bugtraq - QvodPlayer ColorFilter Codec ActiveX Remote Exec

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Message-Id: <201001172028.o0HKSOJr022989@www3.securityfocus.com>
Date: Sun, 17 Jan 2010 13:28:24 -0700
From: info@...uritylab.ir
To: bugtraq@...urityfocus.com
Subject: QvodPlayer ColorFilter Codec ActiveX Remote Exec

###################################################################
# QvodPlayer ColorFilter Codec ActiveX Remote Exec
# Download : http://www.qvod.com
###################################################################
# Vulnerability:
# <object id=TestObj classid="CLSID:{432F118C-DB79-4561-9799-CC95EA78208B}" style="width:100;height:350"></object>
###################################################################
# Tested on XpSP2 IE6/7
###################################################################
# Discoverd By: Securitylab.ir
# Website: http://securitylab.ir
# Contacts: admin[at]securitylab.ir & info@...uritylab[dot]ir
###################################################################