EUVD-2008-0644

Malware in sbrugna...

Buffer overflow

Buffer overflow in the NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1, as used in Sejoong Namo ActiveSquare6, allows remote attackers to execute arbitrary code via a long argument to the Install method, a different vulnerability than CVE-2008-0551...

CVE-2008-0634

Buffer overflow in the NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1, as used in Sejoong Namo ActiveSquare6, allows remote attackers to execute arbitrary code via a long argument to the Install method, a different vulnerability than CVE-2008-0551...

CVE-2008-0634: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1, as used in Sejoong Namo ActiveSquare6, allows remote attackers to execute arbitrary code via a long argument to the Install method, a different vulnerability than CVE-2008-0551...

sejoon-overflow.txt

// HeapSpray - execute calculator shellcode =...

Sejoong Namo ActiveSquare 6 - NamoInstaller.dll ActiveX Buffer Overflow

Sejoong Namo ActiveSquare 6 - NamoInstaller.dll ActiveX Buffer Overflow // HeapSpray - execute calculator shellcode =...

Sejoong Namo ActiveSquare 6 - 'NamoInstaller.dll' ActiveX Buffer Overflow

// HeapSpray - execute calculator shellcode =...