PT-2013-1568

Name of the Vulnerable Software and Affected Versions TrendLink versions 9.0.2.27051 and earlier Description The issue concerns the SaveToFile method in a certain ActiveX control within TrendDisplay.dll, which does not properly restrict file creation. This allows remote attackers to download and...

CVE-2012-3022: Undefined Security Weakness

The SaveToFile method in a certain ActiveX control in TrendDisplay.dll in Canary Labs TrendLink 9.0.2.27051 and earlier does not properly restrict the creation of files, which allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via a crafted w...

Aloaha PDF Crypter (3.5.0.1164) ActiveX Arbitrary File Overwrite

Exploit for windows platform in category dos / poc ============================================================================================ TITLE: ============================================================================================ Aloaha PDF Crypter 3.5.0.1164 activex arbitrary file...

Design/Logic Flaw

The 1 SimpleTree and 2 ReportTree classes in the ARDoc ActiveX control ARDoc.dll in Quest InTrust 10.4.0.853 and earlier do not properly implement the SaveToFile method, which allows remote attackers to write or overwrite arbitrary files via the bstrFileName argument...

PT-2012-6178

Name of the Vulnerable Software and Affected Versions Quest InTrust versions 10.4.0.853 and earlier Description The issue concerns the improper implementation of the SaveToFile method in the SimpleTree and ReportTree classes within the ARDoc ActiveX control. This allows remote attackers to write ...

IDrive Online Backup ActiveX unsafe method

Unsafe SaveToFile method...

Pro Softnet IDrive Online Backup 3.4.0 - ActiveX 'SaveToFile()' Arbitrary File Overwrite

source: https://www.securityfocus.com/bid/48582/info Pro Softnet IDrive Online Backup ActiveX control is prone to a vulnerability that lets attackers overwrite files with arbitrary, attacker-controlled content. An attacker can exploit this issue to corrupt and overwrite arbitrary files on a...

IDrive Online Backup ActiveX control Insecure Method

High-Tech Bridge SA Security Research Lab has discovered vulnerability in IDrive Online Backup ActiveX control, which can be exploited to overwrite arbitrary files. 1 Insecure method in IDrive Online Backup ActiveX Control The vulnerability is caused due to the UniBasicPack.UniTextBox...

MetaProducts MetaTreeX 1.5.100 File Overwrite

Author : Houssamix MetaProducts MetaTreeX V 1.5.100 Remote File Overwrite Exploit Note : SaveToFile is vuln to / Report for Clsid: 67E66985-F81A-11D6-BC0F-F7B40157DC26 RegKey Safe for Script: Faux RegKey Safe for Init: Faux Implements IObjectSafety: Vrai IDisp Safe: Safe for untrusted: caller,dat...

MetaProducts MetaTreeX 1.5.100 - ActiveX File Overwrite

Author : Houssamix MetaProducts MetaTreeX V 1.5.100 Remote File Overwrite Exploit Note : SaveToFile is vuln to / Report for Clsid: 67E66985-F81A-11D6-BC0F-F7B40157DC26 RegKey Safe for Script: Faux RegKey Safe for Init: Faux Implements IObjectSafety: Vrai IDisp Safe: Safe for untrusted: caller,dat...

MetaProducts MetaTreeX V 1.5.100 ActiveX File Overwrite Exploit

Exploit for unknown platform in category remote exploits =============================================================== MetaProducts MetaTreeX V 1.5.100 ActiveX File Overwrite Exploit =============================================================== Author : Houssamix MetaProducts MetaTreeX V...

PDFBuilderX ActiveX控件SaveToFile()方式任意文件覆盖漏洞

BUGTRAQ ID: 33233 PDFBuilderX是用于创建和保存PDF文件的ActiveX控件。 PDFBuilderXTrial.PDFDoc ActiveX控件（PDFBuilderXTrial.ocx）没有正确地验证对SaveToFile方式所提供的输入，如果用户受骗访问了恶意网页并向该方式传送了恶意参数的话，就可能导致向系统上写入任意文件。 Ciansoft PDFBuilderX 2.2.0.1 临时解决方法： 为受影响的ActiveX控件设置kill-bit。 厂商补丁： Ciansoft --------...

CVE-2008-4749

Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control VImpX.ocx 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allow remote attackers to overwrite arbitrary files via 1 the LogFile property and ClearLogFile method, and 2 the SaveToFile method...

Design/Logic Flaw

Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control VImpX.ocx 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allow remote attackers to overwrite arbitrary files via 1 the LogFile property and ClearLogFile method, and 2 the SaveToFile method...

CVE-2008-4749

Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control VImpX.ocx 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allow remote attackers to overwrite arbitrary files via 1 the LogFile property and ClearLogFile method, and 2 the SaveToFile method...

CVE-2008-4749

The CVE-2008-4749 issue affects DB Software Laboratory’s VImpX.VImpAX ActiveX control (VImpX.ocx) version 4.8.8.0 (possibly 4.7.7). The vulnerability arises from insecure methods that let remote attackers overwrite arbitrary files via the LogFile property and ClearLogFile method, and via the Save...

VImpX.ocx ActiveX控件多个文件破坏漏洞

BUGTRAQ ID: 31907 VImpX ActiveX控件允许跨表格或ODBC数据源将数据导入到Oracle、SQL Server或ODBC数据库中。 VImpX.ocx ActiveX控件（VImpX.ocx，CLSID...

CVE-2008-4749: Undefined Security Weakness

Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control VImpX.ocx 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allow remote attackers to overwrite arbitrary files via 1 the LogFile property and ClearLogFile method, and 2 the SaveToFile method...

Remote code execution

The Chilkat XML ChilkatUtil.CkData.1 ActiveX control ChilkatUtil.dll 3.0.3.0 and earlier allows remote attackers to create, overwrite, and modify arbitrary files for execution via a call to the 1 SaveToFile, 2 SaveToTempFile, or 3 AppendBinary method. NOTE: this issue might only be exploitable in...

Chilkat XML ActiveX Remote Arbitrary File Creation/Execution Exploit

No description provided by source. ----------------------------------------------------------------------------- Chilkat XML ActiveX Remote Arbitrary File Creation/Execution url: www.chilkatsoft.com File: ChilkatUtil.dll = 3.0.3.0 CLSID: 5022FAE8-B780-4B78-B8DC-1AF1145A4F42 ProgID:...