX ActiveX Control Buffer Overflow (CVE-2007-5755)
AOL Radio is a free online radio service provided by America Online. Multiple buffer overflow vulnerabilities exist in AOL Radio. These vulnerabilities are due to boundary errors in the AOL Radio AmpX ActiveX Control. To trigger this issue, an attacker may create a malicious web page that will...
AOL YGPPicEdit.dll ActiveX控件多个远程溢出漏洞
BUGTRAQ ID: 27026 YGPPicEdit.dll是AOL产品所安装的图形编辑ActiveX控件。 YGPPicEdit.dll没有正确地验证多个属性的参数，如果用户受骗打开了恶意网页的话，就可能触发缓冲区溢出，导致执行任意指令。 AOL YGPPicEdit.dll 9.5.1.8 厂商补丁： AOL --- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.aol.com/ html head script language="JavaScript" DEFER function Check var s...
aolygp-overflows.txt
The AOL YGP Picture Editor ControlAIM PicEditor Control version 9.5.1.8 suffers from multiple exploitable buffer overflows in various properties. This object is marked safe for scripting. I have not tested other versions. PoC as follows: ---------------- function Check var s = 'A'; while s.length...
AOL AIM YGP Picture Editor ActiveX control buffer overflow
Buffer overflows in different properties...
[Full-disclosure] AOL YGP Picture Editor YGPPicEdit.dll Multiple Buffer Overflows
The AOL YGP Picture Editor ControlAIM PicEditor Control version 9.5.1.8 suffers from multiple exploitable buffer overflows in various properties. This object is marked safe for scripting. I have not tested other versions. PoC as follows: ---------------- !-- written by e.b. -- html head script...
AOL Picture Editor 'YGPPicEdit.dll' ActiveX Control 9.5.1.8 - Multiple Buffer Overflow Vulnerabilities
source: https://www.securityfocus.com/bid/27026/info AOL Picture Editor 'YGPPicEdit.dll' ActiveX control is prone to multiple vulnerabilities that attackers can exploit to crash the application. The issues stem from various buffer-overflow conditions. An attacker can exploit these issues by...
AOL Picture Editor YGPPicEdit.dll ActiveX Control 9.5.1.8 - Multiple Buffer Overflow Vulnerabilities
AOL Picture Editor YGPPicEdit.dll ActiveX Control 9.5.1.8 - Multiple Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/27026/info AOL Picture Editor 'YGPPicEdit.dll' ActiveX control is prone to multiple vulnerabilities that attackers can exploit to crash the application. T...