CVE-2007-3233

CVE-2007-3233 concerns the TEC-IT TBarCode OCX ActiveX control, version 7.0.2.3524 (TBarCode7.ocx). The vulnerability allows remote attackers to overwrite arbitrary files via the SaveImage method. The NVD entry lists a network impact with low attack complexity and no authentication required, resu...

CVE-2007-3233: Undefined Security Weakness

The TEC-IT TBarCode OCX ActiveX control TBarCode7.ocx 7.0.2.3524 allows remote attackers to overwrite arbitrary files via the SaveImage method...

tecit-activex.txt

----------------------------------------------------------------------------------------------------------------- TEC-IT TBarCode OCX ActiveX Control TBarCode7.ocx v. 7.0.2.3524 "SaveImage" Remote Arbitrary File Overwrite url: http://www.tec-it.com/asp/main/startfr.asp?LN=1 author: shinnai mail:...

TEC-IT TBarCode OCX ActiveX Remote Arbitrary File Overwrite Exploit

Exploit for unknown platform in category remote exploits =================================================================== TEC-IT TBarCode OCX ActiveX Remote Arbitrary File Overwrite Exploit ===================================================================...

TEC-IT TBarCode - OCX ActiveX Arbitrary File Overwrite

TEC-IT TBarCode - OCX ActiveX Arbitrary File Overwrite ----------------------------------------------------------------------------------------------------------------- TEC-IT TBarCode OCX ActiveX Control TBarCode7.ocx v. 7.0.2.3524 "SaveImage" Remote Arbitrary File Overwrite url:...

TEC-IT TBarCode - OCX ActiveX Arbitrary File Overwrite

----------------------------------------------------------------------------------------------------------------- TEC-IT TBarCode OCX ActiveX Control TBarCode7.ocx v. 7.0.2.3524 "SaveImage" Remote Arbitrary File Overwrite url: http://www.tec-it.com/asp/main/startfr.asp?LN=1 author: shinnai mail:...

zenturi-overwrite.txt

pre 2007/05/30 ------------------------------------------------------------------------------------------- Zenturi ProgramChecker ActiveX sasatl.dll Arbitrary file download/overwrite Exploit url: http://www.programchecker.com/activeintro.aspx author: shinnai mail: shinnaiatautisticidotorg site:...

CVE-2007-2851: Undefined Security Weakness

A certain ActiveX control in LeadTools Raster Variant Object Library LTRVR14e.dll 14.5.0.44 allows remote attackers to overwrite arbitrary files via the WriteDataToFile method...

CVE-2007-2519

CVE-2007-2519 describes a directory traversal in the PEAR installer (versions 1.0–1.5.3) where an attacker can overwrite arbitrary files by supplying a .. sequence in PEAR’s package.xml attributes (install-as in file element for package.xml 1.0, or as in install element for package.xml 2.0). The ...

LeadTools Raster Variant (LTRVR14e.dll) Remote File Overwrite Exploit

No description provided by source. pre span style="font: 14pt Courier New;"p align="center"b2007/05/21/b/p/span codespan style="font: 10pt Courier New;"span class="general1-symbol"----------------------------------------------------------------------------------------------------- bLeadTools Rast...

LeadTools Raster Variant - LTRVR14e.dll Remote File Overwrite

LeadTools Raster Variant - LTRVR14e.dll Remote File Overwrite 2007/05/21 ----------------------------------------------------------------------------------------------------- LeadTools Raster Variant Object Library LTRVR14e.dll v. 14.5.0.44 Remote Arbitrary File Overwrite url:...

LeadTools Raster Variant (LTRVR14e.dll) Remote File Overwrite Exploit

Exploit for unknown platform in category remote exploits ===================================================================== LeadTools Raster Variant LTRVR14e.dll Remote File Overwrite Exploit ===================================================================== 2007/05/21...

LeadTools Raster Variant - 'LTRVR14e.dll' Remote File Overwrite

2007/05/21 ----------------------------------------------------------------------------------------------------- LeadTools Raster Variant Object Library LTRVR14e.dll v. 14.5.0.44 Remote Arbitrary File Overwrite url: http://www.leadtools.com/ price: eheheh, take a look at thier site : author:...

USN-436-2: KTorrent vulnerability

USN-436-1 fixed a vulnerability in KTorrent. The original fix for path traversal was incomplete, allowing for alternate vectors of attack. This update solves the problem. Original advisory details: Bryan Burns of Juniper Networks discovered that KTorrent did not correctly validate the destination...

PrecisionID Barcode ActiveX 1.9 Remote Arbitrary File Overwrite Exploit

No description provided by source. pre span style="font: 14pt Courier New;"p align="center"b2007/05/16/b/p/span codespan style="font: 10pt Courier New;"span class="general1-symbol"----------------------------------------------------------------------------------------------------- bIE 6 Precision...

morovia-overwrite.txt

2007/05/11 -------------------------------------------------------------------------------- Morovia Barcode ActiveX Professional 3.3 build 1304 Arbitrary file overwrite url: http://www.morovia.com/ price: $129 author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This...

precision-overwrite.txt

2007/05/16 ----------------------------------------------------------------------------------------------------- IE 6 PrecisionID Barcode ActiveX 1.9 0day PrecisionIDBarcode.dll Remote Arbitrary File Overwrite url: http://www.precisionid.com/ author: shinnai mail: shinnaiatautisticidotorg site:...

CVE-2007-2755: Undefined Security Weakness

The PrecisionID Barcode 1.9 ActiveX control in PrecisionIDBarcode.dll, when Internet Explorer 6 is used, allows remote attackers to overwrite arbitrary files via a full pathname to the SaveToFile function, a different vulnerability than CVE-2007-2744...

CVE-2007-2725

CVE-2007-2725 affects the DB Software Laboratory’s DeWizardX (DEWizardAX.ocx) ActiveX control. The vulnerability lets remote attackers overwrite arbitrary files via the SaveToFile function. According to NVD, it has a network attack vector, no authentication, and partial confidentiality/integrity/...

PrecisionID Barcode ActiveX 1.9 - Arbitrary File Overwrite

PrecisionID Barcode ActiveX 1.9 - Arbitrary File Overwrite 2007/05/16 ----------------------------------------------------------------------------------------------------- IE 6 PrecisionID Barcode ActiveX 1.9 0day PrecisionIDBarcode.dll Remote Arbitrary File Overwrite url:...