LeadTools 11.5.0.9 - 'ltlst11n.ocx' Insert() Access Violation Denial of Service

Test Exploit Page targetFile = "C:\Program Files\Rational\common\ltlst11n.ocx" prototype = "Function Insert ByVal Bitmap As Long , ByVal pszText As String , ByVal Data As Long As Integer" memberName = "Insert" progid = "LEADImgListLib.LEADImgList" argCount = 3 arg1=1 arg2="defaultV"...

Yahoo Messenger WScript.Shell ActiveX control command execution

Added: 07/29/2010 Background Yahoo! Messenger is an instant messaging application. It includes the WScript.Shell ActiveX control. Problem The Execute method of the WScript.Shell ActiveX control allows command execution when a malicious web page is loaded in Internet Explorer. Resolution Set the...

Synactis All_IN_THE_BOX ActiveX v3 Null byte File Overwrite Vuln

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-09-006 http://www.dsecrg.com/pages/vul/show.php?id=62 Application: Synactis AllINTHEBOX ActiveX Versions Affected: 3 Vendor URL: http://synactis.com Bugs: Null byte File overwriting Exploits: YES Reported:...

Synactis All_IN_THE_BOX ActiveX 3.0 - Null Byte File Overwrite

Digital Security Research Group DSecRG Advisory DSECRG-09-006 http://www.dsecrg.com/pages/vul/show.php?id=62 Application: Synactis AllINTHEBOX ActiveX Versions Affected: 3 Vendor URL: http://synactis.com Bugs: Null byte File overwriting Exploits: YES Reported: 15.01.2009 Vendor response: NONE...

MW6 PDF417 - ActiveX 'MW6PDF417.dll' Remote Insecure Method

 Test Exploit page targetFile = "C:\WINDOWS\system32\MW6PDF417.dll" prototype = "Sub SaveAsBMP ByVal FileName As String " memberName = "SaveAsBMP" progid = "MW6PDF417Lib.PDF417" argCount = 1 arg1="c:\windows\system.ini" target.SaveAsBMP arg1 'target.SaveAsWMF...

Internet Explorer tblinf32.dll ActiveX IObjectsafety vulnerability

Added: 08/17/2007 CVE: CVE-2007-2216 BID: 25289 OSVDB: 36396 Background The IObjectsafety interface provides methods to get and set safety options for objects which support untrusted clients. Problem The tblinf32.dll ActiveX control implements IObjectsafety incorrectly, allowing execution of code...

Web Thunder(xunlei)0day vulnerability-exposure-vulnerability warning-the black bar safety net

First, the event analysis: DSW Lab AVERT panel monitor to a high risk of hearing ray vulnerability is the exposure, the vulnerability occurs in the Web thunder of one of the controls, when you install Web thunder of the user in browsing hacker carefully constructed to contain malicious code of a...