CVE-2008-0248: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in an ActiveX control in ccpm0237.dll for StreamAudio ChainCast ProxyManager allows remote attackers to execute arbitrary code via a long URL argument to the InternalTuneIn method...

Design/Logic Flaw

The Microsoft VFPOLEServer ActiveX control allows remote attackers to execute arbitrary code by invoking the foxcommand method...

Design/Logic Flaw

The Microsoft Rich Textbox ActiveX Control RICHTX32.OCX 6.1.97.82 allows remote attackers to execute arbitrary commands by invoking the insecure SaveFile method...

Design/Logic Flaw

An ActiveX control for Microsoft Visual FoxPro vfp6r.dll 6.0.8862.0 allows remote attackers to execute arbitrary commands by invoking the DoCmd method...

CVE-2008-0237

The Microsoft Rich Textbox ActiveX Control RICHTX32.OCX 6.1.97.82 allows remote attackers to execute arbitrary commands by invoking the insecure SaveFile method...

CVE-2008-0235

CVE-2008-0235 affects the Microsoft VFP_OLE_Server ActiveX control. The vulnerability allows remote attackers to execute arbitrary code by invoking the foxcommand method. The NVD entry lists a base score of 10.0 (HIGH) with network attack vector and no authentication, indicating a severe remote c...

CVE-2008-0237

The CVE-2008-0237 entry involves the Microsoft Rich Textbox ActiveX control (Richtx32.ocx, v6.1.97.82). The vulnerability lies in the SaveFile method, which can be abused to create or overwrite arbitrary files via a web page, enabling remote access to write files on the target system. Exploitatio...

CVE-2008-0236

An ActiveX control for Microsoft Visual FoxPro vfp6r.dll 6.0.8862.0 allows remote attackers to execute arbitrary commands by invoking the DoCmd method...

Microsoft VFP_OLE_Server ActiveX控件远程命令执行漏洞

Microsoft Visual FoxPro是一款数据库管理和应用软件开发系统。 Microsoft VFPOLEServer ActiveX控件存在设计问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意命令。 问题是Microsoft VFPOLEServer控件不安全使用"foxcommand"函数，直接传递运行应用程序作为参数，可导致应用程序权限执行。 Microsoft VFPOLEServer ActiveX Control 0 + Microsoft Internet Explorer 6.0 + Microsoft Internet Explorer 5.5 SP2 ...

CVE-2008-0237: Improper Input Validation

The Microsoft Rich Textbox ActiveX Control RICHTX32.OCX 6.1.97.82 allows remote attackers to execute arbitrary commands by invoking the insecure SaveFile method...

Qvod Player 2.1.5 - QvodInsert.dll ActiveX Control Remote Buffer Overflow

Qvod Player 2.1.5 - QvodInsert.dll ActiveX Control Remote Buffer Overflow source: https://www.securityfocus.com/bid/27271/info Qvod Player 'QvodInsert.dll' ActiveX control is prone to is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on...

CVE-2008-0235: Improper Control of Generation of Code

The Microsoft VFPOLEServer ActiveX control allows remote attackers to execute arbitrary code by invoking the foxcommand method...

CVE-2008-0236: Undefined Security Weakness

An ActiveX control for Microsoft Visual FoxPro vfp6r.dll 6.0.8862.0 allows remote attackers to execute arbitrary commands by invoking the DoCmd method...

Qvod Player 2.1.5 - 'QvodInsert.dll' ActiveX Control Remote Buffer Overflow

source: https://www.securityfocus.com/bid/27271/info Qvod Player 'QvodInsert.dll' ActiveX control is prone to is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Successfully exploiting this issue allows remote...

Stack overflow

Multiple stack-based buffer overflows in the WebLaunch.WeblaunchCtl.1 aka CWebLaunchCtl ActiveX control in weblaunch.ocx 1.0.0.1 in Gateway Weblaunch allow remote attackers to execute arbitrary code via a long string in the 1 second or 2 fourth argument to the DoWebLaunch method. NOTE: some of...

Directory traversal

Directory traversal vulnerability in the WebLaunch.WeblaunchCtl.1 aka CWebLaunchCtl ActiveX control in weblaunch.ocx 1.0.0.1 in Gateway Weblaunch allows remote attackers to execute arbitrary programs via a ..\ dot dot backslash in the second argument to the DoWebLaunch method. NOTE: some of these...

CVE-2008-0220

Multiple stack-based buffer overflows in the WebLaunch.WeblaunchCtl.1 aka CWebLaunchCtl ActiveX control in weblaunch.ocx 1.0.0.1 in Gateway Weblaunch allow remote attackers to execute arbitrary code via a long string in the 1 second or 2 fourth argument to the DoWebLaunch method. NOTE: some of...

CVE-2008-0221

Directory traversal vulnerability in the WebLaunch.WeblaunchCtl.1 aka CWebLaunchCtl ActiveX control in weblaunch.ocx 1.0.0.1 in Gateway Weblaunch allows remote attackers to execute arbitrary programs via a ..\ dot dot backslash in the second argument to the DoWebLaunch method. NOTE: some of these...

CVE-2008-0220

CVE-2008-0220 : Multiple stack-based buffer overflows in the WebLaunch.WeblaunchCtl.1 (CWebLaunchCtl) ActiveX control in weblaunch.ocx 1.0.0.1 (Gateway Weblaunch) allow remote attackers to execute arbitrary code by sending a long string in the (1) second or (2) fourth argument to the DoWebLaunch ...

CVE-2008-0220

Multiple stack-based buffer overflows in the WebLaunch.WeblaunchCtl.1 aka CWebLaunchCtl ActiveX control in weblaunch.ocx 1.0.0.1 in Gateway Weblaunch allow remote attackers to execute arbitrary code via a long string in the 1 second or 2 fourth argument to the DoWebLaunch method. NOTE: some of...