Microsoft Security Bulletin MS09-046 - Critical Vulnerability in DHTML Editing Component ActiveX Control Could Allow Remote Code Execution (956844)

Microsoft Security Bulletin MS09-046 - Critical Vulnerability in DHTML Editing Component ActiveX Control Could Allow Remote Code Execution 956844 Published: September 08, 2009 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in th...

Symantec Altiris Deployment Solution ActiveX Control Arbitrary File Download and Execute

This module allows remote attackers to install and execute arbitrary files on a users file system via AeXNSPkgDLLib.dll 6.0.0.1418. This module was tested against Symantec Altiris Deployment Solution 6.9 sp3. Module Options msf use...

Design/Logic Flaw

The DHTML Editing Component ActiveX control in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly format HTML markup, which allows remote attackers to execute arbitrary code via a crafted web site that triggers "system state" corruption, aka "DHTML Editing Component...

Design/Logic Flaw

Insecure method vulnerability in the UUSee UUUpgrade ActiveX control UUUpgrade.ocx 3.0.2.12 allows remote attackers to force the download and overwrite of arbitrary files via crafted arguments to the Update method, as exploited in the wild in June 2009...

CVE-2008-7168

Insecure method vulnerability in the UUSee UUUpgrade ActiveX control UUUpgrade.ocx 3.0.2.12 allows remote attackers to force the download and overwrite of arbitrary files via crafted arguments to the Update method, as exploited in the wild in June 2009...

MS09-046: Vulnerability in DHTML Editing Component ActiveX Control Could Allow Remote Code Execution (956844)

The remote host is missing Security Update 956844. The DHTML Editing Component ActiveX Control on the remote host has a remote code execution vulnerability. A remote attacker could exploit this by tricking a user into viewing a specially crafted web page, resulting in the execution of arbitrary...

CVE-2009-2519: Improper Control of Generation of Code

The DHTML Editing Component ActiveX control in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly format HTML markup, which allows remote attackers to execute arbitrary code via a crafted web site that triggers "system state" corruption, aka "DHTML Editing Component...

Microsoft DHTML Editing Component ActiveX Control Remote Code Execution Vulnerability

Description The Microsoft DHTML Editing Component ActiveX control is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting to view a malicious webpage. Successful exploits will allow the attacker to execute arbitrary code within the context...

Microsoft DHTML Editing Component ActiveX Control Code Execution (MS09-046; CVE-2009-2519)

The DHTML Editing Component ActiveX control provides an HTML editor that can be used to support dynamic Web site HTML editing in software. A remote code execution vulnerability has been reported in the DHTML Editing Component ActiveX Control. The vulnerability is due to a memory corruption error ...

VulnCheck KEV: CVE-2008-7168

Insecure method vulnerability in the UUSee UUUpgrade ActiveX control UUUpgrade.ocx 3.0.2.12 allows remote attackers to force the download and overwrite of arbitrary files via crafted arguments to the Update method, as exploited in the wild in June 2009...

ICQ Toolbar 'toolbaru.dll' ActiveX Control Remote DOS Vulnerability

This host has ICQ Toolbar installed and is prone to Remote Denial of Service Vulnerability OpenVAS Vulnerability Test $Id: gbicqtoolbaractvxctrldosvuln.nasl 7573 2017-10-26 09:18:50Z cfischer $ ICQ Toolbar 'toolbaru.dll' ActiveX Control Remote DOS Vulnerability Authors: Antu Sanadi Copyright:...

PPstream 2.6.86.8900 PPSMediaList ActiveX Remote BOF PoC (1)

Exploit for unknown platform in category dos / poc ============================================================ PPstream 2.6.86.8900 PPSMediaList ActiveX Remote BOF PoC 1 ============================================================ PARAM NAME="Keyword"...

PPstream 2.6.86.8900 PPSMediaList ActiveX Remote BOF PoC (2)

Exploit for unknown platform in category dos / poc ============================================================ PPstream 2.6.86.8900 PPSMediaList ActiveX Remote BOF PoC 2 ============================================================ PARAM NAME="Keyword"...

PPstream 2.6.86.8900 PPSMediaList ActiveX Remote BOF PoC (2)

No description provided by source. !-- PPStream is the most huge p2p media player in the world. There are two hundred million ppstream users in the world. The vulnerability is exploitable,but I have no time to make it,you could visit my blog for detail.^@^ welcome to http://0dayexpose.blogspot.co...

PPstream 2.6.86.8900 - PPSMediaList ActiveX Remote Buffer Overflow (PoC) (1)

PPstream 2.6.86.8900 - PPSMediaList ActiveX Remote Buffer Overflow PoC 1 PARAM NAME="Keyword"...

Code injection

A certain ActiveX control in lnresobject.dll 7.1.1.119 in the Research In Motion RIM Lotus Notes connector for BlackBerry Desktop Manager 5.0.0.11 allows remote attackers to cause a denial of service Internet Explorer crash by referencing the control's CLSID in the classid attribute of an OBJECT...

CVE-2009-3038

A certain ActiveX control in lnresobject.dll 7.1.1.119 in the Research In Motion RIM Lotus Notes connector for BlackBerry Desktop Manager 5.0.0.11 allows remote attackers to cause a denial of service Internet Explorer crash by referencing the control's CLSID in the classid attribute of an OBJECT...

CVE-2009-3038

The CVE-2009-3038 issue affects the ActiveX control in lnresobject.dll 7.1.1.119 used by the Research In Motion (RIM) Lotus Notes connector for BlackBerry Desktop Manager 5.0.0.11. The vulnerability allows remote attackers to cause a denial of service (Internet Explorer crash) by referencing the ...

CVE-2009-3038

A certain ActiveX control in lnresobject.dll 7.1.1.119 in the Research In Motion RIM Lotus Notes connector for BlackBerry Desktop Manager 5.0.0.11 allows remote attackers to cause a denial of service Internet Explorer crash by referencing the control's CLSID in the classid attribute of an OBJECT...

SmartVMD 1.3 - ActiveX Control VideoMovementDetection.dll Remote Buffer Overflow

SmartVMD 1.3 - ActiveX Control VideoMovementDetection.dll Remote Buffer Overflow source: https://www.securityfocus.com/bid/36217/info SmartVMD ActiveX control is prone to a buffer-overflow vulnerability because the application fails to adequately check boundaries on user-supplied input. An attack...