Buffer overflow

Buffer overflow in a certain ActiveX control in Xunlei Web Thunder 5.6.9.344, possibly the DapPlayer ActiveX control in DapPlayerNow.dll, allows remote attackers to execute arbitrary code via a long first argument to the DownURL2 method. NOTE: some of these details are obtained from third party...

CVE-2007-5064

Buffer overflow in a certain ActiveX control in Xunlei Web Thunder 5.6.9.344, possibly the DapPlayer ActiveX control in DapPlayerNow.dll, allows remote attackers to execute arbitrary code via a long first argument to the DownURL2 method. NOTE: some of these details are obtained from third party...

CVE-2007-5064

Buffer overflow in a certain ActiveX control in Xunlei Web Thunder 5.6.9.344, possibly the DapPlayer ActiveX control in DapPlayerNow.dll, allows remote attackers to execute arbitrary code via a long first argument to the DownURL2 method. NOTE: some of these details are obtained from third party...

CVE-2007-5064

Affects Xunlei Web Thunder 5.6.9.344 via a buffer overflow in an ActiveX control (likely DapPlayer_Now.dll’s DapPlayer ActiveX) exposed through DownURL2. This allows remote code execution by sending a long first argument to DownURL2. Descriptions come from CVE-2007-5064 and corroborating sources;...

Xunlei Web Thunder ActiveX控件DownURL2方法远程缓冲区溢出漏洞

Xunlei Web Thunder是一款在线加速下载程序。 Xunlei Web Thunder提供的ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 问题存在于DownURL2方法处理中，由于对参数缺少充分过滤，构建恶意WEB页，诱使用户访问，可导致以应用程序权限执行任意指令。 Xunlei Web Thunder 5.6.9.344 目前没有解决方案提供： http://my.xunlei.com/setup.htm OBJECT id=target classid=clsid:...

Xunlei Web Thunder 5.6.9.344 - ActiveX Control DownURL2 Method Remote Buffer Overflow

Xunlei Web Thunder 5.6.9.344 - ActiveX Control DownURL2 Method Remote Buffer Overflow source: https://www.securityfocus.com/bid/25751/info Xunlei Web Thunder is prone to a remote buffer-overflow vulnerability because the application fails to perform adequate boundary-checks on user-supplied data...

Xunlei Web Thunder 5.6.9.344 - ActiveX Control DownURL2 Method Remote Buffer Overflow

source: https://www.securityfocus.com/bid/25751/info Xunlei Web Thunder is prone to a remote buffer-overflow vulnerability because the application fails to perform adequate boundary-checks on user-supplied data. An attacker may exploit this issue by enticing victims into visiting a maliciously...

Thunder 5.6.9.344 ActiveX 0day Remote Code Executi-vulnerability warning-the black bar safety net

Has been successfully tested,not card,is off IE OBJECT id=target classid=clsid:EEDD6FF9-13DE-496B-9A1C-D78B3215E266/OBJECT SCRIPT language=javascript var she132132132132llc13ode = unescape"%u9090"+"%u9090"+ "%uefe9%u0000%u5a00%ua164%u0030%u0000%u408b%u8b0c" +...

Xunlei Web Thunder ThunderServer.webThunder.1 ActiveX AddCategory文件下载漏洞

Xunlei Web Thunder是一款基于多资源超线程技术的下载工具。 Xunlei Web Thunder ThunderServer.webThunder.1 ActiveX控件存在输入验证错误，远程攻击者可以利用漏洞下载任意文件到目标用户系统，可导致任意命令执行。 攻击者必须构建恶意WEB页，诱使用户访问来触发。目前没有详细漏洞细节提供。 Xunlei Web Thunder ThunderServer.webThunder.1 1.8.4.130 目前没有详细解决方案提供： http://my.xunlei.com/setup.htm...

Xunlei Web Thunder ThunderServer.webThunder.1 ActiveX任意文件上传漏洞

Xunlei Web Thunder是一款在线加速下载程序。 Xunlei Web Thunder提供的ActiveX控件存在缓冲区溢出问题，远程攻击者可以利用漏洞下载任意程序在用户系统上以当前用户上下文权限运行。 问题存在于ThunderServer.webThunder.1,可以采用JS代码ActiveXObject"ThunderServer.webThunder.1";来激活讯雷的组件。 其中的关键函数包括: SetBrowserWindowData:新建浏览器窗口. SetConfig:设置WEB讯雷. HideBrowserWindow:隐藏浏览器...

Web Thunder(xunlei)0day vulnerability-exposure-vulnerability warning-the black bar safety net

First, the event analysis: DSW Lab AVERT panel monitor to a high risk of hearing ray vulnerability is the exposure, the vulnerability occurs in the Web thunder of one of the controls, when you install Web thunder of the user in browsing hacker carefully constructed to contain malicious code of a...

迅雷5 ThunderAgent Module 远程拒绝服务漏洞

迅雷是由Thunder Networking公司开发的一个下载软件，在中国有着非常广泛的用户。迅雷5的ThunderAgent005.dll中注册了一个 activex控件，当Internet Explorer调用他的某些方法时，将会造成整数溢出，成功利用将造成Internet Explorer崩溃。 在ThunderAgent005.dll中，有两处方法调用时忽略了输入参数异常的情况，当输入参数为精心构造的负数或大整数时，将造成整数溢出，产生不可预料的结果，从而造成浏览器崩溃。 该Activex注册控件的Object Classid是...

CVE-2006-6502

Use-after-free vulnerability in the LiveConnect bridge code for Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to cause a denial of service crash via unknown vectors...

With the thunder open the cafe owner hidden hard drive partition-vulnerability warning-the black bar safety net

In Internet cafes, the boss put the computer partition hidden, leaving only a few folders. Because of this, tried several kinds of methods are unable to view the download to something, for this very distressed. Then see the cafe system installed Thunder, remembered a few days ago found view...

The use of third-party Internet access software real free Internet access-vulnerability warning-the black bar safety net

New Year's Day the night before, discovered this vulnerability. I was in Jiangsu Changzhou at the school sophomore students. Our school is Nanjing lianchuang company of broadband Internet assistant on the web. This is it, don't know what we black-how many friends, this method can achieve the real...