CVE-2008-4300

A certain ActiveX control in adsiis.dll in Microsoft Internet Information Services IIS allows remote attackers to cause a denial of service browser crash via a long string in the second argument to the GetObject method. NOTE: this issue was disclosed by an unreliable researcher, so it might be...

Design/Logic Flaw

A certain ActiveX control in iisext.dll in Microsoft Internet Information Services IIS allows remote attackers to set a password via a string argument to the SetPassword method. NOTE: this issue could not be reproduced by a reliable third party. In addition, the original researcher is unreliable...

Design/Logic Flaw

A certain ActiveX control in adsiis.dll in Microsoft Internet Information Services IIS allows remote attackers to cause a denial of service browser crash via a long string in the second argument to the GetObject method. NOTE: this issue was disclosed by an unreliable researcher, so it might be...

CVE-2008-4301

CVE-2008-4301 concerns a vulnerability in the ActiveX control in iisext.dll used by Microsoft Internet Information Services (IIS). The affected component is an ActiveX control; the reported issue allows remote attackers to set a password via a string argument to the SetPassword method. The core p...

CVE-2008-4300

A certain ActiveX control in adsiis.dll in Microsoft Internet Information Services IIS allows remote attackers to cause a denial of service browser crash via a long string in the second argument to the GetObject method. NOTE: this issue was disclosed by an unreliable researcher, so it might be...

CVE-2008-4300

CVE-2008-4300 affects a specific ActiveX control in adsiis.dll used by Microsoft Internet Information Services (IIS). The vulnerability allows remote attackers to cause a denial of service (browser crash) by sending a long string as the second argument to the GetObject method. The description not...

PT-2008-5562 · Microsoft · Internet Information Services

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Information Services IIS affected versions not specified Description: A certain ActiveX control in iisext.dll allows remote attackers to set a password via a string argument to the SetPassword method. However, this issue...

CVE-2008-4299: Undefined Security Weakness

A certain ActiveX control in the Microsoft Internet Authentication Service IAS Helper COM Component in iashlpr.dll allows remote attackers to cause a denial of service browser crash via a large integer value in the first argument to the PutProperty method. NOTE: this issue was disclosed by an...

CVE-2008-4300: Undefined Security Weakness

A certain ActiveX control in adsiis.dll in Microsoft Internet Information Services IIS allows remote attackers to cause a denial of service browser crash via a long string in the second argument to the GetObject method. NOTE: this issue was disclosed by an unreliable researcher, so it might be...

Novell ZENworks Desktop Management 6.5 - ActiveX Control 'CanUninstall()' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/31435/info Novell ZENworks Desktop Management ActiveX control is prone to a buffer-overflow vulnerability because the application fails to adequately check boundaries on user-supplied input. An attacker can exploit this issue to execute arbitrary code in...

NuMedia Soft DVD Burning SDK Activex Control Remote Code Execution Vulnerability

The host is installed CDBurnerXP, which is prone to ActiveX control based remote code execution vulnerability. OpenVAS Vulnerability Test $Id: secpodnmsdvdburningsdkactvxvuln900132.nasl 7332 2017-09-29 14:16:56Z cfischer $ Description: NuMedia Soft DVD Burning SDK Activex Control Remote Code...

NuMedia Soft DVD Burning SDK Activex Control RCE Vulnerability

CDBurnerXP is prone to an ActiveX control based remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

burnaware-exec.txt

----------------------------------------------------------------------------- BurnAware NMSDVDXU ActiveX Control Remote Arbitrary File Creation/Execution url: http://www.burnaware.com File: NMSDVDXU.dll compatUI.RunApplication 1, "calc.exe", 1...

CVE-2008-4132

Stack-based buffer overflow in the VSFlexGrid.VSFlexGridL ActiveX control in ComponentOne VSFlexGrid 7.0.1.151 and 8.0.20072.239 allows remote attackers to execute arbitrary code via a long first argument to the Archive method. NOTE: the provenance of this information is unknown; the details are...

Stack overflow

Stack-based buffer overflow in the VSFlexGrid.VSFlexGridL ActiveX control in ComponentOne VSFlexGrid 7.0.1.151 and 8.0.20072.239 allows remote attackers to execute arbitrary code via a long first argument to the Archive method. NOTE: the provenance of this information is unknown; the details are...

CVE-2008-4132

Stack-based buffer overflow in the VSFlexGrid.VSFlexGridL ActiveX control in ComponentOne VSFlexGrid 7.0.1.151 and 8.0.20072.239 allows remote attackers to execute arbitrary code via a long first argument to the Archive method. NOTE: the provenance of this information is unknown; the details are...

Memory corruption

The InstallShield Update Service Agent ActiveX control in isusweb.dll allows remote attackers to cause a denial of service memory corruption and browser crash and possibly execute arbitrary code via a call to ExecuteRemote with a URL that results in a 404 error response...

CVE-2008-2470

The InstallShield Update Service Agent ActiveX control in isusweb.dll allows remote attackers to cause a denial of service memory corruption and browser crash and possibly execute arbitrary code via a call to ExecuteRemote with a URL that results in a 404 error response...

InstallShield Update Service Agent ActiveX control memory corruption

Overview The InstallShield Update Service ActiveX control contains a memory corruption vulnerability that can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The InstallShield Update Service contains an ActiveX control called Update Service...

CVE-2008-4110

Buffer overflow in the SQLVDIRLib.SQLVDirControl ActiveX control in Tools\Binn\sqlvdir.dll in Microsoft SQL Server 2000 aka SQL Server 8.0 allows remote attackers to cause a denial of service browser crash or possibly execute arbitrary code via a long URL in the second argument to the Connect...