CVE-2008-3852

CVE-2008-3852 affects IBM DB2 Server via the CLR stored procedure deployment feature of IBM Database Add-Ins for Visual Studio. A vulnerability in IBM DB2 9.1 before Fixpak 5 and 9.5 before Fixpak 2 allows remote authenticated users to execute arbitrary code through unknown vectors in the CLR dep...

mvs-activex.txt

Microsoft Visual Studio Msmask32.ocx ActiveX Remote Buffer Overflow Exploit Author: Koshi Original POC: http://www.milw0rm.com/exploits/6244 Not by me My first ActiveX exploit, learned quite a bit playing with this one. Heaps are handy. Loaded File: C:\WINDOWS\system32\MSMASK32.OCX Name: MSMask...

Microsoft Visual Studio (Msmask32.ocx) ActiveX Remote BOF Exploit

No description provided by source. Microsoft Visual Studio Msmask32.ocx ActiveX Remote Buffer Overflow Exploit Author: Koshi Original POC: http://www.milw0rm.com/exploits/6244 Not by me My first ActiveX exploit, learned quite a bit playing with this one. Heaps are handy. Loaded File:...

Microsoft Visual Studio - 'Msmask32.ocx' ActiveX Remote Buffer Overflow

Microsoft Visual Studio Msmask32.ocx ActiveX Remote Buffer Overflow Exploit Author: Koshi Original POC: http://www.milw0rm.com/exploits/6244 Not by me My first ActiveX exploit, learned quite a bit playing with this one. Heaps are handy. Loaded File: C:\WINDOWS\system32\MSMASK32.OCX Name: MSMask...

Microsoft Visual Studio (Msmask32.ocx) ActiveX Remote BOF Exploit

Exploit for unknown platform in category remote exploits ================================================================= Microsoft Visual Studio Msmask32.ocx ActiveX Remote BOF Exploit ================================================================= Microsoft Visual Studio Msmask32.ocx ActiveX...

Microsoft Visual Studio - Msmask32.ocx ActiveX Remote Buffer Overflow

Microsoft Visual Studio - Msmask32.ocx ActiveX Remote Buffer Overflow Microsoft Visual Studio Msmask32.ocx ActiveX Remote Buffer Overflow Exploit Author: Koshi Original POC: http://www.milw0rm.com/exploits/6244 Not by me My first ActiveX exploit, learned quite a bit playing with this one. Heaps a...

Heap overflow

Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in Microsoft Visual Studio 6.0, Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allows remote attackers t...

CVE-2008-3704

Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in Microsoft Visual Studio 6.0, Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allows remote attackers t...

CVE-2008-3704

Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in Microsoft Visual Studio 6.0, Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allows remote attackers t...

CVE-2008-3704

CVE-2008-3704 corresponds to a heap-based buffer overflow in the MaskedEdit ActiveX control (Msmask32.ocx) that occurs when a long Mask parameter is processed. The defect affects Msmask32.ocx version 6.0.81.69 and possibly earlier versions (up to 6.0.84.18), within Microsoft Visual Studio 6.0, Vi...

VulnCheck KEV: CVE-2008-3704

Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in Microsoft Visual Studio 6.0, Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allows remote attackers...

Microsoft Visual Studio (Msmask32.ocx) ActiveX Remote BOF PoC

No description provided by source. var body='OBJECT CLASSID="CLSID:C932BA85-4374-101B-A56C-00AA003668DC" width="10"PARAM NAME="Mask" VALUE="'; var body1='"/OBJECT'; var buf=''; for i=1;i=1945;i++buf=buf+unescape"%0C"; document.writebody+buf+body1;...

Microsoft Visual Studio 'Msmask32.ocx' ActiveX控件缓冲区溢出漏洞

BUGTRAQ ID: 30674 CNCAN ID：CNCAN-2008081404 Microsoft Visual Studio是一款微软公司的开发工具套件系列产品。 Microsoft Visual Studio包含的'Msmask32.ocx' ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 问题存在于'Msmask32.ocx' ActiveX控件对参数的处理，构建恶意WEB页，诱使用户访问，可导致触发缓冲区溢出，可能以应用程序权限执行任意指令。 Microsoft Visual Studio 6.0 - Microsoft Window...

Microsoft Visual Studio - 'Msmask32.ocx' ActiveX Remote Buffer Overflow (PoC)

var body=''; var buf=''; for i=1;i=1945;i++buf=buf+unescape"%0C"; document.writebody+buf+body1; milw0rm.com 2008-08-14...

Microsoft Visual Studio - Msmask32.ocx ActiveX Remote Buffer Overflow (PoC)

Microsoft Visual Studio - Msmask32.ocx ActiveX Remote Buffer Overflow PoC var body=''; var buf=''; for i=1;i=1945;i++buf=buf+unescape"%0C"; document.writebody+buf+body1; milw0rm.com 2008-08-14...

Microsoft Visual Studio (Msmask32.ocx) ActiveX Remote BOF PoC

Exploit for unknown platform in category dos / poc ============================================================= Microsoft Visual Studio Msmask32.ocx ActiveX Remote BOF PoC ============================================================= var body=''; var buf=''; for...

Microsoft Visual Studio 'Msmask32.ocx' ActiveX Control Remote Buffer Overflow Vulnerability

Description The Microsoft Visual Studio ActiveX control, MaskedEdit, is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. An attacker can exploit this issue to execute arbitrary code in the context of an application...

Microsoft Security Bulletin MS08-017 - Critical Vulnerabilities in Microsoft Office Web Components Could Allow Remote Code Execution (933103)

Microsoft Security Bulletin MS08-017 - Critical Vulnerabilities in Microsoft Office Web Components Could Allow Remote Code Execution 933103 Published: March 11, 2008 Version: 1.0 General Information Executive Summary This critical update resolves two privately reported vulnerabilities in Microsof...

Microsoft Visual C++ 8.0 standard library time functions invalid assertion DoS (Problem 3000)

Title: Microsoft Visual C++ 8.0 standard library time functions invalid assertion DoS Problem 3000. Product: Visual Studio 2005 Vendor: Microsoft Vulnerability class: Denial of Service Remote: application dependant, remote vector is possible CVE: CVE-2007-0842 Author: 3APA3A,...

Microsoft Visual Studio PDWizard.ocx ActiveX Control Code Execution (CVE-2007-4891)

Microsoft Visual Studio is a software development product for computer programmers. It centers on an integrated development environment which lets programmers create standalone applications, web sites, web applications, and web services.The vulnerability is due to an error in the Microsoft Visual...