CVE-2007-3633: Undefined Security Weakness

Absolute path traversal vulnerability in the Chilkat Software Chilkat Zip ActiveX control in ChilkatZip2.dll 12.4.2.0 allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the 1 SaveLastError method and probably the 2 WriteExe method...

HP Photo Digital Imaging HPQXML.DLL任意文件覆盖漏洞

HP Photo Digital Imaging是一款图象处理软件。 HP Photo Digital Imaging HPQXML.DLL ActiveX控件不正确调用方法，远程攻击者可以利用漏洞覆盖系统任意文件，造成拒绝服务或任意代码执行。 问题存在于HPQXML.DLL中的ActiveX控件，由于不安全调用"saveXMLAsFile"方法，构建恶意的WEB页，诱使用户访问可导致覆盖系统任意文件，造成拒绝服务或任意代码执行。 HP HP Photo Digital Imaging hpqxml.dll 2.0.0.133 目前没有解决方案提供：...

CVE-2007-3400: Improper Input Validation

The NCTAudioEditor2 ActiveX control in NCTWMAFile2.dll 2.6.2.157, as distributed in NCTAudioEditor and NCTAudioStudio 2.7, allows remote attackers to overwrite arbitrary files via the CreateFile method...

Ingress Database Server 2.6 - Multiple Remote Vulnerabilities

Ingress Database Server 2.6 - Multiple Remote Vulnerabilities source: https://www.securityfocus.com/bid/24585/info Ingress Database Server included in CA eTrust Secure Content Manager is prone to multiple remote vulnerabilities, including multiple stack- and heap-based buffer-overflow issues,...

Ingress Database Server 2.6 - Multiple Remote Vulnerabilities

source: https://www.securityfocus.com/bid/24585/info Ingress Database Server included in CA eTrust Secure Content Manager is prone to multiple remote vulnerabilities, including multiple stack- and heap-based buffer-overflow issues, multiple pointer-overwrite issues, and an arbitrary-file-overwrit...

TEC-IT TBarCode - OCX ActiveX Arbitrary File Overwrite

TEC-IT TBarCode - OCX ActiveX Arbitrary File Overwrite ----------------------------------------------------------------------------------------------------------------- TEC-IT TBarCode OCX ActiveX Control TBarCode7.ocx v. 7.0.2.3524 "SaveImage" Remote Arbitrary File Overwrite url:...

TEC-IT TBarCode OCX ActiveX Remote Arbitrary File Overwrite Exploit

Exploit for unknown platform in category remote exploits =================================================================== TEC-IT TBarCode OCX ActiveX Remote Arbitrary File Overwrite Exploit ===================================================================...

TEC-IT TBarCode - OCX ActiveX Arbitrary File Overwrite

----------------------------------------------------------------------------------------------------------------- TEC-IT TBarCode OCX ActiveX Control TBarCode7.ocx v. 7.0.2.3524 "SaveImage" Remote Arbitrary File Overwrite url: http://www.tec-it.com/asp/main/startfr.asp?LN=1 author: shinnai mail:...

zenturi-overwrite.txt

pre 2007/05/30 ------------------------------------------------------------------------------------------- Zenturi ProgramChecker ActiveX sasatl.dll Arbitrary file download/overwrite Exploit url: http://www.programchecker.com/activeintro.aspx author: shinnai mail: shinnaiatautisticidotorg site:...

CVE-2007-2851: Undefined Security Weakness

A certain ActiveX control in LeadTools Raster Variant Object Library LTRVR14e.dll 14.5.0.44 allows remote attackers to overwrite arbitrary files via the WriteDataToFile method...

LeadTools Raster Variant (LTRVR14e.dll) Remote File Overwrite Exploit

Exploit for unknown platform in category remote exploits ===================================================================== LeadTools Raster Variant LTRVR14e.dll Remote File Overwrite Exploit ===================================================================== 2007/05/21...

PrecisionID Barcode ActiveX 1.9 Remote Arbitrary File Overwrite Exploit

No description provided by source. pre span style="font: 14pt Courier New;"p align="center"b2007/05/16/b/p/span codespan style="font: 10pt Courier New;"span class="general1-symbol"----------------------------------------------------------------------------------------------------- bIE 6 Precision...

CVE-2007-2755: Undefined Security Weakness

The PrecisionID Barcode 1.9 ActiveX control in PrecisionIDBarcode.dll, when Internet Explorer 6 is used, allows remote attackers to overwrite arbitrary files via a full pathname to the SaveToFile function, a different vulnerability than CVE-2007-2744...

precision-overwrite.txt

2007/05/16 ----------------------------------------------------------------------------------------------------- IE 6 PrecisionID Barcode ActiveX 1.9 0day PrecisionIDBarcode.dll Remote Arbitrary File Overwrite url: http://www.precisionid.com/ author: shinnai mail: shinnaiatautisticidotorg site:...

PrecisionID Barcode - 'PrecisionID_Barcode.dll' ActiveX 1.9 Control Arbitrary File Overwrite

source: https://www.securityfocus.com/bid/24014/info 2007/05/16 ----------------------------------------------------------------------------------------------------- IE 6 PrecisionID Barcode ActiveX 1.9 0day PrecisionIDBarcode.dll Remote Arbitrary File Overwrite url: http://www.precisionid.com/...

PrecisionID Barcode ActiveX 1.9 - Arbitrary File Overwrite

PrecisionID Barcode ActiveX 1.9 - Arbitrary File Overwrite 2007/05/16 ----------------------------------------------------------------------------------------------------- IE 6 PrecisionID Barcode ActiveX 1.9 0day PrecisionIDBarcode.dll Remote Arbitrary File Overwrite url:...

CVE-2007-2725: Undefined Security Weakness

The DB Software Laboratory DeWizardX DEWizardAX.ocx ActiveX control allows remote attackers to overwrite arbitrary files via the SaveToFile function...

DeWizardX (DEWizardAX.ocx) Arbitrary File Overwrite Exploit

Exploit for unknown platform in category remote exploits =========================================================== DeWizardX DEWizardAX.ocx Arbitrary File Overwrite Exploit =========================================================== 2007/05/15...

DeWizardX - DEWizardAX.ocx Arbitrary File Overwrite

DeWizardX - DEWizardAX.ocx Arbitrary File Overwrite 2007/05/15 ----------------------------------------------------------------------------------- DB Software Laboratory DeWizardX DEWizardAX.ocx Remote Arbitrary File Overwrite url: http://www.dbsoftlab.com price: $100 author: shinnai mail:...

DeWizardX (DEWizardAX.ocx) Arbitrary File Overwrite Exploit

No description provided by source. pre span style="font: 14pt Courier New;"p align="center"b2007/05/15/b/p/span codespan style="font: 10pt Courier New;"span class="general1-symbol"----------------------------------------------------------------------------------- bDB Software Laboratory DeWizardX...