CVE-2008-4548

Stack-based buffer overflow in the PTZCamPanelCtrl ActiveX control CamPanel.dll in RTS Sentry 2.1.0.2 allows remote attackers to execute arbitrary code via a long second argument to the ConnectServer method...

CVE-2008-4549

The ImageShack Toolbar ActiveX control ImageShackToolbar.dll in ImageShack Toolbar 4.5.7, possibly including 4.5.7.69, allows remote attackers to force the upload of arbitrary image files to the ImageShack site via a file: URI argument to the BuildSlideShow method...

CVE-2008-4549

The ImageShack Toolbar ActiveX control ImageShackToolbar.dll in ImageShack Toolbar 4.5.7, possibly including 4.5.7.69, allows remote attackers to force the upload of arbitrary image files to the ImageShack site via a file: URI argument to the BuildSlideShow method...

Design/Logic Flaw

The ImageShack Toolbar ActiveX control ImageShackToolbar.dll in ImageShack Toolbar 4.5.7, possibly including 4.5.7.69, allows remote attackers to force the upload of arbitrary image files to the ImageShack site via a file: URI argument to the BuildSlideShow method...

Heap overflow

Heap-based buffer overflow in the PdvrAtl.PdvrOcx.1 ActiveX control pdvratl.dll in DVRHOST Web CMS OCX 1.0.1.25 allows remote attackers to execute arbitrary code via a long second argument to the TimeSpanFormat method...

Stack overflow

Stack-based buffer overflow in the PTZCamPanelCtrl ActiveX control CamPanel.dll in RTS Sentry 2.1.0.2 allows remote attackers to execute arbitrary code via a long second argument to the ConnectServer method...

CVE-2008-4548

CVE-2008-4548 affects RTS Sentry 2.1.0.2 via the PTZCamPanelCtrl ActiveX (CamPanel.dll). The root cause is a stack-based buffer overflow triggered by a long second argument to ConnectServer, enabling remote code execution. Public references (NVD, CVE lists, exploit-db) confirm the vulnerability a...

CVE-2008-4549

The ImageShack Toolbar ActiveX control ImageShackToolbar.dll in ImageShack Toolbar 4.5.7, possibly including 4.5.7.69, allows remote attackers to force the upload of arbitrary image files to the ImageShack site via a file: URI argument to the BuildSlideShow method...

CVE-2008-4549

The CVE-2008-4549 entry concerns the ImageShack Toolbar ActiveX control (ImageShackToolbar.dll) in ImageShack Toolbar 4.5.7 (possibly including 4.5.7.69). The vulnerability is that the BuildSlideShow method accepts a file: URI argument, allowing a remote attacker to force the upload of arbitrary ...

CVE-2008-4548

Stack-based buffer overflow in the PTZCamPanelCtrl ActiveX control CamPanel.dll in RTS Sentry 2.1.0.2 allows remote attackers to execute arbitrary code via a long second argument to the ConnectServer method...

Microsoft SQL Server 2000 Client Components ActiveX Control Buffer Overflow (CVE-2008-4110)

Microsoft SQL Server is a relational database management system RDBMS. A buffer overflow vulnerability has been reported in Microsoft SQL Server. The vulnerability is due to a boundary error in the Microsoft SQL Server 2000 Client Components ActiveX Control sqlvdir.dll when handling parameters...

CVE-2008-4385: Improper Control of Generation of Code

Husdawg, LLC Systems Requirements Lab 3, as used by Instant Expert Analysis, allows remote attackers to force the download and execution of arbitrary programs via by specifiying a malicious website argument to the Init method in 1 a certain ActiveX control sysreqlab2.cab, sysreqlab.dll,...

Husdawg, LLC Systems Requirements Lab ActiveX control and Java applet vulnerable to arbitrary code download and execution

Overview The Husdawg, LLC. System Requirements Lab ActiveX control and Java applet allow an unauthenticated remote attacker to download and execute arbitrary code. Description Husdawg, LLC. provides an ActiveX control and signed Java Applet that are used for benchmarking the capabilities of a PC...

CVE-2008-4493

Microsoft PicturePusher ActiveX control PipPPush.DLL 7.00.0709, as used in Microsoft Digital Image 2006 Starter Edition, allows remote attackers to force the upload of arbitrary files by using the AddString and Post methods and a modified PostURL to construct an HTTP POST request. NOTE: this issu...

Design/Logic Flaw

Microsoft PicturePusher ActiveX control PipPPush.DLL 7.00.0709, as used in Microsoft Digital Image 2006 Starter Edition, allows remote attackers to force the upload of arbitrary files by using the AddString and Post methods and a modified PostURL to construct an HTTP POST request. NOTE: this issu...

CVE-2008-4493

The CVE describes a vulnerability in the Microsoft PicturePusher ActiveX control (PipPPush.DLL 7.00.0709) used by Microsoft Digital Image 2006 Starter Edition. The flaw arises from the AddString and Post methods, with a modified PostURL that allows an attacker to construct an HTTP POST request to...

CVE-2008-4493

Microsoft PicturePusher ActiveX control PipPPush.DLL 7.00.0709, as used in Microsoft Digital Image 2006 Starter Edition, allows remote attackers to force the upload of arbitrary files by using the AddString and Post methods and a modified PostURL to construct an HTTP POST request. NOTE: this issu...

CVE-2008-4493: Improper Input Validation

Microsoft PicturePusher ActiveX control PipPPush.DLL 7.00.0709, as used in Microsoft Digital Image 2006 Starter Edition, allows remote attackers to force the upload of arbitrary files by using the AddString and Post methods and a modified PostURL to construct an HTTP POST request. NOTE: this issu...

CVE-2008-4384

Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control LPControl.dll, as acquired by Roxio and iseemedia, allow remote attackers to execute arbitrary code via the 1 url, 2 toolbar, and 3 enableZoomPastMax methods...

CVE-2008-4471

Directory traversal vulnerability in the CExpressViewerControl class in the DWF Viewer ActiveX control AdView.dll 9.0.0.96, as used in Revit Architecture 2009 SP2 and Autodesk Design Review 2009, allows remote attackers to overwrite arbitrary files via ".." sequences in the argument to the SaveAS...