HP Photo Digital Imaging HPQXML.DLL任意文件覆盖漏洞

HP Photo Digital Imaging是一款图象处理软件。 HP Photo Digital Imaging HPQXML.DLL ActiveX控件不正确调用方法，远程攻击者可以利用漏洞覆盖系统任意文件，造成拒绝服务或任意代码执行。 问题存在于HPQXML.DLL中的ActiveX控件，由于不安全调用"saveXMLAsFile"方法，构建恶意的WEB页，诱使用户访问可导致覆盖系统任意文件，造成拒绝服务或任意代码执行。 HP HP Photo Digital Imaging hpqxml.dll 2.0.0.133 目前没有解决方案提供：...

Design/Logic Flaw

A certain ActiveX control in Avaxswf.dll 1.0.0.1 in Civitech Avax Vector 1.3 allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the WriteMovie method...

CVE-2007-3459

A CVE-2007-3459 entry describes a vulnerability in Civitech Avax Vector 1.3 where the ActiveX control Avaxswf.dll version 1.0.0.1 permits remote attackers to create or overwrite arbitrary files by supplying a full pathname to the WriteMovie method. The issue affects the ActiveX component and can ...

CVE-2007-3400

The NCTAudioEditor2 ActiveX control in NCTWMAFile2.dll 2.6.2.157, as distributed in NCTAudioEditor and NCTAudioStudio 2.7, allows remote attackers to overwrite arbitrary files via the CreateFile method...

Design/Logic Flaw

The NCTAudioEditor2 ActiveX control in NCTWMAFile2.dll 2.6.2.157, as distributed in NCTAudioEditor and NCTAudioStudio 2.7, allows remote attackers to overwrite arbitrary files via the CreateFile method...

Ingress Database Server 2.6 - Multiple Remote Vulnerabilities

Ingress Database Server 2.6 - Multiple Remote Vulnerabilities source: https://www.securityfocus.com/bid/24585/info Ingress Database Server included in CA eTrust Secure Content Manager is prone to multiple remote vulnerabilities, including multiple stack- and heap-based buffer-overflow issues,...

Ingress Database Server 2.6 - Multiple Remote Vulnerabilities

source: https://www.securityfocus.com/bid/24585/info Ingress Database Server included in CA eTrust Secure Content Manager is prone to multiple remote vulnerabilities, including multiple stack- and heap-based buffer-overflow issues, multiple pointer-overwrite issues, and an arbitrary-file-overwrit...

CVE-2007-3233

CVE-2007-3233 concerns the TEC-IT TBarCode OCX ActiveX control, version 7.0.2.3524 (TBarCode7.ocx). The vulnerability allows remote attackers to overwrite arbitrary files via the SaveImage method. The NVD entry lists a network impact with low attack complexity and no authentication required, resu...

tecit-activex.txt

----------------------------------------------------------------------------------------------------------------- TEC-IT TBarCode OCX ActiveX Control TBarCode7.ocx v. 7.0.2.3524 "SaveImage" Remote Arbitrary File Overwrite url: http://www.tec-it.com/asp/main/startfr.asp?LN=1 author: shinnai mail:...

TEC-IT TBarCode - OCX ActiveX Arbitrary File Overwrite

TEC-IT TBarCode - OCX ActiveX Arbitrary File Overwrite ----------------------------------------------------------------------------------------------------------------- TEC-IT TBarCode OCX ActiveX Control TBarCode7.ocx v. 7.0.2.3524 "SaveImage" Remote Arbitrary File Overwrite url:...

TEC-IT TBarCode OCX ActiveX Remote Arbitrary File Overwrite Exploit

Exploit for unknown platform in category remote exploits =================================================================== TEC-IT TBarCode OCX ActiveX Remote Arbitrary File Overwrite Exploit ===================================================================...

TEC-IT TBarCode - OCX ActiveX Arbitrary File Overwrite

----------------------------------------------------------------------------------------------------------------- TEC-IT TBarCode OCX ActiveX Control TBarCode7.ocx v. 7.0.2.3524 "SaveImage" Remote Arbitrary File Overwrite url: http://www.tec-it.com/asp/main/startfr.asp?LN=1 author: shinnai mail:...

zenturi-overwrite.txt

pre 2007/05/30 ------------------------------------------------------------------------------------------- Zenturi ProgramChecker ActiveX sasatl.dll Arbitrary file download/overwrite Exploit url: http://www.programchecker.com/activeintro.aspx author: shinnai mail: shinnaiatautisticidotorg site:...

CVE-2007-2519

CVE-2007-2519 describes a directory traversal in the PEAR installer (versions 1.0–1.5.3) where an attacker can overwrite arbitrary files by supplying a .. sequence in PEAR’s package.xml attributes (install-as in file element for package.xml 1.0, or as in install element for package.xml 2.0). The ...

LeadTools Raster Variant (LTRVR14e.dll) Remote File Overwrite Exploit

No description provided by source. pre span style="font: 14pt Courier New;"p align="center"b2007/05/21/b/p/span codespan style="font: 10pt Courier New;"span class="general1-symbol"----------------------------------------------------------------------------------------------------- bLeadTools Rast...

LeadTools Raster Variant (LTRVR14e.dll) Remote File Overwrite Exploit

Exploit for unknown platform in category remote exploits ===================================================================== LeadTools Raster Variant LTRVR14e.dll Remote File Overwrite Exploit ===================================================================== 2007/05/21...

LeadTools Raster Variant - LTRVR14e.dll Remote File Overwrite

LeadTools Raster Variant - LTRVR14e.dll Remote File Overwrite 2007/05/21 ----------------------------------------------------------------------------------------------------- LeadTools Raster Variant Object Library LTRVR14e.dll v. 14.5.0.44 Remote Arbitrary File Overwrite url:...

LeadTools Raster Variant - 'LTRVR14e.dll' Remote File Overwrite

2007/05/21 ----------------------------------------------------------------------------------------------------- LeadTools Raster Variant Object Library LTRVR14e.dll v. 14.5.0.44 Remote Arbitrary File Overwrite url: http://www.leadtools.com/ price: eheheh, take a look at thier site : author:...

USN-436-2: KTorrent vulnerability

USN-436-1 fixed a vulnerability in KTorrent. The original fix for path traversal was incomplete, allowing for alternate vectors of attack. This update solves the problem. Original advisory details: Bryan Burns of Juniper Networks discovered that KTorrent did not correctly validate the destination...

PrecisionID Barcode ActiveX 1.9 Remote Arbitrary File Overwrite Exploit

No description provided by source. pre span style="font: 14pt Courier New;"p align="center"b2007/05/16/b/p/span codespan style="font: 10pt Courier New;"span class="general1-symbol"----------------------------------------------------------------------------------------------------- bIE 6 Precision...