EUVD-2009-3831

Malware in sbrugna...

iDefense COMRaider Active X Control 'write()' Arbitrary File Overwrite Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/33942/info iDefense COMRaider ActiveX control is prone to a vulnerability that lets attackers overwrite arbitrary local files on the victim's computer in the context of the vulnerable application using the ActiveX control...

iDefense COMRaider ActiveX Control Multiple Insecure Method Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/35725/info The iDefense COMRaider ActiveX control is prone to multiple insecure-method vulnerabilities. Successfully exploiting these issues allows remote attackers to create arbitrary directories and copy arbitrary local...

Design/Logic Flaw

Multiple insecure method vulnerabilities in Idefense Labs COMRaider allow remote attackers to create or overwrite arbitrary files via the 1 CreateFolder and 2 Copy methods. NOTE: this might only be a vulnerability in certain insecure configurations of Internet Explorer...

CVE-2009-3860

Multiple insecure method vulnerabilities in Idefense Labs COMRaider allow remote attackers to create or overwrite arbitrary files via the 1 CreateFolder and 2 Copy methods. NOTE: this might only be a vulnerability in certain insecure configurations of Internet Explorer...

CVE-2009-3860

Multiple insecure method vulnerabilities in Idefense Labs COMRaider allow remote attackers to create or overwrite arbitrary files via the 1 CreateFolder and 2 Copy methods. NOTE: this might only be a vulnerability in certain insecure configurations of Internet Explorer...

CVE-2009-3860

The CVE-2009-3860 entry concerns Idefense Labs COMRaider, with reported vulnerabilities in the CreateFolder and Copy methods that could allow remote attackers to create or overwrite arbitrary files. The flaw is noted to potentially occur in certain insecure configurations of Internet Explorer. Th...

iDefense COMRaider ActiveX控件多个不安全方法漏洞

Bugraq ID: 35725 CNCAN ID：CNCAN-2009071804 iDefense COMRaider是一款设计用于Fuzz COM对象接口的程序。 iDefense COMRaider ActiveX控件不正确调用方法，远程攻击者可以利用漏洞建立任意目录并拷贝任意本地文件。 问题存在于CreateFolder和Copy方法处理过程中，构建恶意WEB页，诱使用户打开，可建立任意目录并拷贝任意本地文件。造成拒绝服务等其他攻击。 iDefense COMraider 目前没有详细解决方案提供：...

COMRaider Insecure Method

!/usr/bin/perl COMRaider Idefense Labs CreateFolder and Copy Insecure Method Hard Disk Filler Exploit Discovered and Exploited by : Khashayar Fereidani Http://IRCRASH.com & Http://Fereidani.ir  Help : perl comraider.pl Please enter the foldername C:\ircrash\ for example : C:\ircrash\ Please ente...

iDefense COMRaider - ActiveX Control Multiple Insecure Method Vulnerabilities

iDefense COMRaider - ActiveX Control Multiple Insecure Method Vulnerabilities source: https://www.securityfocus.com/bid/35725/info The iDefense COMRaider ActiveX control is prone to multiple insecure-method vulnerabilities. Successfully exploiting these issues allows remote attackers to create...

iDefense COMRaider - ActiveX Control Multiple Insecure Method Vulnerabilities

source: https://www.securityfocus.com/bid/35725/info The iDefense COMRaider ActiveX control is prone to multiple insecure-method vulnerabilities. Successfully exploiting these issues allows remote attackers to create arbitrary directories and copy arbitrary local files. This may lead to a...

iDefense COMRaider - ActiveX Control 'write()' Arbitrary File Overwrite

source: https://www.securityfocus.com/bid/33942/info iDefense COMRaider ActiveX control is prone to a vulnerability that lets attackers overwrite arbitrary local files on the victim's computer in the context of the vulnerable application using the ActiveX control typically Internet Explorer...

iDefense COMRaider - ActiveX Control write() Arbitrary File Overwrite

iDefense COMRaider - ActiveX Control write Arbitrary File Overwrite source: https://www.securityfocus.com/bid/33942/info iDefense COMRaider ActiveX control is prone to a vulnerability that lets attackers overwrite arbitrary local files on the victim's computer in the context of the vulnerable...

neotracepro-overflow.txt

Date: 24/03/07 México / PRIVATE DON'T DISTRIBUTE PRIVATE DON'T DISTRIBUTE PRIVATE / I found this buffer overflow fuzzing NeoTraceExplorer.dll an ActiveX Control with ComRaider from iDefense. It has a method called TraceTarget which can be exploited passing a large string 486 bytes due there's no...