BackWeb Lite Install Runner ActiveX stack buffer overflows

Overview The BackWeb Lite Install Runner ActiveX control contains multiple stack buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description BackWeb Lite Install Runner is an ActiveX control that is used to install software on...

Logitech VideoCall多个ActiveX控件缓冲区溢出漏洞

Logitech VideoCall是一款视频会议软件。 Logitech VideoCall多个ActiveX控件处理参数输入缺少正确边界检查，远程攻击者可以利用漏洞对应用程序进行缓冲区溢出攻击，可能以进程权限执行任意指令。 问题存在于多个包含的控件由于不正确处理用户提交的参数，构建恶意WEB页，诱使用户访问，可导致应用程序崩溃。这些控件包括： VibeC vibecontrol.dll CallManager StarClient.dll ViewerClient StarClient.dll ComLink uicomlink.dll WebCamXMP wcamxmp.dll...

Stack overflow

Multiple stack-based buffer overflows in ActiveX controls 1 VibeC in a vibecontrol.dll, 2 CallManager and 3 ViewerClient in b StarClient.dll, 4 ComLink in c uicomlink.dll, and 5 WebCamXMP in d wcamxmp.dll in Logitech VideoCall allow remote attackers to cause a denial of service browser crash and...

CVE-2007-2918

Multiple stack-based buffer overflows in ActiveX controls 1 VibeC in a vibecontrol.dll, 2 CallManager and 3 ViewerClient in b StarClient.dll, 4 ComLink in c uicomlink.dll, and 5 WebCamXMP in d wcamxmp.dll in Logitech VideoCall allow remote attackers to cause a denial of service browser crash and...

CVE-2007-2918

CVE-2007-2918 involves multiple stack-based buffer overflows in Logitech VideoCall ActiveX controls (vibecontrol.dll, StarClient.dll, uicomlink.dll, wcamxmp.dll). The flaws enable a remote attacker to cause a browser crash (DoS) and potentially execute arbitrary code via unspecified vectors. Affe...

CVE-2007-2918

Multiple stack-based buffer overflows in ActiveX controls 1 VibeC in a vibecontrol.dll, 2 CallManager and 3 ViewerClient in b StarClient.dll, 4 ComLink in c uicomlink.dll, and 5 WebCamXMP in d wcamxmp.dll in Logitech VideoCall allow remote attackers to cause a denial of service browser crash and...

CVE-2007-2918: Undefined Security Weakness

Multiple stack-based buffer overflows in ActiveX controls 1 VibeC in a vibecontrol.dll, 2 CallManager and 3 ViewerClient in b StarClient.dll, 4 ComLink in c uicomlink.dll, and 5 WebCamXMP in d wcamxmp.dll in Logitech VideoCall allow remote attackers to cause a denial of service browser crash and...

Logitech VideoCall ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in the Logitech VideoCall ActiveX Control wcamxmp.dll 2.0.3470.448. By sending an overly long string to the "Start" method, an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/browser/logitechvideocall/start msf...

Logitech VideoCall multiple ActiveX controls contain stack buffer overflows

Overview Logitech VideoCall ActiveX controls contain multiple stack buffer overflows, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Logitech VideoCall is video conferencing software for Windows. Logitech VideoCall includes...

QuickCam Linux设备驱动QCAMVC_Video_Init函数缓冲区溢出漏洞

QuickCam是Logitech罗技公司的摄像头产品。 QuickCam的Linux驱动的初始化函数qcamvcvideoinit中存在缓冲区溢出漏洞，本地攻击者可能利用此漏洞造成拒绝服务或控制系统。 qcamvcvideoinit函数的原型如下： static void qcamvcvideoinitstruct qcamvc qcamvc 如果用户使用了特制的QuickCam对象的话，就会触发这个溢出，导致执行任意指令。 De Marchi Daniele QuickCam VC linux driver = 1.0.9...

CVE-2002-1722

Logitech iTouch keyboards are affected by CVE-2002-1722. The vulnerability, as described, allows attackers with physical access to bypass the screen locking function and execute user-defined commands assigned to a button. The provided documents do not specify affected models or versions, underlyi...

CVE-2002-1722

Logitech iTouch keyboards allows attackers with physical access to the system to bypass the screen locking function and execute user-defined commands that have been assigned to a button...

CVE-2002-1722: Undefined Security Weakness

Logitech iTouch keyboards allows attackers with physical access to the system to bypass the screen locking function and execute user-defined commands that have been assigned to a button...

CVE-2002-1722

Logitech iTouch keyboards allows attackers with physical access to the system to bypass the screen locking function and execute user-defined commands that have been assigned to a button...

Logitech Keyboard Insecurity

Risk: Rather Low Logitech has a piece of software available with their iTouch line of keyboards cordless ones included that allows you to press one button and run a program, control volume, jump to a URL, or shut down the PC. When you lock a computer, with NT/2000/XP/etc. however, these buttons...

CVE-2001-0737

A long 'synch' delay in Logitech wireless mice and keyboard receivers allows a remote attacker to hijack connections via a man-in-the-middle attack...

CVE-2001-0737

A long 'synch' delay in Logitech wireless mice and keyboard receivers allows a remote attacker to hijack connections via a man-in-the-middle attack...

CVE-2001-0737

CVE-2001-0737 describes a vulnerability in Logitech wireless mice and keyboard receivers where a long “synch” delay enables a remote attacker to hijack connections via a man‑in‑the‑middle attack. The description specifies the affected component as the wireless receivers used with Logitech periphe...

CVE-2001-0737: Undefined Security Weakness

A long 'synch' delay in Logitech wireless mice and keyboard receivers allows a remote attacker to hijack connections via a man-in-the-middle attack...

Logitech vulnerability (DoS, man-in-the-middle-attack) - Resend

Preface: Every information provided is based on the tested devices. We cannot ensure that other sets, sold elsewhere, may be vulnerable OR NOT! Devices tested: Logitech Cordless Desktop, sold in Germany. Keyboard: M/N: Y-RC14 P/N: 867097-0102 125283-401A S/N: MCU04607129 Working at 27.145 MHz in...