what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

OSVDB: OSVDB-74446

Borland Silk Central 12.1 TeeChart Pro Code Execution

Posted Apr 26, 2013

Authored by rgod | Site retrogod.altervista.org

Borland Silk Central version 12.1 TeeChart Pro active-x control suffers from an AddSeries remote code execution vulnerability.

tags | advisory, remote, code execution, activex

SHA-256 | 3487efa60e709db37782fa39c6eb16e87b57eb70ce5b1c0251f9a7ceec7a159a

Download | Favorite | View

TeeChart Professional ActiveX Control 2010.0.0.3 Trusted Integer Dereference

Posted Aug 13, 2011

Authored by mr_me, sinn3r | Site metasploit.com

This Metasploit module exploits a integer overflow in TeeChart Pro ActiveX control. When sending an overly large/negative integer value to the AddSeries() property of TeeChart2010.ocx, the code will perform an arithmetic operation that wraps the value and is later directly trusted and called upon. This Metasploit module has been designed to bypass DEP only under IE8 with Java support.

tags | exploit, java, overflow, activex

advisories | OSVDB-74446

SHA-256 | 9ac4cb3d8e02245f69a92b4f78d9802c882058e8f202f2a60824a2aa9d040b60

Download | Favorite | View