CVE-2007-3040

This CVE affects Microsoft Agent on Windows 2000 SP4, via the Agent (Agent.Control) ActiveX in agentdpv.dll 2.0.0.3425. A crafted URL can trigger a stack-based overflow in the Agent Service (agentsrv.exe), allowing remote code execution with the caller’s privileges. The issue is tied to the Micro...

Microsoft Visual Studio PDWizard.ocx ActiveX控件多个不安全方式漏洞

BUGTRAQ ID: 25638 Microsoft Visual Studio是微软公司的开发工具套件系列产品，是一个基本完整的开发工具集，包括了软件整个生命周期中所需要的大部分工具。 Visual Studio所安装的PDWizard.ocx ActiveX控件没有正确的验证对StartProcess、SyncShell、SaveAs、CABDefaultURL、 CABFileName、CABRunFile等方式的输入参数，如果用户受骗访问了恶意网页并向这些方式传送了超长参数的话，就可能导致执行任意代码。 Microsoft Visual Studio 6.0...

iDefense Security Advisory 09.11.07: Microsoft Windows 2000 Agent URL Canonicalizing Stack Based Buffer Overflow Vulnerability

Microsoft Windows 2000 Agent URL Canonicalizing Stack Based Buffer Overflow Vulnerability iDefense Security Advisory 09.11.07 http://labs.idefense.com/intelligence/vulnerabilities/ Sep 11, 2007 I. BACKGROUND Microsoft Agent allows websites and programs to display animated characters that speak an...

Callisto PhotoParade Player PhPInfo ActiveX control buffer overflow

Overview The Callisto PhotoParade Player PhPInfo ActiveX control contains a buffer overflow, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Callisto PhotoParade Player includes an ActiveX control called PhPinfo. The ActiveX control...

Buffer overflow

Multiple buffer overflows in the BaoFeng2 storm ActiveX control in Mps.dll allow remote attackers to have an unknown impact via a long 1 URL, 2 backImage, or 3 titleImage property value; 4 a long first argument to the advancedOpen method; a long argument to the 5 isDVDPath or 6 rawParse method; o...

CVE-2007-4821

Buffer overflow in a certain ActiveX control in officeviewer.ocx 5.2.218.1 in EDraw Office Viewer Component 5.2 allows remote attackers to execute arbitrary code via a long first argument to the HttpDownloadFileToTempDir method, a different vulnerability than CVE-2007-3169...

CVE-2007-4816

Multiple buffer overflows in the BaoFeng2 storm ActiveX control in Mps.dll allow remote attackers to have an unknown impact via a long 1 URL, 2 backImage, or 3 titleImage property value; 4 a long first argument to the advancedOpen method; a long argument to the 5 isDVDPath or 6 rawParse method; o...

Buffer overflow

Buffer overflow in a certain ActiveX control in officeviewer.ocx 5.2.218.1 in EDraw Office Viewer Component 5.2 allows remote attackers to execute arbitrary code via a long first argument to the HttpDownloadFileToTempDir method, a different vulnerability than CVE-2007-3169...

CVE-2007-4814

Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL sqldmo.dll 2000.085.2004.00 in Microsoft SQL Server Enterprise Manager 8.05.2004 allows remote attackers to execute arbitrary code via a long second argument to the Start method...

CVE-2007-4816

The BaoFeng2 storm ActiveX control in Mps.dll contains multiple buffer overflows that allow remote attackers to achieve an unknown impact. Vulnerable inputs include long values for the URL , backImage , and titleImage properties, as well as long first arguments to the advancedOpen method, long ar...

CVE-2007-4814

CVE-2007-4814 affects the SQL Server Distributed Management Objects (DMO) ActiveX control sqldmo.dll. A buffer overflow in the Start method is triggered by a long argument, enabling remote code execution. Exploitation details are documented in SAINT references, with note that exploits exist for M...

CVE-2007-4816

Multiple buffer overflows in the BaoFeng2 storm ActiveX control in Mps.dll allow remote attackers to have an unknown impact via a long 1 URL, 2 backImage, or 3 titleImage property value; 4 a long first argument to the advancedOpen method; a long argument to the 5 isDVDPath or 6 rawParse method; o...

CVE-2007-4821

Buffer overflow in a certain ActiveX control in officeviewer.ocx 5.2.218.1 in EDraw Office Viewer Component 5.2 allows remote attackers to execute arbitrary code via a long first argument to the HttpDownloadFileToTempDir method, a different vulnerability than CVE-2007-3169...

Heap overflow

Multiple heap-based buffer overflows in GlobalLink 2.7.0.8 allow remote attackers to execute arbitrary code via 1 a long eighth argument to the SetInfo method in a certain ActiveX control in glItemCom.dll or 2 a long second argument to the SetClientInfo method in a certain ActiveX control in...

CVE-2007-4802

CVE-2007-4802 affects GlobalLink 2.7.0.8 (glItemCom.dll, glitemflat.dll). The issue is multiple heap-based buffer overflows that allow remote attackers to execute arbitrary code via: (1) a long eighth argument to SetInfo in glItemCom.dll and (2) a long second argument to SetClientInfo in glitemfl...

Microsoft Agent crafted URL vulnerability

Added: 09/11/2007 CVE: CVE-2007-3040 BID: 25566 OSVDB: 36934 Background Microsoft Agent is a component of the Windows operating system designed to make using a computer easier through enriched user interaction. Problem A vulnerability in Microsoft Agent allows command execution when a user loads ...

CVE-2007-4814: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL sqldmo.dll 2000.085.2004.00 in Microsoft SQL Server Enterprise Manager 8.05.2004 allows remote attackers to execute arbitrary code via a long second argument to the Start method...

Assurent VR - Microsoft Agent Crafted URL Stack Buffer Overflow

Microsoft Agent Crafted URL Stack Buffer Overflow Assurent ID: FSC20070911-11 1. Affected Software Microsoft Agent, version 2.0.0.3425 bundled with Windows 2000 Service Pack 4 Reference: http://www.microsoft.com/msagent/ 2. Vulnerability Summary The Microsoft Agent ActiveX control contains a buff...

Microsoft Agent agentdpv.dll ActiveX Control Malformed URL Stack Buffer Overflow Vulnerability

Description Microsoft Agent agentsvr.exe is prone to a stack-based buffer-overflow vulnerability because the application fails to adequately bounds-check user-supplied data. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the currently...

Microsoft Agent crafted URL vulnerability

Added: 09/11/2007 CVE: CVE-2007-3040 BID: 25566 OSVDB: 36934 Background Microsoft Agent is a component of the Windows operating system designed to make using a computer easier through enriched user interaction. Problem A vulnerability in Microsoft Agent allows command execution when a user loads ...