CVE-2008-4800

The DebugDiag ActiveX control in CrashHangExt.dll, possibly 1.0, in Microsoft Debug Diagnostic Tool allows remote attackers to cause a denial of service NULL pointer dereference and Internet Explorer 6.0 crash via a large negative integer argument to the GetEntryPointForThread method. NOTE: this...

Update Protection against VMware COM API ActiveX Control Buffer Overflow

A buffer overflow vulnerability was reported in VMware COM API. VMware API is developed by VMware Inc. to provide language-neutral interfaces to the VMware Virtual Infrastructure Management VIM Framework. The vulnerability is associated with a vulnerable ActiveX control. A remote attacker could...

Update Protection against CA Multiple Products ActiveX Control Buffer Overflow Vulnerability

A vulnerability was reported in multiple Computer Associates CA products. These products are all intended for enhancing corporate and client security. The vulnerability is due to insufficient boundary checking in the parameters passed to the affected ActiveX control installed by the products list...

Microsoft DebugDiag 1.0 - CrashHangExt.dll ActiveX Control Remote Denial of Service

Microsoft DebugDiag 1.0 - CrashHangExt.dll ActiveX Control Remote Denial of Service source: https://www.securityfocus.com/bid/31996/info Microsoft DebugDiag 'CrashHangExt.dll' ActiveX control is prone to a denial-of-service vulnerability because of a NULL-pointer dereference error. A successful...

DjVu ActiveX Control 3.0 ImageURL Property Overflow Exploit

Exploit for unknown platform in category remote exploits =========================================================== DjVu ActiveX Control 3.0 ImageURL Property Overflow Exploit =========================================================== Snoop Security Research committee -- input language=JavaScri...

CVE-2008-4800: Undefined Security Weakness

The DebugDiag ActiveX control in CrashHangExt.dll, possibly 1.0, in Microsoft Debug Diagnostic Tool allows remote attackers to cause a denial of service NULL pointer dereference and Internet Explorer 6.0 crash via a large negative integer argument to the GetEntryPointForThread method. NOTE: this...

DjVu - ActiveX Control 3.0 ImageURL Property Overflow

Snoop Security Research committee -- // clac.exe var shellcode = unescape "%uE860%u0000%u0000%u815D%u06ED%u0000%u8A00%u1285%u0001%u0800" + "%u75C0%uFE0F%u1285%u0001%uE800%u001A%u0000%uC009%u10...

Microsoft DebugDiag 1.0 - 'CrashHangExt.dll' ActiveX Control Remote Denial of Service

source: https://www.securityfocus.com/bid/31996/info Microsoft DebugDiag 'CrashHangExt.dll' ActiveX control is prone to a denial-of-service vulnerability because of a NULL-pointer dereference error. A successful attack allows a remote attacker to crash the application using the ActiveX control...

CVE-2008-4771

Stack-based buffer overflow in VATDecoder.VatCtrl.1 ActiveX control in 1 4xem VatCtrl Class VATDecoder.dll 1.0.0.27 and 1.0.0.51, 2 D-Link MPEG4 SHM Audio Control VAPGDecoder.dll 1.7.0.5, 3 Vivotek RTSP MPEG4 SP Control RtspVapgDecoderNew.dll 2.0.0.39, and possibly other products, allows remote...

Stack overflow

Stack-based buffer overflow in VATDecoder.VatCtrl.1 ActiveX control in 1 4xem VatCtrl Class VATDecoder.dll 1.0.0.27 and 1.0.0.51, 2 D-Link MPEG4 SHM Audio Control VAPGDecoder.dll 1.7.0.5, 3 Vivotek RTSP MPEG4 SP Control RtspVapgDecoderNew.dll 2.0.0.39, and possibly other products, allows remote...

CVE-2008-4771

CVE-2008-4771 describes a stack-based buffer overflow in the VATDecoder.VatCtrl.1 ActiveX control across multiple products (4xem VatCtrl Class VATDecoder.dll 1.0.0.27/1.0.0.51; D-Link MPEG4 SHM Audio Control VAPGDecoder.dll 1.7.0.5; Vivotek RTSP MPEG4 SP Control RtspVapgDecoderNew.dll 2.0.0.39), ...

CVE-2008-4771

Stack-based buffer overflow in VATDecoder.VatCtrl.1 ActiveX control in 1 4xem VatCtrl Class VATDecoder.dll 1.0.0.27 and 1.0.0.51, 2 D-Link MPEG4 SHM Audio Control VAPGDecoder.dll 1.7.0.5, 3 Vivotek RTSP MPEG4 SP Control RtspVapgDecoderNew.dll 2.0.0.39, and possibly other products, allows remote...

CVE-2008-4750

Stack-based buffer overflow in the VImpX.VImpAX ActiveX control VImpX.ocx 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allows remote attackers to execute arbitrary code via a long LogFile property...

Stack overflow

Stack-based buffer overflow in the VImpX.VImpAX ActiveX control VImpX.ocx 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allows remote attackers to execute arbitrary code via a long LogFile property...

Design/Logic Flaw

Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control VImpX.ocx 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allow remote attackers to overwrite arbitrary files via 1 the LogFile property and ClearLogFile method, and 2 the SaveToFile method...

CVE-2008-4749

Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control VImpX.ocx 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allow remote attackers to overwrite arbitrary files via 1 the LogFile property and ClearLogFile method, and 2 the SaveToFile method...

CVE-2008-4749

The CVE-2008-4749 issue affects DB Software Laboratory’s VImpX.VImpAX ActiveX control (VImpX.ocx) version 4.8.8.0 (possibly 4.7.7). The vulnerability arises from insecure methods that let remote attackers overwrite arbitrary files via the LogFile property and ClearLogFile method, and via the Save...

Stack overflow

Stack-based buffer overflow in Hummingbird.XWebHostCtrl.1 ActiveX control hclxweb.dll in Hummingbird Xweb ActiveX Control 13.0 and earlier allows remote attackers to execute arbitrary code via a long PlainTextPassword property. NOTE: code execution might not be possible in 13.0...

CVE-2008-4728

Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 DeployRun.dll ActiveX control 10.0.0.44 in Hummingbird Deployment Wizard 2008 allow remote attackers to execute arbitrary programs via the 1 Run and 2 PerformUpdateAsync methods, and 3 modify arbitrary registry values via...

CVE-2008-4729

Stack-based buffer overflow in Hummingbird.XWebHostCtrl.1 ActiveX control hclxweb.dll in Hummingbird Xweb ActiveX Control 13.0 and earlier allows remote attackers to execute arbitrary code via a long PlainTextPassword property. NOTE: code execution might not be possible in 13.0...