BaoFeng - 'config.dll' ActiveX Remote Code Execution

BaoFeng config.dll ActiveX Remote Code Execution Exploit Exploit made by etirah Download: www.baofeng.com Problem DLL : config.dll Problem Func : SetAttributeValueparam1,param2,param3 Problem Param : param1 References: 1. http://forum.eviloctal.com/viewthread.php?tid=35051 2...

BaoFeng Storm ActiveX Control Buffer Overflow Vulnerability

This host is installed with BaoFeng Storm ActiveX and is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: gbbaofengstormactivexctrlbofvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ BaoFeng Storm ActiveX Control Buffer Overflow Vulnerability Authors: Nikita MR Copyright: Copyrigh...

BaoFeng Storm ActiveX Control Buffer Overflow Vulnerability

BaoFeng Storm ActiveX is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Stack overflow

Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to execute arbitrary code via a long argument to the OnBeforeVideoDownload method, as exploited in the wild in April and May 2009. NOTE: some of these details are...

CVE-2009-1612

A stack-based buffer overflow exists in the MPS.StormPlayer.1 ActiveX control within mps.dll version 3.9.4.27 and earlier in Baofeng Storm . Remote attackers can execute arbitrary code by providing an overly long argument to the OnBeforeVideoDownload method. This vulnerability was exploited in th...

CVE-2009-1612

Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to execute arbitrary code via a long argument to the OnBeforeVideoDownload method, as exploited in the wild in April and May 2009. NOTE: some of these details are...

CVE-2009-1612: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to execute arbitrary code via a long argument to the OnBeforeVideoDownload method, as exploited in the wild in April and May 2009. NOTE: some of these details are...

BaoFeng Buffer Overflow

BaoFeng mps.dll Remote Code Execution Exploit By: MITBOY Download: www.baofeng.com Problem DLL : mps.dll Problem Func : OnBeforeVideoDownload function test var shellcode =...

BaoFeng ActiveX OnBeforeVideoDownload() Remote BOF Exploit

No description provided by source. BaoFeng mps.dll Remote Code Execution Exploit By: MITBOY Download: www.baofeng.com Problem DLL : mps.dll Problem Func : OnBeforeVideoDownload html body object classid="clsid:6BE52E1D-E586-474F-A6E2-1A85A9B4D9FB" id="target"/object input type="button"...

BaoFeng (mps.dll) Remote Code Execution Exploit-vulnerability warning-the black bar safety net

BaoFeng mps.dll Remote Code Execution Exploit By: MITBOY Download: www.baofeng.com Problem DLL : mps.dll Problem Func : OnBeforeVideoDownload the the the function test var shellcode =...

BaoFeng ActiveX OnBeforeVideoDownload() Remote BOF Exploit

Exploit for windows platform in category remote exploits ========================================================== BaoFeng ActiveX OnBeforeVideoDownload Remote BOF Exploit ========================================================== BaoFeng mps.dll Remote Code Execution Exploit By: MITBOY Download...

BaoFeng - ActiveX OnBeforeVideoDownload() Remote Buffer Overflow

BaoFeng - ActiveX OnBeforeVideoDownload Remote Buffer Overflow BaoFeng mps.dll Remote Code Execution Exploit By: MITBOY Download: www.baofeng.com Problem DLL : mps.dll Problem Func : OnBeforeVideoDownload function test var shellcode =...

BaoFeng Storm mps.dll ActiveX OnBeforeVideoDownload Buffer Overflow

This module exploits a buffer overflow in BaoFeng's Storm media Player ActiveX control. Versions of mps.dll including 3.9.4.27 and lower are affected. When passing an overly long string to the method "OnBeforeVideoDownload" an attacker can execute arbitrary code. Module Options msf use...

BaoFeng - ActiveX 'OnBeforeVideoDownload()' Remote Buffer Overflow

BaoFeng mps.dll Remote Code Execution Exploit By: MITBOY Download: www.baofeng.com Problem DLL : mps.dll Problem Func : OnBeforeVideoDownload function test var shellcode =...

暴风影音3.7.11.13 远程拒绝服务漏洞

暴风影音是一款播放软件，经过测试，暴风影音3.7.11.13存在一个远程DDOS漏洞。 官方网站：http://www.baofeng.com/ 起因是暴风影音自动更新程序会在远程监听一个端口,如果向其发送畸形数据包,就会导致自动更新程序崩溃;如果对其发送精心构造过的数据包,则足以导致用户主机在不知情的情况下被完全控制. 暴风影音3 Build version : 3.7.11.13 Test version : 3.7.11.13,自从带了一个自动升级服务stormlive.exe之后, 会在本地开启一个UDP端口5354,向端口发送恶意封包可造成stormlive崩溃...

Buffer overflow

Multiple buffer overflows in a certain ActiveX control in sparser.dll in Baofeng Storm 2.8 and earlier allow remote attackers to execute arbitrary code via malformed input in an unknown set of arguments or property values, a different DLL than CVE-2007-4816. NOTE: the provenance of this informati...

CVE-2007-4943

Multiple buffer overflows in a certain ActiveX control in sparser.dll in Baofeng Storm 2.8 and earlier allow remote attackers to execute arbitrary code via malformed input in an unknown set of arguments or property values, a different DLL than CVE-2007-4816. NOTE: the provenance of this informati...

CVE-2007-4943

Multiple buffer overflows in a certain ActiveX control in sparser.dll in Baofeng Storm 2.8 and earlier allow remote attackers to execute arbitrary code via malformed input in an unknown set of arguments or property values, a different DLL than CVE-2007-4816. NOTE: the provenance of this informati...

CVE-2007-4943

Technical details for CVE-2007-4943 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2007-4943: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in a certain ActiveX control in sparser.dll in Baofeng Storm 2.8 and earlier allow remote attackers to execute arbitrary code via malformed input in an unknown set of arguments or property values, a different DLL than CVE-2007-4816. NOTE: the provenance of this informati...