Ask.com Toolbar AskJeevesToolBar.SettingsPlugin.1 ActiveX (askBar.dll) ShortFormat Property Arbitrary Code Execution

The AskJeevesToolBar.SettingsPlugin.1 ActiveX control, part of the Ask Toolbar, is installed on the remote host. It reportedly contains a buffer overflow that can be triggered with a long value for the 'ShortFormat' property. If a remote attacker can trick a user on the affected host into visitin...

Memory corruption

Unspecified vulnerability in an ActiveX control dxtmsft.dll in Microsoft Internet Explorer 5.01, 6 SP1 and SP2, and 7 allows remote attackers to execute arbitrary code via a crafted image, aka "Argument Handling Memory Corruption Vulnerability."...

CVE-2008-0078

CVE-2008-0078 describes a remote-code-execution vulnerability in Internet Explorer caused by an Argument Handling Memory Corruption in the ActiveX control dxtmsft.dll (IE 5.01, 6 SP1/SP2, 7). A crafted image on a malicious webpage could allow an attacker to execute arbitrary code with the privile...

Microsoft Visual FoxPro ActiveX Control Buffer Overflow (MS08-010; CVE-2007-4790)

Microsoft Visual FoxPro is an application development tool for building database applications. This vulnerability is due to a memory corruption error in certain ActiveX objects of Microsoft Visual FoxPro when it is used in Microsoft Internet Explorer. A remote attacker could exploit this issue by...

Microsoft Security Bulletin MS08-010 - Critical Cumulative Security Update for Internet Explorer (944533)

Microsoft Security Bulletin MS08-010 - Critical Cumulative Security Update for Internet Explorer 944533 Published: February 12, 2008 Version: 1.0 General Information Executive Summary This critical security update resolves three privately reported and one publicly reported vulnerabilities. The mo...

CVE-2008-0078: Improper Control of Generation of Code

Unspecified vulnerability in an ActiveX control dxtmsft.dll in Microsoft Internet Explorer 5.01, 6 SP1 and SP2, and 7 allows remote attackers to execute arbitrary code via a crafted image, aka "Argument Handling Memory Corruption Vulnerability."...

MySpace Uploader ActiveX Control < 1.0.0.6 Action Property Buffer Overflow

The remote host contains a version of the MySpace Uploader ActiveX control MySpace.Uploader.4.1 that reportedly is affected by a buffer overflow that can be triggered by assigning a string longer than 260 characters to certain properties, such as 'Action', 'ExtractIptc', and 'ExtractExif'. If a...

Yahoo Music Jukebox MediaGrid ActiveX buffer overflow

Added: 02/11/2008 CVE: CVE-2008-0625 BID: 27578 OSVDB: 41051 Background Yahoo! Music Jukebox is a music player capable of playing, ripping, and burning MP3s and CDs, creating and sharing playlists, streaming radio stations, and purchasing music. Problem A buffer overflow vulnerability in the...

Stack overflow

Stack-based buffer overflow in Aurigma Image Uploader ActiveX control ImageUploader4.ocx 4.5.70 and earlier, as used in MySpace MySpaceUploader.ocx 1.0.0.4, allows remote attackers to execute arbitrary code via a long Action property...

CVE-2008-0659

Stack-based buffer overflow in Aurigma Image Uploader ActiveX control ImageUploader4.ocx 4.5.70 and earlier, as used in MySpace MySpaceUploader.ocx 1.0.0.4, allows remote attackers to execute arbitrary code via a long Action property...

CVE-2008-0659

Stack-based buffer overflow in Aurigma Image Uploader ActiveX control ImageUploader4.ocx 4.5.70 and earlier, as used in MySpace MySpaceUploader.ocx 1.0.0.4, allows remote attackers to execute arbitrary code via a long Action property...

CVE-2008-0660

The CVE-2008-0660 vulnerability affects the Aurigma Image Uploader ActiveX control (ImageUploader4.ocx: 4.6.17.0, 4.5.70.0, 4.5.126.0 and ImageUploader5: 5.0.10.0) as used by Facebook PhotoUploader 4.5.57.0. It is caused by stack-based buffer overflows in the ExtractExif and ExtractIptc propertie...

Design/Logic Flaw

Unspecified vulnerability in a certain ActiveX control for HP Virtual Rooms HPVR 6 and earlier allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2008-0213

Unspecified vulnerability in a certain ActiveX control for HP Virtual Rooms HPVR 6 and earlier allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2008-0213

Unspecified vulnerability in a certain ActiveX control for HP Virtual Rooms HPVR 6 and earlier allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2008-0213

HP Virtual Rooms (HPVR) versions 6 and earlier are affected by CVE-2008-0213 due to an unspecified vulnerability in an ActiveX control that could allow remote code execution. The HP Security Bulletin HPSBGN02310 rev.1 (HPVR on Windows) states the vulnerability could be exploited to achieve remote...

Stack overflow

Multiple stack-based buffer overflows in the HanGamePluginCn18.HanGamePluginCn18.1 ActiveX control in HanGamePluginCn18.dll in Ourgame GLWorld 2.6.1.29 aka Lianzong Game Platform allow remote attackers to execute arbitrary code via long arguments to the 1 hgsstartGame and 2 hgsstartNotify methods...

CVE-2008-0647

Multiple stack-based buffer overflows in the HanGamePluginCn18.HanGamePluginCn18.1 ActiveX control in HanGamePluginCn18.dll in Ourgame GLWorld 2.6.1.29 aka Lianzong Game Platform allow remote attackers to execute arbitrary code via long arguments to the 1 hgsstartGame and 2 hgsstartNotify methods...

CVE-2008-0647

The Ourgame GLWorld 2.6.1.29 (also known as Lianzong Game Platform) is vulnerable to multiple stack-based buffer overflows within the HanGamePluginCn18.HanGamePluginCn18.1 ActiveX control located in HanGamePluginCn18.dll . These vulnerabilities occur when the software processes long arguments sen...

CVE-2008-0647

Multiple stack-based buffer overflows in the HanGamePluginCn18.HanGamePluginCn18.1 ActiveX control in HanGamePluginCn18.dll in Ourgame GLWorld 2.6.1.29 aka Lianzong Game Platform allow remote attackers to execute arbitrary code via long arguments to the 1 hgsstartGame and 2 hgsstartNotify methods...