CVE-2008-4924: Undefined Security Weakness

Multiple insecure method vulnerabilities in MW6 Technologies 1D Barcode ActiveX control BARCODELib.MW6Barcode, Barcode.dll 3.0.0.1 allow remote attackers to overwrite arbitrary files via a full pathname argument to the 1 SaveAsBMP and 2 SaveAsWMF methods...

CVE-2008-4923: Undefined Security Weakness

Multiple insecure method vulnerabilities in MW6 Technologies Aztec ActiveX control AZTECLib.MW6Aztec, Aztec.dll 3.0.0.1 allow remote attackers to overwrite arbitrary files via a full pathname argument to the 1 SaveAsBMP and 2 SaveAsWMF methods...

CVE-2008-4926: Undefined Security Weakness

Multiple insecure method vulnerabilities in MW6 Technologies PDF417 ActiveX control MW6PDF417Lib.PDF417, MW6PDF417.dll 3.0.0.1 allow remote attackers to overwrite arbitrary files via a full pathname argument to the 1 SaveAsBMP and 2 SaveAsWMF methods...

CVE-2008-4919: Improper Input Validation

Insecure method vulnerability in VISAGESOFT eXPert PDF Viewer X ActiveX control VSPDFViewerX.ocx 3.0.990.0 allows remote attackers to overwrite arbitrary files via a full pathname to the savePageAsBitmap method...

CVE-2008-4925: Undefined Security Weakness

Multiple insecure method vulnerabilities in MW6 Technologies DataMatrix ActiveX control DATAMATRIXLib.MW6DataMatrix, DataMatrix.dll 3.0.0.1 allow remote attackers to overwrite arbitrary files via a full pathname argument to the 1 SaveAsBMP and 2 SaveAsWMF methods...

MW6 Technologies Barcode ActiveX 'Barcode.dll' ActiveX控件任意文件覆盖漏洞

BUGTRAQ ID: 31979 CNCAN ID：CNCAN-2008103003 MW6 Barcode ActiveX是一款条形码生成控件。 MW6 Barcode ActiveX 'Barcode.dll'存在设计问题，远程攻击者可以利用漏洞以应用程序权限覆盖系统文件。 控件对SaveAsBMP和SaveAsWMF方法处理存在问题，构建恶意WEB页，诱使用户访问，可导致以应用程序权限覆盖系统文件。 MW6 Technologies Barcode ActiveX 3.0.0.1 目前没有详细解决方案提供： http://www.mw6tech.com/products.html...

Aztec ActiveX 'Aztec.dll' ActiveX控件任意文件覆盖漏洞

BUGTRAQ ID: 31974 CNCAN ID：CNCAN-2008103002 MW6 Aztec ActiveX是一款条形码组件。 MW6 Aztec ActiveX 'Aztec.dll'存在设计问题，远程攻击者可以利用漏洞以应用程序权限覆盖系统文件。 控件对SaveAsBMP和SaveAsWMF方法处理存在问题，构建恶意WEB页，诱使用户访问，可导致以应用程序权限覆盖系统文件。 MW6 Technologies Aztec ActiveX 3.0.0.1 目前没有详细解决方案提供： http://www.mw6tech.com/products.html...

MW6 DataMatrix 'DataMatrix.dll' ActiveX控件任意文件覆盖漏洞

BUGTRAQ ID: 31980 CNCAN ID：CNCAN-2008103004 MW6 DataMatrix ActiveX是一款数据矩阵条码制作工具。 MW6 DataMatrix ActiveX 'DataMatrix.dll'存在设计问题，远程攻击者可以利用漏洞以应用程序权限覆盖系统文件。 控件对SaveAsBMP和SaveAsWMF方法处理存在问题，构建恶意WEB页，诱使用户访问，可导致以应用程序权限覆盖系统文件。 MW6 Technologies DataMatrix ActiveX 3.0 1 目前没有详细解决方案提供：...

Visagesoft eXPert PDF ViewerX (VSPDFViewerX.ocx) File Overwrite

No description provided by source. VISAGESOFT eXPertPDFViewerX VSPDFViewerX.ocx INSECURE METHOD SITE: http://www.visagesoft.com This was written for educational purpose. Use it at your own risk. Author will be not responsible for any damage. Author: Marco Torti mail: marcotorti2atyahoodotcom than...

[Backports-security-announce] Security update for openoffice.org

Rene Engelhard uploaded new packages for openoffice.org which fixed the following security problems: Debian BTS 496361 left-over debugging echos writing into an insecure temp file can allow attackers to overwrite files on the system with the prvilieges of the user executing senddoc File - Send...

Visagesoft eXPert PDF ViewerX - VSPDFViewerX.ocx File Overwrite

Visagesoft eXPert PDF ViewerX - VSPDFViewerX.ocx File Overwrite VISAGESOFT eXPertPDFViewerX VSPDFViewerX.ocx INSECURE METHOD SITE: http://www.visagesoft.com This was written for educational purpose. Use it at your own risk. Author will be not responsible for any damage. Author: Marco Torti mail:...

Visagesoft eXPert PDF ViewerX (VSPDFViewerX.ocx) File Overwrite

Exploit for unknown platform in category remote exploits =============================================================== Visagesoft eXPert PDF ViewerX VSPDFViewerX.ocx File Overwrite =============================================================== VISAGESOFT eXPertPDFViewerX VSPDFViewerX.ocx...

Visagesoft eXPert PDF ViewerX - 'VSPDFViewerX.ocx' File Overwrite

VISAGESOFT eXPertPDFViewerX VSPDFViewerX.ocx INSECURE METHOD SITE: http://www.visagesoft.com This was written for educational purpose. Use it at your own risk. Author will be not responsible for any damage. Author: Marco Torti mail: marcotorti2atyahoodotcom thanks UGIS FileVersion: 3.0.990.0 CLSI...

CVE-2008-4749: Undefined Security Weakness

Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control VImpX.ocx 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allow remote attackers to overwrite arbitrary files via 1 the LogFile property and ClearLogFile method, and 2 the SaveToFile method...

CVE-2008-4639

jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

CVE-2008-4639

jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

CVE-2008-4639

jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

CVE-2008-4583

Insecure method vulnerability in the Chilkat FTP 2.0 ActiveX component ChilkatCert.dll allows remote attackers to overwrite arbitrary files via a full pathname in the SavePkcs8File method...

CVE-2008-4584

Insecure method vulnerability in Chilkat Mail 7.8 ActiveX control ChilkatCert.dll allows remote attackers to overwrite arbitrary files via a full pathname to the SaveLastError method...

CVE-2008-4583

CVE-2008-4583 affects the Chilkat FTP 2.0 ActiveX component (ChilkatCert.dll). The SavePkcs8File method allows a full pathname, enabling remote attackers to overwrite arbitrary files. CVSSv2 base score 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P). References indicate public discussion/exploits exist; no reme...