EUVD-2008-4902

Malware in sbrugna...

MW6 Technologies Aztec ActiveX (Data param) - Buffer Overflow

No description provided by source. !-- =========================================================================== Problem: The Data parameter is subject to a buffer overflow DEFINITELY leading to arbitrary code execution. COM Object - F359732D-D020-40ED-83FF-F381EFE36B54 MW6Aztec Class File...

MW6 Technologies Aztec ActiveX Control Buffer Overflow (CVE-2013-6040)

A buffer overflow vulnerability exists in MW6 Technologies Aztec ActiveX Control. The vulnerability is due to improperly handled user input in the 'Data' parameter. A remote attacker could exploit the vulnerability via a specially crafted web page...

MW6 Technologies Aztec - ActiveX 'Data' Buffer Overflow (PoC)

object id=TestObj classid="CLSID:F359732D-D020-...

MW6 Technologies Aztec ActiveX (Data param) - Buffer Overflow

Exploit for windows platform in category dos / poc o...

Design/Logic Flaw

Multiple insecure method vulnerabilities in MW6 Technologies Aztec ActiveX control AZTECLib.MW6Aztec, Aztec.dll 3.0.0.1 allow remote attackers to overwrite arbitrary files via a full pathname argument to the 1 SaveAsBMP and 2 SaveAsWMF methods...

CVE-2008-4923

The CVE-2008-4923 entry concerns MW6 Technologies Aztec ActiveX control (AZTECLib.MW6Aztec, Aztec.dll) v3.0.0.1. Affected component methods SaveAsBMP and SaveAsWMF allow a remote attacker to overwrite arbitrary files by passing a full pathname argument, indicating an insecure method vulnerability...

CVE-2008-4923

Multiple insecure method vulnerabilities in MW6 Technologies Aztec ActiveX control AZTECLib.MW6Aztec, Aztec.dll 3.0.0.1 allow remote attackers to overwrite arbitrary files via a full pathname argument to the 1 SaveAsBMP and 2 SaveAsWMF methods...

MW6 Aztec ActiveX (Aztec.dll) Remote Insecure Method Exploit

No description provided by source. !-- By Dr.Pantagon DeltaSecurityCenter www.DeltaSecurity.ir Description : Aztec ActiveX ver : 3.0.0.1 CopyRight : MW6 Technologies, Inc. Download Link : http://www.mw6tech.com/aztec/MW6Aztec.ZIP This was written for educational purpose. Use it at your own risk...

Aztec ActiveX 'Aztec.dll' ActiveX控件任意文件覆盖漏洞

BUGTRAQ ID: 31974 CNCAN ID：CNCAN-2008103002 MW6 Aztec ActiveX是一款条形码组件。 MW6 Aztec ActiveX 'Aztec.dll'存在设计问题，远程攻击者可以利用漏洞以应用程序权限覆盖系统文件。 控件对SaveAsBMP和SaveAsWMF方法处理存在问题，构建恶意WEB页，诱使用户访问，可导致以应用程序权限覆盖系统文件。 MW6 Technologies Aztec ActiveX 3.0.0.1 目前没有详细解决方案提供： http://www.mw6tech.com/products.html...

MW6 Aztec ActiveX 3.0.0.1 Insecure Method Exploit

No description provided by source. !-- By Dr.Pantagon DeltaSecurityCenter www.DeltaSecurity.ir Description : Aztec ActiveX ver : 3.0.0.1 CopyRight : MW6 Technologies, Inc. Download Link : http://www.mw6tech.com/aztec/MW6Aztec.ZIP This was written for educational purpose. Use it at your own risk...

mw6aztec-insecure.txt

Test Exploit page targetFile = "C:\WINDOWS\system32\Aztec.dll" prototype = "Sub SaveAsBMP ByVal FileName As String " memberName = "SaveAsBMP" progid = "AZTECLib.MW6Aztec" argCount = 1 arg1="c:\windows\system.ini" target.SaveAsBMP arg1 'target.SaveAsWMF arg1...

MW6 Aztec ActiveX (Aztec.dll) Remote Insecure Method Exploit

Exploit for unknown platform in category remote exploits ============================================================ MW6 Aztec ActiveX Aztec.dll Remote Insecure Method Exploit ============================================================ Test Exploit page targetFile =...

MW6 Aztec - ActiveX 'Aztec.dll' Remote Insecure Method

 Test Exploit page targetFile = "C:\WINDOWS\system32\Aztec.dll" prototype = "Sub SaveAsBMP ByVal FileName As String " memberName = "SaveAsBMP" progid = "AZTECLib.MW6Aztec" argCount = 1 arg1="c:\windows\system.ini" target.SaveAsBMP arg1 'target.SaveAsWMF arg1 milw0rm.com 2008-10-29...