IDAutomation多个条码ActiveX控件任意文件覆盖漏洞

BUGTRAQ ID: 29204 IDAutomation是美国一家专注于自动识别、条形码技术的公司，IDAutomation的产品包括条形码编辑、识别、打印、扫描功能的字体包、软件、控件产品等。 IDAutomation带的ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞在用户系统上写入任意文件。 IDAutomation所提供的以下条码ActiveX控件： IDAuto.BarCode.1（IDAutomationLinear6.dll） IDAuto.Datamatrix.1（IDAutomationDMATRIX6.DLL）...

idautomation-activex.txt

----------------------------------------------------------------------------- IDAutomation Multiple Vulnerabilities url: www.idautomation.com Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose. Use it at your own risk. Autho...

idautomation bar code - ActiveX Multiple Vulnerabilities

idautomation bar code - ActiveX Multiple Vulnerabilities ----------------------------------------------------------------------------- IDAutomation Multiple Vulnerabilities url: www.idautomation.com Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was writte...

[Eleytt] 7LIPIEC2007

Eleytt Research www.eleytt.com Overview/Credit: ==================== Michal Bucko www.eleytt.com/michal.bucko sapheal.hack.pl Vulnerability Table =================== 1. Firefox 2.0.0.4 Remote Denial of Service Vulnerability 2. Microsoft Register Server Remote Denial of Service Issue 3. FreeWRL...

Code injection

The Nonnoi ASP/Barcode ActiveX control nonnoiASPBarcode.dll allows remote attackers to overwrite arbitrary files via an argument to the SaveBarcode function...

CVE-2007-3660

CVE-2007-3660 affects the Nonnoi ASP/Barcode ActiveX control (nonnoi_ASPBarcode.dll). The vulnerability allows remote attackers to overwrite arbitrary files via an argument to the SaveBarcode function. Impact is partial confidentiality, integrity, and availability (per CVSS 2.0: AV:N/AC:L/Au:N/C:...

[Full-disclosure] [GOODFELLAS - VULN] BarCodeAx.dll v. 4.9 ActiveX Control Remote Stack Buffer Overflow

:. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: BarCodeAx.dll v. 4.9 ActiveX Control Remote Stack Buffer Overflow ================================================================= Internal ID: VULWAR200706223 Introduction ------------ BarCodeAx.dll is a library...

RKD Software BarCode ActiveX Control 'BarCodeAx.dll' 4.9 - Remote Overflow

:. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: BarCodeAx.dll v. 4.9 ActiveX Control Remote Stack Buffer Overflow ================================================================= Internal ID: VULWAR200706223 Introduction ------------ BarCodeAx.dll is a library...

RKD Software BarCode ActiveX Control BarCodeAx.dll 4.9 - Remote Overflow

RKD Software BarCode ActiveX Control BarCodeAx.dll 4.9 - Remote Overflow :. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: BarCodeAx.dll v. 4.9 ActiveX Control Remote Stack Buffer Overflow ================================================================= Internal ID...

PrecisionID Barcode ActiveX 1.9 Remote Denial of Service Exploit

No description provided by source. pre span style="font: 14pt Courier New;"p align="center"b2007/05/16/b/p/span codespan style="font: 10pt Courier New;"span class="general1-symbol"--------------------------------------------------------------------------------------- bIE 6 PrecisionID Barcode...

PrecisionID Barcode ActiveX 1.9 Remote Arbitrary File Overwrite Exploit

No description provided by source. pre span style="font: 14pt Courier New;"p align="center"b2007/05/16/b/p/span codespan style="font: 10pt Courier New;"span class="general1-symbol"----------------------------------------------------------------------------------------------------- bIE 6 Precision...

CVE-2007-2755

The PrecisionID Barcode 1.9 ActiveX control in PrecisionIDBarcode.dll, when Internet Explorer 6 is used, allows remote attackers to overwrite arbitrary files via a full pathname to the SaveToFile function, a different vulnerability than CVE-2007-2744...

Code injection

The PrecisionID Barcode 1.9 ActiveX control in PrecisionIDBarcode.dll, when Internet Explorer 6 is used, allows remote attackers to overwrite arbitrary files via a full pathname to the SaveToFile function, a different vulnerability than CVE-2007-2744...

CVE-2007-2755

CVE-2007-2755 : The PrecisionID Barcode 1.9 ActiveX control (PrecisionID_Barcode.dll) is vulnerable when used with Internet Explorer 6. An attacker can overwrite arbitrary files by passing a full pathname to the SaveToFile function, representing a file-write condition that is separate from CVE-20...

Stack overflow

Stack-based buffer overflow in the PrecisionID Barcode 1.9 ActiveX control in PrecisionIDBarcode.dll allows remote attackers to cause a denial of service Internet Explorer 6 crash, and possibly execute arbitrary code, via a long argument to the SaveBarCode method. NOTE: this issue might overlap...

CVE-2007-2744

Stack-based buffer overflow in the PrecisionID Barcode 1.9 ActiveX control in PrecisionIDBarcode.dll allows remote attackers to cause a denial of service Internet Explorer 6 crash, and possibly execute arbitrary code, via a long argument to the SaveBarCode method. NOTE: this issue might overlap...

CVE-2007-2744

The CVE-2007-2744 entry concerns the PrecisionID Barcode 1.9 ActiveX control (PrecisionID_Barcode.dll). The vulnerability is a stack-based buffer overflow triggered by a long argument to the SaveBarCode method, allowing a remote attacker to cause an Internet Explorer 6 crash and potentially execu...

precision-overwrite.txt

2007/05/16 ----------------------------------------------------------------------------------------------------- IE 6 PrecisionID Barcode ActiveX 1.9 0day PrecisionIDBarcode.dll Remote Arbitrary File Overwrite url: http://www.precisionid.com/ author: shinnai mail: shinnaiatautisticidotorg site:...

morovia-overwrite.txt

2007/05/11 -------------------------------------------------------------------------------- Morovia Barcode ActiveX Professional 3.3 build 1304 Arbitrary file overwrite url: http://www.morovia.com/ price: $129 author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This...

PrecisionID Barcode - PrecisionID_Barcode.dll ActiveX 1.9 Control Arbitrary File Overwrite

PrecisionID Barcode - PrecisionIDBarcode.dll ActiveX 1.9 Control Arbitrary File Overwrite source: https://www.securityfocus.com/bid/24014/info 2007/05/16 ----------------------------------------------------------------------------------------------------- IE 6 PrecisionID Barcode ActiveX 1.9 0day...