BaoFeng Storm ActiveX Control Buffer Overflow Vulnerability

This host is installed with BaoFeng Storm ActiveX and is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: gbbaofengstormactivexctrlbofvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ BaoFeng Storm ActiveX Control Buffer Overflow Vulnerability Authors: Nikita MR Copyright: Copyrigh...

BaoFeng Storm ActiveX Control Buffer Overflow Vulnerability

BaoFeng Storm ActiveX is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Stack overflow

Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to execute arbitrary code via a long argument to the OnBeforeVideoDownload method, as exploited in the wild in April and May 2009. NOTE: some of these details are...

CVE-2009-1612

BaoFeng Storm ActiveX control (MPS.StormPlayer.1 in mps.dll) is affected by a stack-based buffer overflow (CVE-2009-1612). Vulnerable component: mps.dll 3.9.4.27 and earlier; condition arises when an overly long string is passed to OnBeforeVideoDownload. Consequence: remote code execution by an a...

CVE-2009-1612

Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to execute arbitrary code via a long argument to the OnBeforeVideoDownload method, as exploited in the wild in April and May 2009. NOTE: some of these details are...

BaoFeng (mps.dll) Remote Code Execution Exploit-vulnerability warning-the black bar safety net

BaoFeng mps.dll Remote Code Execution Exploit By: MITBOY Download: www.baofeng.com Problem DLL : mps.dll Problem Func : OnBeforeVideoDownload the the the function test var shellcode =...

BaoFeng Buffer Overflow

BaoFeng mps.dll Remote Code Execution Exploit By: MITBOY Download: www.baofeng.com Problem DLL : mps.dll Problem Func : OnBeforeVideoDownload function test var shellcode =...

BaoFeng ActiveX OnBeforeVideoDownload() Remote BOF Exploit

No description provided by source. BaoFeng mps.dll Remote Code Execution Exploit By: MITBOY Download: www.baofeng.com Problem DLL : mps.dll Problem Func : OnBeforeVideoDownload html body object classid="clsid:6BE52E1D-E586-474F-A6E2-1A85A9B4D9FB" id="target"/object input type="button"...

BaoFeng ActiveX OnBeforeVideoDownload() Remote BOF Exploit

Exploit for windows platform in category remote exploits ========================================================== BaoFeng ActiveX OnBeforeVideoDownload Remote BOF Exploit ========================================================== BaoFeng mps.dll Remote Code Execution Exploit By: MITBOY Download...

BaoFeng - ActiveX 'OnBeforeVideoDownload()' Remote Buffer Overflow

BaoFeng mps.dll Remote Code Execution Exploit By: MITBOY Download: www.baofeng.com Problem DLL : mps.dll Problem Func : OnBeforeVideoDownload function test var shellcode =...

BaoFeng - ActiveX OnBeforeVideoDownload() Remote Buffer Overflow

BaoFeng - ActiveX OnBeforeVideoDownload Remote Buffer Overflow BaoFeng mps.dll Remote Code Execution Exploit By: MITBOY Download: www.baofeng.com Problem DLL : mps.dll Problem Func : OnBeforeVideoDownload function test var shellcode =...

暴风影音3.7.11.13 远程拒绝服务漏洞

暴风影音是一款播放软件，经过测试，暴风影音3.7.11.13存在一个远程DDOS漏洞。 官方网站：http://www.baofeng.com/ 起因是暴风影音自动更新程序会在远程监听一个端口,如果向其发送畸形数据包,就会导致自动更新程序崩溃;如果对其发送精心构造过的数据包,则足以导致用户主机在不知情的情况下被完全控制. 暴风影音3 Build version : 3.7.11.13 Test version : 3.7.11.13,自从带了一个自动升级服务stormlive.exe之后, 会在本地开启一个UDP端口5354,向端口发送恶意封包可造成stormlive崩溃...

Buffer overflow

Multiple buffer overflows in a certain ActiveX control in sparser.dll in Baofeng Storm 2.8 and earlier allow remote attackers to execute arbitrary code via malformed input in an unknown set of arguments or property values, a different DLL than CVE-2007-4816. NOTE: the provenance of this informati...

CVE-2007-4943

Multiple buffer overflows in a certain ActiveX control in sparser.dll in Baofeng Storm 2.8 and earlier allow remote attackers to execute arbitrary code via malformed input in an unknown set of arguments or property values, a different DLL than CVE-2007-4816. NOTE: the provenance of this informati...

CVE-2007-4943

Multiple buffer overflows in a certain ActiveX control in sparser.dll in Baofeng Storm 2.8 and earlier allow remote attackers to execute arbitrary code via malformed input in an unknown set of arguments or property values, a different DLL than CVE-2007-4816. NOTE: the provenance of this informati...

CVE-2007-4943

Technical details for CVE-2007-4943 are not publicly available in the provided documents. Monitor for updates from official advisories.

BaoFeng Storm MPS.DLL ActiveX Control Multiple Remote Buffer Overflow Vulnerabilities

Description BaoFeng Storm ActiveX control is prone to multiple buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data. Successfully exploiting these issues allows remote attackers to execute arbitrary code in the context of the application using...

暴风影音II mps.dll ActiveX栈溢出漏洞

No description provided by source. html object classid="clsid:6BE52E1D-E586-474f-A6E2-1A85A9B4D9FB" id='target'/object body SCRIPT language="javascript" var shellcode = unescape"%u9090"+"%u9090"+ "%uefe9%u0000%u5a00%ua164%u0030%u0000%u408b%u8b0c" +...