LPViewer ActiveX Control url property buffer overflow

Added: 11/21/2008 CVE: CVE-2008-4384 BID: 31604 OSVDB: 48946 Background The LPViewer ActiveX Control installs with the iseemedia ZOOM control viewer and allows viewing of images created with iseemedia software. Problem A buffer overflow vulnerability allows command execution when a user opens a w...

CVE-2008-5023

Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the protection mechanism for codebase principals and execute arbitrary script via the -moz-binding CSS property in a signed JAR file...

Authentication flaw

Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the protection mechanism for codebase principals and execute arbitrary script via the -moz-binding CSS property in a signed JAR file...

Mozilla -moz-binding property bypasses security checks on codebase principals

Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the protection mechanism for codebase principals and execute arbitrary script via the -moz-binding CSS property in a signed JAR file...

Mozilla Firefox 3.x < 3.0.4 Multiple Vulnerabilities

Binary data 4752.prm...

Firefox 3.0.x < 3.0.4 Multiple Vulnerabilities

The installed version of Firefox 3.0 is earlier than 3.0.4. Such versions are potentially affected by the following security issues : - Locally saved '.url' shortcut files can be used to read information stored in the local cache. MFSA 2008-47 - 'file:' URIs are given chrome privileges when opene...

-moz-binding property bypasses security checks on codebase principals — Mozilla

Security researcher Collin Jackson reported that the -moz-binding CSS property can be used to bypass security checks which validate codebase principals. Similar to the issue reported in MFSA 2008-23, Jackson demonstrated that an attacker can replace a stylesheet in a signed JAR which uses relativ...

Buffer overflow

Buffer overflow in the DjVu ActiveX Control 3.0 for Microsoft Office DjVuActiveXMSOffice.dll allows remote attackers to execute arbitrary code via a long 1 ImageURL property, and possibly the 2 Mode, 3 Page, or 4 Zoom properties...

djvu-overflow.txt

Snoop Security Research committee -- // clac.exe var shellcode = unescape "%uE860%u0000%u0000%u815D%u06ED%u0000%u8A00%u1285%u0001%u0800" + "%u75C0%uFE0F%u1285%u0001%uE800%u001A%u0000%uC0...

DjVu ActiveX Control 3.0 ImageURL Property Overflow Exploit

Exploit for unknown platform in category remote exploits =========================================================== DjVu ActiveX Control 3.0 ImageURL Property Overflow Exploit =========================================================== Snoop Security Research committee -- input language=JavaScri...

CVE-2008-4771

Stack-based buffer overflow in VATDecoder.VatCtrl.1 ActiveX control in 1 4xem VatCtrl Class VATDecoder.dll 1.0.0.27 and 1.0.0.51, 2 D-Link MPEG4 SHM Audio Control VAPGDecoder.dll 1.7.0.5, 3 Vivotek RTSP MPEG4 SP Control RtspVapgDecoderNew.dll 2.0.0.39, and possibly other products, allows remote...

Stack overflow

Stack-based buffer overflow in VATDecoder.VatCtrl.1 ActiveX control in 1 4xem VatCtrl Class VATDecoder.dll 1.0.0.27 and 1.0.0.51, 2 D-Link MPEG4 SHM Audio Control VAPGDecoder.dll 1.7.0.5, 3 Vivotek RTSP MPEG4 SP Control RtspVapgDecoderNew.dll 2.0.0.39, and possibly other products, allows remote...

CVE-2008-4771

Stack-based buffer overflow in VATDecoder.VatCtrl.1 ActiveX control in 1 4xem VatCtrl Class VATDecoder.dll 1.0.0.27 and 1.0.0.51, 2 D-Link MPEG4 SHM Audio Control VAPGDecoder.dll 1.7.0.5, 3 Vivotek RTSP MPEG4 SP Control RtspVapgDecoderNew.dll 2.0.0.39, and possibly other products, allows remote...

CVE-2008-4771

CVE-2008-4771 describes a stack-based buffer overflow in the VATDecoder.VatCtrl.1 ActiveX control across multiple products (4xem VatCtrl Class VATDecoder.dll 1.0.0.27/1.0.0.51; D-Link MPEG4 SHM Audio Control VAPGDecoder.dll 1.7.0.5; Vivotek RTSP MPEG4 SP Control RtspVapgDecoderNew.dll 2.0.0.39), ...

CVE-2008-4749

Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control VImpX.ocx 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allow remote attackers to overwrite arbitrary files via 1 the LogFile property and ClearLogFile method, and 2 the SaveToFile method...

CVE-2008-4750

Stack-based buffer overflow in the VImpX.VImpAX ActiveX control VImpX.ocx 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allows remote attackers to execute arbitrary code via a long LogFile property...

Design/Logic Flaw

Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control VImpX.ocx 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allow remote attackers to overwrite arbitrary files via 1 the LogFile property and ClearLogFile method, and 2 the SaveToFile method...

CVE-2008-4750

Stack-based buffer overflow in the VImpX.VImpAX ActiveX control VImpX.ocx 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allows remote attackers to execute arbitrary code via a long LogFile property...

CVE-2008-4749

Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control VImpX.ocx 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allow remote attackers to overwrite arbitrary files via 1 the LogFile property and ClearLogFile method, and 2 the SaveToFile method...

CVE-2008-4729

Stack-based buffer overflow in Hummingbird.XWebHostCtrl.1 ActiveX control hclxweb.dll in Hummingbird Xweb ActiveX Control 13.0 and earlier allows remote attackers to execute arbitrary code via a long PlainTextPassword property. NOTE: code execution might not be possible in 13.0...