Visagesoft eXPert PDF Viewer ActiveX控件任意文件覆盖漏洞

BUGTRAQ ID: 31984 CNCAN ID：CNCAN-2008103007 Visagesoft eXPert PDF Viewer是一款PDF阅读器插件。 Visagesoft eXPert PDF Viewer控件存在设计问题，远程攻击者可以利用漏洞以应用程序权限覆盖系统文件。 VSPDFViewerX.ocx控件对savePageAsBitmap"方法对用户提供的参数缺少过滤，构建恶意WEB页，诱使用户访问，可导致以应用程序权限覆盖系统文件。 Visagesoft eXPert PDF Viewer ActiveX 3.0.990 目前没有详细解决方案提供：...

visagesoft-overwrite.txt

VISAGESOFT eXPertPDFViewerX VSPDFViewerX.ocx INSECURE METHOD SITE: http://www.visagesoft.com This was written for educational purpose. Use it at your own risk. Author will be not responsible for any damage. Author: Marco Torti mail: marcotorti2atyahoodotcom thanks UGIS FileVersion: 3.0.990.0 CLSI...

Visagesoft eXPert PDF ViewerX - VSPDFViewerX.ocx File Overwrite

Visagesoft eXPert PDF ViewerX - VSPDFViewerX.ocx File Overwrite VISAGESOFT eXPertPDFViewerX VSPDFViewerX.ocx INSECURE METHOD SITE: http://www.visagesoft.com This was written for educational purpose. Use it at your own risk. Author will be not responsible for any damage. Author: Marco Torti mail:...