CVE-2008-0392

CVE-2008-0392 : Multiple buffer overflows in Microsoft Visual Basic Enterprise Edition 6.0 SP6 allow user-assisted remote attackers to execute arbitrary code via a .dsr file containing a long (1) ConnectionName or (2) CommandName line. The connected documents confirm the affected product/version ...

Microsoft Visual FoxPro vfp6r.dll ActiveX控件任意代码执行漏洞

BUGTRAQ ID: 27205 Visual FoxPro是微软发布的数据库开发工具。 Visual FoxPro的vfp6r.dll ActiveX控件没有正确地验证对foxcommand或DoCmd方式的输入参数，如果用户受骗访问了恶意站点的话，就可能导致执行任意指令。 Microsoft Visual FoxPro 6.0 Microsoft --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.microsoft.com/technet/security/ pre codespan...

MS Visual Basic Enterprise Ed. 6 SP6 .dsr File Handling BOF Exploit

No description provided by source. usage: exploit.py FileName import sys print "------------------------------------------------------------------------" print ' Microsoft Visual InterDev 6.0 SP6 ".sln" files Local Buffer Overflow' print " author: shinnai" print " mail: shinnaiatautisticidotorg"...

msvis-dsr.txt

usage: exploit.py import time print "---------------------------------------------------------------------------" print ' MS Visual Basic Enterprise Ed. 6 SP6 ".dsr" File Handling Buffer Overflow\n' print " author: shinnai" print " mail: shinnaiatautisticidotorg" print " site:...

DEBIAN-CVE-2007-6429

Multiple integer overflows in X.Org Xserver before 1.4.1 allow context-dependent attackers to execute arbitrary code via 1 a GetVisualInfo request containing a 32-bit value that is improperly used to calculate an amount of memory for allocation by the EVI extension, or 2 a request containing valu...

MS Visual Basic Enterprise Ed. 6 SP6 .dsr File Handling BOF Exploit

Exploit for unknown platform in category local exploits =================================================================== MS Visual Basic Enterprise Ed. 6 SP6 .dsr File Handling BOF Exploit =================================================================== usage: exploit.py import time print...

Microsoft Visual Basic Enterprise 6 SP6 - .dsr File Handling Buffer Overflow

Microsoft Visual Basic Enterprise 6 SP6 - .dsr File Handling Buffer Overflow usage: exploit.py import time print "---------------------------------------------------------------------------" print ' MS Visual Basic Enterprise Ed. 6 SP6 ".dsr" File Handling Buffer Overflow\n' print " author:...

Microsoft Visual Basic Enterprise 6 SP6 - '.dsr' File Handling Buffer Overflow

usage: exploit.py import time print "---------------------------------------------------------------------------" print ' MS Visual Basic Enterprise Ed. 6 SP6 ".dsr" File Handling Buffer Overflow\n' print " author: shinnai" print " mail: shinnaiatautisticidotorg" print " site:...

xfree86: integer overflow in EVI extension

Multiple integer overflows in X.Org Xserver before 1.4.1 allow context-dependent attackers to execute arbitrary code via 1 a GetVisualInfo request containing a 32-bit value that is improperly used to calculate an amount of memory for allocation by the EVI extension, or 2 a request containing valu...

Microsoft Visual InterDev 6.0 (SP6) .sln File Local Buffer Overflow Exploit

No description provided by source. usage: exploit.py FileName import sys print "------------------------------------------------------------------------" print ' Microsoft Visual InterDev 6.0 SP6 ".sln" files Local Buffer Overflow' print " author: shinnai" print " mail: shinnaiatautisticidotorg"...

Buffer overflow

Buffer overflow in Microsoft Visual InterDev 6.0 SP6 allows user-assisted attackers to execute arbitrary code via a Studio Solution .SLN file with a long Project line...

CVE-2008-0250

Buffer overflow in Microsoft Visual InterDev 6.0 SP6 allows user-assisted attackers to execute arbitrary code via a Studio Solution .SLN file with a long Project line...

CVE-2008-0250

CVE-2008-0250: A buffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted code execution via a Studio Solution (.SLN) file that contains a long Project line. The connected record confirms the affected product/version and the input vector (long Project line in SLN) as the root c...

Design/Logic Flaw

An ActiveX control for Microsoft Visual FoxPro vfp6r.dll 6.0.8862.0 allows remote attackers to execute arbitrary commands by invoking the DoCmd method...

CVE-2008-0236

An ActiveX control for Microsoft Visual FoxPro vfp6r.dll 6.0.8862.0 allows remote attackers to execute arbitrary commands by invoking the DoCmd method...

CVE-2008-0236

CVE-2008-0236 concerns an ActiveX control for Microsoft Visual FoxPro (vfp6r.dll 6.0.8862.0). The DoCmd method in the Visual FoxPro vfp6r.dll ActiveX control can be exploited to trigger remote command execution by a user visiting a crafted webpage, with the attack operating in the user’s security...

CVE-2008-0236

An ActiveX control for Microsoft Visual FoxPro vfp6r.dll 6.0.8862.0 allows remote attackers to execute arbitrary commands by invoking the DoCmd method...

Microsoft Visual FoxPro 'vfp6r.dll' ActiveX控件远程命令执行漏洞

Microsoft Visual FoxPro是一款数据库管理和应用软件开发系统。 Microsoft Visual FoxPro 'vfp6r.dll' ActiveX控件存在设计问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意命令。 问题是vfp6r.dll包含的控件不安全使用"DoCmd"函数，直接传递运行应用程序作为参数，可导致应用程序权限执行。 Microsoft Visual FoxPro 6.0 + Microsoft Visual Studio 6.0 厂商解决方案 目前没有解决方案提供： http://msdn.microsoft.com/vfoxpro/...

mssln-overflow.txt

usage: exploit.py FileName import sys print "------------------------------------------------------------------------" print ' Microsoft Visual InterDev 6.0 SP6 ".sln" files Local Buffer Overflow' print " author: shinnai" print " mail: shinnaiatautisticidotorg" print " site:...

Microsoft VFP_OLE_Server ActiveX控件远程命令执行漏洞

Microsoft Visual FoxPro是一款数据库管理和应用软件开发系统。 Microsoft VFPOLEServer ActiveX控件存在设计问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意命令。 问题是Microsoft VFPOLEServer控件不安全使用"foxcommand"函数，直接传递运行应用程序作为参数，可导致应用程序权限执行。 Microsoft VFPOLEServer ActiveX Control 0 + Microsoft Internet Explorer 6.0 + Microsoft Internet Explorer 5.5 SP2 ...