UUSee UUPlayer ActiveX控件"DoCmd()"缓冲区溢出漏洞

UUSee是一款集P2P直播点播于一身的网络电视软件。 UUPlayer.ocx ActiveX控件处理DoCmd方法时没有验证输入内容，导致内存破坏，攻击者构建恶意WEB页，诱使用户解析可导致基于栈的缓冲区溢出，成功利用漏洞可以以应用程序上下文执行任意代码。 UUPlayer ActiveX Control UUPlayer.ocx 6.x UUSee 2010 厂商解决方案 目前没有详细解决方案提供： http://www.uusee.com/ html object classid=”clsid:77910CD3-5447-4CCB-92DE-35BA8198BE81″...

Visual FoxPro vfp6r.dll ActiveX Control DoCmd command execution

Added: 12/19/2008 CVE: CVE-2008-0236 BID: 27205 OSVDB: 40380 Background Visual FoxPro is a tool for developing database applications. Problem The vfp6r.dll ActiveX control allows command execution when a user opens a web page which uses the DoCmd method. Resolution Set the kill bit for class ID...

Visual FoxPro vfp6r.dll ActiveX Control DoCmd command execution

Added: 12/19/2008 CVE: CVE-2008-0236 BID: 27205 OSVDB: 40380 Background Visual FoxPro is a tool for developing database applications. Problem The vfp6r.dll ActiveX control allows command execution when a user opens a web page which uses the DoCmd method. Resolution Set the kill bit for class ID...

CVE-2008-0236

An ActiveX control for Microsoft Visual FoxPro vfp6r.dll 6.0.8862.0 allows remote attackers to execute arbitrary commands by invoking the DoCmd method...

CVE-2008-0236

CVE-2008-0236 concerns an ActiveX control for Microsoft Visual FoxPro (vfp6r.dll 6.0.8862.0). The DoCmd method in the Visual FoxPro vfp6r.dll ActiveX control can be exploited to trigger remote command execution by a user visiting a crafted webpage, with the attack operating in the user’s security...

Microsoft FoxServer (vfp6r.dll 6.0.8862.0) ActiveX Command Execution

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"body bgcolor="E0E0E0"----------------------------------------------------------------------------- bMicrosoft FoxServer vfp6r.dll 6.0.8862.0 Remote Command Execution/b...

msfox-vfp6r.txt

----------------------------------------------------------------------------- Microsoft FoxServer vfp6r.dll 6.0.8862.0 Remote Command Execution url: http://www.microsoft.com Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose...