Microsoft Visual Studio - 'Msmask32.ocx' ActiveX Remote Buffer Overflow

Microsoft Visual Studio Msmask32.ocx ActiveX Remote Buffer Overflow Exploit Author: Koshi Original POC: http://www.milw0rm.com/exploits/6244 Not by me My first ActiveX exploit, learned quite a bit playing with this one. Heaps are handy. Loaded File: C:\WINDOWS\system32\MSMASK32.OCX Name: MSMask...

CVE-2008-3704

CVE-2008-3704 corresponds to a heap-based buffer overflow in the MaskedEdit ActiveX control (Msmask32.ocx) that occurs when a long Mask parameter is processed. The defect affects Msmask32.ocx version 6.0.81.69 and possibly earlier versions (up to 6.0.84.18), within Microsoft Visual Studio 6.0, Vi...

VulnCheck KEV: CVE-2008-3704

Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in Microsoft Visual Studio 6.0, Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allows remote attackers...

Microsoft Visual Studio (Msmask32.ocx) ActiveX Remote BOF PoC

No description provided by source. var body='OBJECT CLASSID="CLSID:C932BA85-4374-101B-A56C-00AA003668DC" width="10"PARAM NAME="Mask" VALUE="'; var body1='"/OBJECT'; var buf=''; for i=1;i=1945;i++buf=buf+unescape"%0C"; document.writebody+buf+body1;...

Microsoft Visual Studio - Msmask32.ocx ActiveX Remote Buffer Overflow (PoC)

Microsoft Visual Studio - Msmask32.ocx ActiveX Remote Buffer Overflow PoC var body=''; var buf=''; for i=1;i=1945;i++buf=buf+unescape"%0C"; document.writebody+buf+body1; milw0rm.com 2008-08-14...

Microsoft Visual Studio 'Msmask32.ocx' ActiveX控件缓冲区溢出漏洞

BUGTRAQ ID: 30674 CNCAN ID：CNCAN-2008081404 Microsoft Visual Studio是一款微软公司的开发工具套件系列产品。 Microsoft Visual Studio包含的'Msmask32.ocx' ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 问题存在于'Msmask32.ocx' ActiveX控件对参数的处理，构建恶意WEB页，诱使用户访问，可导致触发缓冲区溢出，可能以应用程序权限执行任意指令。 Microsoft Visual Studio 6.0 - Microsoft Window...

Microsoft Visual Studio (Msmask32.ocx) ActiveX Remote BOF PoC

Exploit for unknown platform in category dos / poc ============================================================= Microsoft Visual Studio Msmask32.ocx ActiveX Remote BOF PoC ============================================================= var body=''; var buf=''; for...

Microsoft Visual Studio 'Msmask32.ocx' ActiveX Control Remote Buffer Overflow Vulnerability

Description The Microsoft Visual Studio ActiveX control, MaskedEdit, is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. An attacker can exploit this issue to execute arbitrary code in the context of an application...

CVE-2008-1725

The CVE-2008-1725 entry concerns the IBiz E-Banking Integrator’s ActiveX control (IBizEBank.FIProfile.1) in fiprofile20.ocx, version 2.0.2932. The vulnerability arises from the unsafe WriteOFXDataFile method, which allows a remote attacker to overwrite arbitrary files by passing a full pathname a...

Data Dynamics ActiveBar (Actbar3.ocx 3.2) Multiple Insecure Methods

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"body bgcolor="E0E0E0"------------------------------------------------------------------------------------ bData Dynamics ActiveBar ActiveX Control Actbar3.ocx 3.2 Multiple Inscure Methods/b...

Data Dynamics ActiveBar (Actbar3.ocx 3.2) Multiple Insecure Methods

Exploit for unknown platform in category remote exploits =================================================================== Data Dynamics ActiveBar Actbar3.ocx 3.2 Multiple Insecure Methods ===================================================================...

CVE-2008-1490

Buffer overflow in a certain Aurigma ActiveX control in ImageUploader4.ocx 4.1.36.0, as used with Piczo aka Pizco and possibly other online services, allows remote attackers to execute arbitrary code via unspecified vectors, possibly involving a long Action property, a different CLSID than...

Buffer overflow

Buffer overflow in a certain Aurigma ActiveX control in ImageUploader4.ocx 4.1.36.0, as used with Piczo aka Pizco and possibly other online services, allows remote attackers to execute arbitrary code via unspecified vectors, possibly involving a long Action property, a different CLSID than...

CVE-2008-1490

CVE-2008-1490: Buffer overflow in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) affecting 4.5.70 and earlier (also older MySpace/Uploader variants like MySpaceUploader.ocx 1.0.0.4). Remote code execution is possible via a long Action property, with unspecified vectors; CLSID/version...

DSquare Exploit Pack: D2SEC_FACEBOOK

Name| d2secfacebook ---|--- CVE| CVE-2008-0660 Exploit Pack| D2ExploitPack Description| Facebook Photo Uploader 4 ImageUploader4.1.ocx ActiveX Stack Overflow Notes|...

Facebook Photo Uploader 4 ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in Facebook Photo Uploader 4. By sending an overly long string to the "ExtractIptc" property located in the ImageUploader4.ocx 4.5.57.0 Control, an attacker may be able to execute arbitrary code. This module requires Metasploit:...

FaceBook PhotoUploader (ImageUploader4.ocx 4.5.57.0) BOF Exploit

No description provided by source. !-- FaceBook PhotoUploader Buffer Overflow Exploit written by e.b. Tested on Windows XP SP2fully patched English, IE6, ImageUploader4.ocx 4.5.57.0FaceBookPhotoUploader2.cab The following controls are also vulnerable: Aurigma ImageUploader4 4.5.70.0 and 4.5.126.0...

FaceBook PhotoUploader (ImageUploader4.ocx 4.5.57.0) BOF Exploit

Exploit for unknown platform in category remote exploits ================================================================ FaceBook PhotoUploader ImageUploader4.ocx 4.5.57.0 BOF Exploit ================================================================ FaceBook PhotoUploader Buffer Overflow Exploit...

FaceBook PhotoUploader - 'ImageUploader4.ocx 4.5.57.0' Remote Buffer Overflow

FaceBook PhotoUploader Buffer Overflow Exploit function Check var buf = unescape"%u4141"; while buf.length = 261 buf = buf + unescape"%u4141"; // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 =...

myspaceup-overflow.txt

MySpace Uploader Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" + "%u4948%u4949%u4949%u4949%u4949%u4949%u5a51%u436a" +...