EUVD-2008-1055

Malware in sbrugna...

Move Networks Quantum Streaming Player - SEH Overwrite Exploit

No description provided by source. !-- Move Networks Quantum Streaming Player SEH Overwrite Exploit Vulnerability discovered by Parvez Anwar, CVE-2007-4722 Exploit written by e.b. Shellcode is limited to around 400 bytes Tested on Windows XP SP2fully patched English, IE6 Thanks to h.d.m. and the...

Move Media Player 1.0 Quantum Streaming ActiveX Control Multiple Buffer Overflow Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/25529/info Move Media Player is prone to multiple remote buffer-overflow vulnerabilities because the application fails to properly bounds-check user-supplied data before copying it into insufficiently sized memory buffers...

Move Media Player qsp2ie07074039.dll ActiveX控件栈溢出漏洞

BUGTRAQ ID: 27995 Move Media Player是一款网络流媒体播放器。 Move Media Player的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 Move Media Player所安装的Quantum Streaming IE Player ActiveX控件（qsp2ie07074039.dll）没有正确地验证对UploadLogs方式的输入参数。如果用户受骗访问了恶意网页并向该方式传送了超长URL参数的话，就可能触发栈溢出，导致执行任意指令。 Move Networks qsp2ie07074039.dll...

CVE-2008-1044

Stack-based buffer overflow in the Quantum Streaming Player Quantum Streaming IE Player ActiveX control aka QSP2IE.QSP2IE in qsp2ie07076007.dll 7.7.6.7 and qsp2ie07074039.dll 7.7.4.39 in Move Media Player allows remote attackers to execute arbitrary code via a long argument to the UploadLogs...

Stack overflow

Stack-based buffer overflow in the Quantum Streaming Player Quantum Streaming IE Player ActiveX control aka QSP2IE.QSP2IE in qsp2ie07076007.dll 7.7.6.7 and qsp2ie07074039.dll 7.7.4.39 in Move Media Player allows remote attackers to execute arbitrary code via a long argument to the UploadLogs...

CVE-2008-1044

The CVE-2008-1044 vulnerability is a stack-based buffer overflow in Move Media Player’s Quantum Streaming Player ActiveX control (QSP2IE.QSP2IE) used by Move Media Player. It occurs in the qsp2ie07076007.dll (7.7.6.7) and qsp2ie07074039.dll (7.7.4.39) when processing a long argument to the Upload...

CVE-2008-1044

Stack-based buffer overflow in the Quantum Streaming Player Quantum Streaming IE Player ActiveX control aka QSP2IE.QSP2IE in qsp2ie07076007.dll 7.7.6.7 and qsp2ie07074039.dll 7.7.4.39 in Move Media Player allows remote attackers to execute arbitrary code via a long argument to the UploadLogs...

Move Networks Quantum Streaming Player Control BOF Exploit

No description provided by source. !-- Move Networks Quantum Streaming Player Control UploadLogs Buffer Overflow Exploit written by e.b. Tested on Windows XP SP2fully patched English, IE6, qsp2ie07074039.dll version 7.7.4.39digitally signed Tuesday, September 18, 2007 7:10:35PM Thanks to h.d.m. a...

Move Networks Quantum Streaming Player Control - Remote Buffer Overflow

function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" + "%u4948%u4949%u4949%u4949%u4949%u4949%u5a51%u436a" +...

Move Networks Quantum Streaming Player Control BOF Exploit

Exploit for unknown platform in category remote exploits ========================================================== Move Networks Quantum Streaming Player Control BOF Exploit ========================================================== function Check // win32exec - EXITFUNC=seh...

Move Networks Quantum Streaming Player Control - Remote Buffer Overflow

Move Networks Quantum Streaming Player Control - Remote Buffer Overflow function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...

[Full-disclosure] Move Networks Upgrade Manager QMPUpgrade.dll Buffer Overflow

Who: Move Networks http://www.movenetworks.com/ What: Move Networks Quantum Streaming Player Upgrade Manager How: QMPUpgrade.dll version 1.0.0.1 6054D082-355D-4B47-B77C-36A778899F48 QMPUpgrade.dll is packaged with an older version of the Quantum player. The player itself has several...

Move Networks Quantum Streaming Player SEH Overwrite Exploit

No description provided by source. !-- Move Networks Quantum Streaming Player SEH Overwrite Exploit Vulnerability discovered by Parvez Anwar, CVE-2007-4722 Exploit written by e.b. Shellcode is limited to around 400 bytes Tested on Windows XP SP2fully patched English, IE6 Thanks to h.d.m. and the...

Move Networks Quantum Streaming Player - Remote Overflow (SEH)

Move Networks Quantum Streaming Player - Remote Overflow SEH Move Networks Quantum Streaming Player SEH Overwrite Exploit function Check var buf = 'A'; while buf.length = 1027 buf = buf + 'A'; // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.c...

Move Networks Quantum Streaming Player SEH Overwrite Exploit

Exploit for unknown platform in category remote exploits ============================================================ Move Networks Quantum Streaming Player SEH Overwrite Exploit ============================================================ Move Networks Quantum Streaming Player SEH Overwrite...

Move Media Player Quantum Streaming ActiveX控件多个栈溢出漏洞

BUGTRAQ ID: 25529 Move Media Player是一款网络流媒体播放器。 Move Media Player的Quantum Streaming IE Player ActiveX控件在处理Play和Buzzer方式的参数时存在栈溢出漏洞。如果用户受骗访问了恶意站点并向受影响的方式传送了超长字符串的话，就可能触发这些溢出，导致执行任意代码。 Move Networks Move Media Player 1.0.0.1 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.movenetworks.co...

Stack overflow

Multiple stack-based buffer overflows in the Quantum Streaming Internet Explorer Player ActiveX control in qsp2ie07051001.dll 1.0.0.1 in Move Media Player allow remote attackers to execute arbitrary code via a long string to the 1 Play and 2 Buzzer methods...

CVE-2007-4722

Multiple stack-based buffer overflows in the Quantum Streaming Internet Explorer Player ActiveX control in qsp2ie07051001.dll 1.0.0.1 in Move Media Player allow remote attackers to execute arbitrary code via a long string to the 1 Play and 2 Buzzer methods...

CVE-2007-4722

CVE-2007-4722 : Multiple stack-based buffer overflows in the Move Media Player’s Quantum Streaming IE ActiveX control (qsp2ie07051001.dll 1.0.0.1) allow remote attackers to execute arbitrary code. The vulnerability arises from insufficient bounds-checking in the ActiveX methods, notably (1) Play ...