SmartVmd ActiveX v 1.1 Remote File Overwrite Exploit

No description provided by source. HTML BODY b Author : Houssamix br/ br/ br/ SmartVmd ActiveX v 1.1 remote File Overwrite Exploit br/ download : http://www.smartvmd.com/setup/SetupActiveXVmd.msi br/ b/ object id=hsmx classid="clsid:E3462D53-47A6-11D8-8EF6-DAE89272743C"/object SCRIPT / Report for...

MetaProducts MetaTreeX ActiveX控件SaveToBMP()方式任意文件覆盖漏洞

BUGTRAQ ID: 33318 MetaTreeX是用于在Visual Basic、C++、VBA和Delphi应用程序中显示多级树状信息的ActiveX控件。 SaveToBMP.MetaTreeX ActiveX控件（MTXControl.OCX）没有正确地验证SaveToBMP方式的输入参数，如果远程攻击者受骗访问了恶意网页并向该方式传送了特制参数的话，就可能导致以当前登录用户权限覆盖任意系统文件。 MetaProducts MetaTreeX 1.5.100 临时解决方法： 为Clsid：67E66985-F81A-11D6-BC0F-F7B40157DC26设置kill...

MW6 Barcode - ActiveX Barcode.dll Remote Heap Overflow (PoC)

MW6 Barcode - ActiveX Barcode.dll Remote Heap Overflow PoC ----------------------------------------------------------- Author : Houssamix ----------------------------------------------------------- MW6 Barcode ActiveX Barcode.dll Reamote Heap Overflow Poc...

NCTVideoStudio ActiveX DLLs 1.6 - Remote Heap Overflow (PoC)

----------------------------------------------------------- Author : Mountassif Mouad Stack ----------------------------------------------------------- NCTVideoStudio ActiveX DLLs Version 1.6 Reamote Heap Overflow Poc ----------------------------------------------------------- 000000C8 EBP+12...

MetaProducts MetaTreeX V 1.5.100 ActiveX File Overwrite Exploit

Exploit for unknown platform in category remote exploits =============================================================== MetaProducts MetaTreeX V 1.5.100 ActiveX File Overwrite Exploit =============================================================== Author : Houssamix MetaProducts MetaTreeX V...

Linksys WVC54GC NetCamPlayerWeb11gv2.ocx ActiveX控件栈溢出漏洞

BUGTRAQ ID: 32665 CVECAN ID: CVE-2008-4391 Linksys WVC54GC是一款支持802.11g协议的无线网络摄像头。 Linksys WVC54GC摄像头的NetCamPlayerWeb11gv2.ocx文件提供一个名为NetCamPlayerWeb11gv2的ActiveX控件，该控件没有正确地过滤对SetSource方式所传送的输入参数。如果用户受骗浏览了特制的HTML文档并向该方式提供了超长输入参数的话，就可以触发栈溢出，导致浏览器崩溃或执行任意指令。 0 Linksys WVC54GC 1.19 临时解决方法：...

Visagesoft eXPert PDF EditorX (VSPDFEditorX.ocx) Insecure Method

Exploit for unknown platform in category dos / poc ================================================================ Visagesoft eXPert PDF EditorX VSPDFEditorX.ocx Insecure Method ================================================================ VISAGESOFT eXPert PDF EditorX VSPDFEditorX.ocx INSECU...

NOS Microsystems getPlus ActiveX控件缓冲区溢出漏洞

CVE ID：CVE-2008-4817 NOS Microsystems getPlus是一款下载管理器控件。 NOS Microsystems getPlus控件处理安装文件时存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 存在问题的控件为 getPlus gp.ocx 1.2.2.50，目前证实用于Adobe Reader 8.1的WEB安装使用此控件，要判断此版本控件是否安装，注册表编辑器可用于尝试浏览此注册表键值： HKEYCLASSESROOT\CLSID\CF40ACC5-E1BB-4aff-AC72-04C2F616BCA7...

Chilkat Crypt Activex Arbitrary File Creation/Execution PoC

Exploit for unknown platform in category remote exploits =========================================================== Chilkat Crypt Activex Arbitrary File Creation/Execution PoC ===========================================================...

Chilkat Crypt - ActiveX Arbitrary File Creation/Execution

----------------------------------------------------------------------------- Chilkat Crypt Activex Component Arbitrary File Creation/Execution url: http://www.chilkatsoft.com File: ChilkatCrypt2.dll CLSID: 3352B5B9-82E8-4FFD-9EB1-1A3E60056904 ProgID: ChilkatCrypt2.ChilkatCrypt2.1 Descr.: Chilkat...

Microsoft DebugDiag CrashHangExt.dll ActiveX控件拒绝服务漏洞

BUGTRAQ ID: 31996 CVECAN ID: CVE-2008-4800 调试诊断工具（DebugDiag）用于排除Win32用户态进程中挂起、内存泄露或崩溃等故障。 DebugDiag所提供的CrashHangExt.dll没有正确地验证某些输入参数，如果用户受骗访问了恶意网页的话，就会在使用该控件的应用（通常为IE）中触发空指针引用，导致拒绝服务的情况。 Microsoft DebugDiag 1.0 Microsoft --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

GdPicture Pro 'gdpicture4s.ocx' ActiveX控件任意文件覆盖漏洞

BUGTRAQ ID:31504 CNCAN ID：CNCAN-2008100305 GdPicture Pro是一款支持多格式的图像管理软件。 GdPicture Pro包含的gdpicture4s.ocx ActiveX控件存在设计错误，远程攻击者可以利用漏洞以应用程序权限覆盖系统文件。 SaveAsPDF方法允许通过sFilePath参数建立和覆盖文件，通过使用其他参数，如sTitle，攻击者可以注入HTML代码，使用hcp://协议执行。GdPicturePro5.Imaging也存在此漏洞。 GdPicture GdPicture Pro GdPicture GdPicture...

chilkat-execdos.txt

Chilkat IMAP ActiveX File Execution&IE DoS www.chilkasoft.com By: e.wiZz! Info: Bosnian Idiot FTW! Site: infected.blogger.ba Greetz: suN8Hclf,Luigi and peoples from hakin9 forum In the wild... File: ChilkatMailv79.dll ProgID: ChilkatMail2.ChilkatMailMan2.1 CLSID:...

BurnAware NMSDVDXU ActiveX Remote Arbitrary File Creation/Execution

No description provided by source. ----------------------------------------------------------------------------- BurnAware NMSDVDXU ActiveX Control Remote Arbitrary File Creation/Execution url: http://www.burnaware.com File: NMSDVDXU.dll = 1.0.0.13 CLSID: 0355854A-7F23-47E2-B7C3-97EE8DD42CD8...

Chilkat XML ActiveX Remote Arbitrary File Creation/Execution Exploit

No description provided by source. ----------------------------------------------------------------------------- Chilkat XML ActiveX Remote Arbitrary File Creation/Execution url: www.chilkatsoft.com File: ChilkatUtil.dll = 3.0.3.0 CLSID: 5022FAE8-B780-4B78-B8DC-1AF1145A4F42 ProgID:...

Chilkat XML ActiveX Remote Arbitrary File Creation/Execution Exploit

Exploit for unknown platform in category remote exploits ==================================================================== Chilkat XML ActiveX Remote Arbitrary File Creation/Execution Exploit ====================================================================...

Chilkat XML - ActiveX Arbitrary File CreationExecution

Chilkat XML - ActiveX Arbitrary File CreationExecution ----------------------------------------------------------------------------- Chilkat XML ActiveX Remote Arbitrary File Creation/Execution url: www.chilkatsoft.com File: ChilkatUtil.dll = 3.0.3.0 CLSID: 5022FAE8-B780-4B78-B8DC-1AF1145A4F42...

Chilkat XML - ActiveX Arbitrary File Creation/Execution

----------------------------------------------------------------------------- Chilkat XML ActiveX Remote Arbitrary File Creation/Execution url: www.chilkatsoft.com File: ChilkatUtil.dll = 3.0.3.0 CLSID: 5022FAE8-B780-4B78-B8DC-1AF1145A4F42 ProgID: ChilkatUtil.CkData.1 Descr.: Chilkat CkData Marke...

adobe9-dos.txt

arg1="acroie:///DoS" target.src = arg1...

LogMeIn Remote Access Utility ActiveX Memory Corruption DoS

No description provided by source. html body pre LogMeIn Remote Access Utility ActiveX Memory Corruption 0day PoC DoS Software vendor URL: http://www.logmein.com Vulnerability at: RACtrl.dll propset for: fgcolor, bgcolor, fmcolor Author: Yag Kohha skyhole at gmail.com eax=024521b8 ebx=00000002...