SAMSUNG NET-i Viewer 1.37 SEH Overwrite

No description provided by source. html object classid='clsid:FA6E2EA9-D816-4F00-940B-609C9E8847A4' id='target' /object script language='vbscript' ' Exploit Title: SAMSUNG NET-i viewer ActiveX SEH Overwrite ' Date: April 30 2012 ' Author: Blake ' Software Link:...

Samsung NET-i viewer Multiple ActiveX BackupToAvi() Remote Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

CVE-2012-4334

The ConnectDDNS method in the 1 STWConfigNVR 1.1.13.15 and 2 STWConfig 1.1.14.13 ActiveX controls in Samsung NET-i viewer 1.37.120316 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: some of these details are obtained from third party information...

CVE-2012-4335

Samsung NET-i viewer 1.37.120316 allows remote attackers to cause a denial of service infinite loop via a negative size value in a TCP request to 1 NiwMasterService or 2 NiwStorageService. NOTE: some of these details are obtained from third party information...

Information disclosure

Samsung NET-i viewer 1.37.120316 allows remote attackers to cause a denial of service infinite loop via a negative size value in a TCP request to 1 NiwMasterService or 2 NiwStorageService. NOTE: some of these details are obtained from third party information...

Stack overflow

Multiple stack-based buffer overflows in the BackupToAvi method in the 1 UMSCtrl 1.5.1.1 and 2 UMSCtrlSTW 2.0.1.0 ActiveX controls in Samsung NET-i viewer 1.37.120316 allow remote attackers to execute arbitrary code via a long string in the fname parameter. NOTE: some of these details are obtaine...

Information disclosure

The ConnectDDNS method in the 1 STWConfigNVR 1.1.13.15 and 2 STWConfig 1.1.14.13 ActiveX controls in Samsung NET-i viewer 1.37.120316 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: some of these details are obtained from third party information...

CVE-2012-4335

CVE-2012-4335 affects Samsung NET-i viewer 1.37.120316. A flaw in TCP handling allows remote attackers to trigger a denial of service (infinite loop) by sending a negative size value to NiwMasterService or NiwStorageService. Root cause is malformed input in TCP requests that produce looping behav...

CVE-2012-4335

Samsung NET-i viewer 1.37.120316 allows remote attackers to cause a denial of service infinite loop via a negative size value in a TCP request to 1 NiwMasterService or 2 NiwStorageService. NOTE: some of these details are obtained from third party information...

CVE-2012-4334

The CVE-2012-4334 issue affects Samsung NET-i Viewer 1.37.120316, specifically the ConnectDDNS method in the STWConfigNVR 1.1.13.15 and STWConfig 1.1.14.13 ActiveX controls. A remote attacker can trigger arbitrary code execution via unspecified vectors. Details are drawn from multiple sources; th...

CVE-2012-4333

Summary (CVE-2012-4333) : Multiple stack-based buffer overflows in the BackupToAvi method of Samsung NET-i viewer’s ActiveX controls (CNC_Ctrl) and related UMS_Ctrl components allow remote code execution via a long fname string. Affected products include Samsung NET-i viewer 1.37.120316 and the C...

CVE-2012-4334

The ConnectDDNS method in the 1 STWConfigNVR 1.1.13.15 and 2 STWConfig 1.1.14.13 ActiveX controls in Samsung NET-i viewer 1.37.120316 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: some of these details are obtained from third party information...

CVE-2012-4334: Undefined Security Weakness

The ConnectDDNS method in the 1 STWConfigNVR 1.1.13.15 and 2 STWConfig 1.1.14.13 ActiveX controls in Samsung NET-i viewer 1.37.120316 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: some of these details are obtained from third party information...

CVE-2012-4333: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in the BackupToAvi method in the 1 UMSCtrl 1.5.1.1 and 2 UMSCtrlSTW 2.0.1.0 ActiveX controls in Samsung NET-i viewer 1.37.120316 allow remote attackers to execute arbitrary code via a long string in the fname parameter. NOTE: some of these details are obtaine...

PT-2012-5336

Name of the Vulnerable Software and Affected Versions Samsung NET-i viewer versions 1.37.120316 Description The issue allows remote attackers to execute arbitrary code. It is related to the ConnectDDNS method in the STWConfigNVR and STWConfig ActiveX controls. Recommendations For Samsung NET-i...

PT-2012-5335

Name of the Vulnerable Software and Affected Versions Samsung NET-i viewer versions 1.37.120316 Description The issue is related to multiple stack-based buffer overflows in the BackupToAvi method within the UMS Ctrl and UMS Ctrl STW ActiveX controls. This allows remote attackers to execute...

CVE-2012-4335: Improper Restriction of Operations within the Bounds of a Memory Buffer

Samsung NET-i viewer 1.37.120316 allows remote attackers to cause a denial of service infinite loop via a negative size value in a TCP request to 1 NiwMasterService or 2 NiwStorageService. NOTE: some of these details are obtained from third party information...

PT-2012-5337

Name of the Vulnerable Software and Affected Versions Samsung NET-i viewer version 1.37.120316 Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop. This can be achieved by sending a TCP request with a negative size value to specific services,...

CVE-2012-4250

Stack-based buffer overflow in the RequestScreenOptimization function in the XProcessControl.ocx ActiveX control in msls31.dll in Samsung NET-i viewer 1.37 allows remote attackers to execute arbitrary code via a long string in the first argument...

Stack overflow

Stack-based buffer overflow in the RequestScreenOptimization function in the XProcessControl.ocx ActiveX control in msls31.dll in Samsung NET-i viewer 1.37 allows remote attackers to execute arbitrary code via a long string in the first argument...