[DSECRG-09-065] TVUPlayer PlayerOcx.ocx ActiveX - Insecure method

ActiveX component contains insecure method that can overwrite any file in system Digital Security Research Group DSecRG Advisory DSECRG-09-065 Application: TVUPlayer Versions Affected: Tested on v2.4.9beta1build1797 Vendor URL: www.tvunetworks.com Bugs: insecure method, File overwriting Exploits:...

SoftCab Sound Converter Active-X Insecure Method

Exploited By : ThE g0bL!N function Doit File = "Dz.exe" dz.SaveFormatFile SoftCab Sound Converter ActiveX sndConverter.ocx Insecure Method Exploit...

CVE-2009-4453

Insecure method vulnerability in SoftCab Sound Converter ActiveX control sndConverter.ocx 1.2 allows remote attackers to create or overwrite arbitrary files via the SaveFormat method. NOTE: some of these details are obtained from third party information...

Design/Logic Flaw

Insecure method vulnerability in SoftCab Sound Converter ActiveX control sndConverter.ocx 1.2 allows remote attackers to create or overwrite arbitrary files via the SaveFormat method. NOTE: some of these details are obtained from third party information...

CVE-2009-4453

The CVE-2009-4453 issue affects SoftCab Sound Converter ActiveX control (sndConverter.ocx) version 1.2. The vulnerability stems from an insecure SaveFormat method that enables remote attackers to create or overwrite arbitrary files. This is documented across CVE/NVD entries as an insecure method ...

SoftCab Sound Converter - 'sndConverter.ocx' ActiveX Insecure Method

Exploited By : ThE g0bL!N function Doit File = "Dz.exe" dz.SaveFormatFile SoftCab Sound Converter ActiveX sndConverter.ocx Insecure Method Exploit...

SoftCab Sound Converter ActiveX Insecure Method Exploit (sndConverter.ocx)

No description provided by source. !-- Author: ThE g0bL!N Software Link: http://www.softcab.com/ftp/converteractivex.zip Version: Tested on: Xp sp2 -- titleExploited By : ThE g0bL!N /title BODY object id=dz classid="clsid:66757BFC-DA0C-41E6-B3FE-B6D461223FF5"/object SCRIPT function Doit File =...

SoftCab Sound Converter ActiveX Insecure Method Exploit

Exploit for unknown platform in category web applications ========================================================================== SoftCab Sound Converter ActiveX Insecure Method Exploit sndConverter.ocx ========================================================================== Exploited By : T...

SoftCab Sound Converter - sndConverter.ocx ActiveX Insecure Method

SoftCab Sound Converter - sndConverter.ocx ActiveX Insecure Method Exploited By : ThE g0bL!N function Doit File = "Dz.exe" dz.SaveFormatFile SoftCab Sound Converter ActiveX sndConverter.ocx Insecure Method Exploit...

Oracle Document Capture ActiveX — Insecure method, buffer overflow

Application: Oracle Document Capture Versions Affected: Oracle Document Capture 10.1.3.5 Vendor URL: Bugs: Insecure method. Buffer overflow. Exploits: YES Reported: 14.12.2009 Vendor response: 15.12.2009 Date of Public Advisory: 24.01.2011 CVE-number: CVE-2010-3599 Author: Alexandr Polyakov...

CVE-2009-3860

Multiple insecure method vulnerabilities in Idefense Labs COMRaider allow remote attackers to create or overwrite arbitrary files via the 1 CreateFolder and 2 Copy methods. NOTE: this might only be a vulnerability in certain insecure configurations of Internet Explorer...

CVE-2009-3860

The CVE-2009-3860 entry concerns Idefense Labs COMRaider, with reported vulnerabilities in the CreateFolder and Copy methods that could allow remote attackers to create or overwrite arbitrary files. The flaw is noted to potentially occur in certain insecure configurations of Internet Explorer. Th...

SAP GUI 7.1 — Insecure Method, Code execution

Application: SAP GUI Versions Affected: SAP GUI SAP GUI 7.1 Vendor URL: Bugs: Insecure method, Code Execution Exploits: YES Reported: 16.10.2009 Vendor response: 27.10.2009 Date of Public Advisory: 23.03.2010 Author: Sintsov Alexey Description Insecure method was founded in SAPBExCommonResources...

CVE-2009-3573

Multiple insecure method vulnerabilities in the PDIControl.PDI.1 ActiveX control PDIControl.dll 2.2.3160.0 in EMC Captiva PixTools Distributed Imaging 2.2 allow remote attackers to create or overwrite arbitrary files via the 1 SetLogFileName and 2 WriteToLog methods...

EMC Captiva PixTools 2.2 Distributed Imaging - ActiveX Control Multiple Insecure Method Vulnerabilities

EMC Captiva PixTools 2.2 Distributed Imaging - ActiveX Control Multiple Insecure Method Vulnerabilities source: https://www.securityfocus.com/bid/36566/info The EMC Captiva PixTools Distributed Imaging ActiveX control is prone to multiple insecure-method vulnerabilities that affect the...

EMC Captiva PixTools 2.2 Distributed Imaging - ActiveX Control Multiple Insecure Method Vulnerabilities

source: https://www.securityfocus.com/bid/36566/info The EMC Captiva PixTools Distributed Imaging ActiveX control is prone to multiple insecure-method vulnerabilities that affect the PDIControl.PDI.1 ActiveX control PDIControl.dll. Successfully exploiting these issues allows remote attackers to...

EnjoySAP Arbitrary File Overwrite

Digital Security Research Group DSecRG Advisory DSECRG-09-044 Application: EnjoySAP, SAP GUI for Windows 6.4 and 7.1 Versions Affected: Tested on 7100.2.7.1038 PL 7 Vendor URL: http://SAP.com Bugs: insecure method, File owervriting Exploits: YES Reported: 02.07.2009 Vendor response: 02.07.2009 Da...

(edited) [DSECRG-09-044] SAP GUI 7.1 Insecure Methods

Digital Security Research Group DSecRG Advisory DSECRG-09-044 Application: EnjoySAP, SAP GUI for Windows 6.4 and 7.1 Versions Affected: Tested on 7100.2.7.1038 PL 7 Vendor URL: http://SAP.com Bugs: insecure method, File owervriting Exploits: YES Reported: 02.07.2009 Vendor response: 02.07.2009 Da...

EnjoySAP 6.4, 7.1 File Overwrite

Exploit for unknown platform in category remote exploits ================================ EnjoySAP 6.4, 7.1 File Overwrite ================================ Title: EnjoySAP 6.4, 7.1 File Overwrite CVE-ID: OSVDB-ID: Author: Sh2kerr Published: 2009-09-28 Verified: yes view source print? Digital...

[DSECRG-09-043] SAP GUI 7.1 Insecure Method

Digital Security Research Group DSecRG Advisory DSECRG-09-043 Application: EAI WebViewer2D EnjoySAP, SAP GUI for Windows 6.4 and 7.1 Versions Affected: Tested on 7100.2.7.1038 PL 7 Vendor URL: http://SAP.com Bugs: insecure method, File owervriting Exploits: YES Reported: 02.07.2009 Vendor respons...