[Full-disclosure] Secunia Research: NCTsoft Products NCTAudioFile2 ActiveX Control Buffer Overflow

====================================================================== Secunia Research 24/01/2007 - NCTsoft Products NCTAudioFile2 ActiveX Control Buffer Overflow - ====================================================================== Table of Contents Affected...

ICONICS Dialog Wrapper模块ActiveX控件远程栈溢出漏洞

ICONICS是一家专业提供基于OPC可视化软件的公司，ICONICS Dialog Wrapper模块ActiveX控件是捆绑于启用了OPC的可视化工具中的控件。 ICONICS Gauge ActiveX、ICONICS Switch ActiveX和ICONICS Vessel ActiveX中所使用的Dialog Wrapper模块ActiveX控件（DlgWrapper.dll）在处理DoModal方式时存在栈溢出漏洞。如果远程攻击者能够通过FileName或Filter参数传送超长字符串的话，就会触发这个漏洞，导致执行任意代码。 ICONICS Dialog Wrapper...

Citrix ICA Client ActiveX control buffer overflow

Overview A vulnerability in an ActiveX control provided with the Citrix Presentation Server Client could allow a remote attacker to execute arbitrary code on an affected system. Description The Citrix Presentation Server Client software provides an ActiveX control that can be used to integrate th...

ICONICS Dialog Wrapper Module ActiveX control vulnerable to buffer overflow

Overview ICONICS Dialog Wrapper Module ActiveX control contains a buffer overflow. This vulnerability may allow a remote attacker to execute arbitrary code on a vulnerable system. Description OLE for Process Control OPC is a specification for a standard set of OLE COM objects for use in the proce...

CVE-2006-6330

index.php for TorrentFlux 2.2 allows remote registered users to execute arbitrary commands via shell metacharacters in the kill parameter...

CVE-2006-6330

index.php for TorrentFlux 2.2 allows remote registered users to execute arbitrary commands via shell metacharacters in the kill parameter...

Sun Solaris N1网格引擎多个本地漏洞

Sun N1 Grid Engine是一款SUN公司开发的网格引擎守护进程。 Sun N1 Grid Engine存在未明安全问题，本地攻击者可以利用漏洞未授权杀死qmaster或execd进程和关闭GRID服务，引起拒绝服务攻击。 Sun Grid Engine 5.3 x86 Sun Grid Engine 5.3 Sun Linux Sun Grid Engine 5.3 64-bit SPARC Sun Grid Engine 5.3 32-bit SPARC 补丁下载： SPARC平台 N1 Grid Engine 6.0 32-bit Solarispatch...

CVE-2006-6330: Undefined Security Weakness

index.php for TorrentFlux 2.2 allows remote registered users to execute arbitrary commands via shell metacharacters in the kill parameter...

CVE-2006-5918

CVE-2006-5918 describes an unrestricted file upload vulnerability in RapidKill (aka PHP Rapid Kill) 5.7 Pro and some other versions, where remote attackers can upload and execute arbitrary PHP scripts through the "Link to Download" field. This field may be restricted to files on public sites in s...

Retro64 CR64Loader ActiveX远程缓冲区溢出漏洞

CR64Loader对象是Retro64提供的一个ActiveX控件，用于提供在线游戏。 CR64Loader的实现上存在缓冲区溢出漏洞，如果用户受骗访问了恶意的WEB页面的话，就会触发这个漏洞，导致执行任意指令。 Retro64 CR64Loader 临时解决方法： 为以下CLSID设置kill bit： 288C5F13-7E52-4ADA-A32E-F5BF9D125F99 厂商补丁： Retro64 ------- 我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://retro64.com/...

Hack tutorial of dove gray VIP2006 ultimate free kill technology-vulnerability warning-the black bar safety net

This time for everyone to do a variety of antivirus softwarefree to killtutorial. This tutorial is mainly to dove gray VIP2006 service terminal, for example! Now online a lot offree to killtutorial, and I've seen a lot, but thefree to killthe effect is not very good, with not a few days will be...

US-CERT Technical Cyber Security Alert TA06-270A -- Microsoft Internet Explorer WebViewFolderIcon ActiveX Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA06-270A Microsoft Internet Explorer WebViewFolderIcon ActiveX Vulnerability Original release date: September 27, 2006 Last revised: -- Source: US-CERT Systems Affected Microsoft Windows...

Microsoft Windows WebViewFolderIcon ActiveX integer overflow

Overview The Microsoft Windows WebViewFolderIcon ActiveX control contains an integer overflow vulnerability. This may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The Microsoft WebViewFolderIcon object is an ActiveX control that comes with...

Microsoft DirectAnimation Path ActiveX control fails to validate input

Overview The Microsoft DirectAnimation Path ActiveX control fails to properly validate input. This may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The Microsoft DirectAnimation Path object is an ActiveX control that is used to move object...

IBM Access Support eGatherer ActiveX control buffer overflow

Overview The IBM Access Support eGatherer ActiveX control contains a buffer overflow vulnerability, which may allow a remote unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The IBM Access Support eGatherer ActiveX control has the ability to collect system...

Bundles of good for your pony! Free kill file of sneak-vulnerability warning-the black bar safety net

Nonsense not much said. File bundle anyway still very functional. But now N lot of antivirus software can be killing the What to do? Of course is to do afree to kill! 1, thefree to killyour Trojans, This of course to befree to killyeah, or just broken. 2, looking for an EXE file of the game or wh...

To ms06014 talk page Trojan-free kill method-vulnerability warning-the black bar safety net

Net horsefree killmethods are generally two ways,one is the encryptionMicrosoft's own encode, or write your own encryption and decryption function better,another is to find the feature codecharacter or order. A friend said mesh mA is Ka bar kill,do not know the measures,now I ms06014, for...

To ms06014 talk about net horse free kill method-vulnerability warning-the black bar safety net

Net horsefree killmethods are generally two ways,one is the encryptionMicrosoft's own encode, or write your own encryption and decryption function better,another is to find the feature codecharacter or order. A friend said mesh mA is Ka bar kill,do not know the measures,now I ms06014, for...

Dove gray modified feature free kill mccafé and Norton 8. 0 Enterprise Edition-vulnerability warning-the black bar safety net

Today the rare is I in the school room and RUB into the machine, installed Norton and wheat coffee. Anyway, haven't for these two antivirus ever madefree kill, so just change it for the better. The positioning process on a free, given the feature code location: Norton: the starting offset 000B9A4...

CVE-2006-3416

Tor before 0.1.1.20 kills the circuit when it receives an unrecognized relay command, which causes network circuits to be disbanded. NOTE: while this item is listed under the "Security fixes" section of the developer changelog, the developer clarified on 20060707 that this is only a self-DoS...