GeoHttpServer - Remote Denial of Service

!/usr/bin/perl Exploit Title: GeoHttpServer remote DoS Date: 7-5-2010 Author: aviho1 vendor: GeoVision Version: all info: the password recovery page does not properly validate user-supplied password ,causing a dos. use IO::Socket; my $host = shift || 'localhost'; Target host my $port = shift || 8...

GeoHttpServer Remote DoS Vulnerability

Exploit for windows platform in category dos / poc ====================================== GeoHttpServer Remote DoS Vulnerability ====================================== !/usr/bin/perl Exploit Title: GeoHttpServer remote DoS Date: 7-5-2010 Author: aviho1 vendor: GeoVision Version: all info: the...

GeoHttpServer - Remote Denial of Service

GeoHttpServer - Remote Denial of Service !/usr/bin/perl Exploit Title: GeoHttpServer remote DoS Date: 7-5-2010 Author: aviho1 vendor: GeoVision Version: all info: the password recovery page does not properly validate user-supplied password ,causing a dos. use IO::Socket; my $host = shift ||...

Design/Logic Flaw

Use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control in LIVEAU1.OCX 7.0 for GeoVision DVR systems allows remote attackers to execute arbitrary code by calling the GetAudioPlayingTime method with certain arguments...

CVE-2009-1092

Use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control in LIVEAU1.OCX 7.0 for GeoVision DVR systems allows remote attackers to execute arbitrary code by calling the GetAudioPlayingTime method with certain arguments...

CVE-2009-1092

The CVE-2009-1092 entry describes a use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control (LIVEAU~1.OCX 7.0) used by GeoVision DVR systems. The flaw allows remote code execution when an attacker calls GetAudioPlayingTime with certain arguments, enabling arbitrary code exec...

CVE-2009-1092

Use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control in LIVEAU1.OCX 7.0 for GeoVision DVR systems allows remote attackers to execute arbitrary code by calling the GetAudioPlayingTime method with certain arguments...

CVE-2009-1092: Undefined Security Weakness

Use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control in LIVEAU1.OCX 7.0 for GeoVision DVR systems allows remote attackers to execute arbitrary code by calling the GetAudioPlayingTime method with certain arguments...

GeoVision LiveAudio ActiveX控件GetAudioPlayingTime()方式代码执行漏洞

BUGTRAQ ID: 34115 GeoVision LiveAudio ActiveX控件是GeoVision监控软件中用于同步音频的工具。 GeoVision LiveAudio ActiveX控件（CLSID：814A3C52-B6F7-4AEA-A9BC-7849B9B0ECA8，Progid：LIVEAUDIO.LiveAudioCtrl.1）没有正确地验证对GetAudioPlayingTime方式所提供的输入参数。如果用户受骗访问了恶意网页的话，就可能导致访问已经释放的内存。成功利用这个漏洞的攻击者可以在用户系统上执行任意代码。 GeoVision LiveAudio...

GeoVision LiveAudio ActiveX Remote Freed-Memory Access Exploit

No description provided by source. !-- 02/03/2009 14.57.46 GeoVision LiveAudio ActiveX Control GetAudioPlayingTime remote freed-memory access exploit IE7 by Nine:Situations:Group::trotzkista vendor site: http://www.geovision.com.tw/ our site: http://retrogod.altervista.org/ details: CLSID:...

GeoVision LiveAudio - ActiveX Remote Freed-Memory Access

// win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" + "%u4948%u4949%u4949%u4949%u4949%u4...

GeoVision LiveAudio ActiveX Remote Freed-Memory Access Exploit

Exploit for unknown platform in category remote exploits ============================================================== GeoVision LiveAudio ActiveX Remote Freed-Memory Access Exploit ==============================================================...

GeoVision LiveAudio - ActiveX Remote Freed-Memory Access

GeoVision LiveAudio - ActiveX Remote Freed-Memory Access // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...

GeoVision LiveAudio Memory Access

// win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" + "%u4948%u4949%u4949%u4949%u...

Directory traversal

Directory traversal vulnerability in the SnapShotToFile method in the GeoVision LiveX aka LiveXv8200 ActiveX control 8.1.2 and 8.2.0 in LIVEX1.OCX allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the argument, possibly involving the PlayX and SnapShotX methods...

CVE-2009-0865

Directory traversal vulnerability in the SnapShotToFile method in the GeoVision LiveX aka LiveXv8200 ActiveX control 8.1.2 and 8.2.0 in LIVEX1.OCX allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the argument, possibly involving the PlayX and SnapShotX methods...

CVE-2009-0865

CVE-2009-0865 affects the GeoVision LiveX ActiveX control (LIVEX_~1.OCX) versions 8.1.2 and 8.2.0, specifically the SnapShotToFile method. A directory traversal flaw allows a remote attacker to create or overwrite arbitrary files by supplying a .. payload in the argument, potentially via PlayX an...

CVE-2009-0865

Directory traversal vulnerability in the SnapShotToFile method in the GeoVision LiveX aka LiveXv8200 ActiveX control 8.1.2 and 8.2.0 in LIVEX1.OCX allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the argument, possibly involving the PlayX and SnapShotX methods...

CVE-2009-0865: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the SnapShotToFile method in the GeoVision LiveX aka LiveXv8200 ActiveX control 8.1.2 and 8.2.0 in LIVEX1.OCX allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the argument, possibly involving the PlayX and SnapShotX methods...

GeoVision LiveX ActiveX控件SnapShotToFile()方式任意文件覆盖漏洞

BUGTRAQ ID: 33782 GeoVision LiveX是用于管理GeoVision视频监控系统的软件。 GeoVision的LiveXv7000（clsid DA8484DE-52DB-4860-A986-61A8682E298A）和LiveXv8120（clsid F4421170-DB22-4551-BBFB-FFCFFB419F6F）ActiveX控件没有正确地验证对SnapShotToFile和SnapShotX方式输入的参数，如果用户受骗访问了恶意网页并向上述方式传送了恶意参数的话，就会导致向用户系统写入任意文件。 GeoVision LiveX ActiveX...