Buffer overflow

Buffer overflow in the HelpPopup method in the Microsoft Office 2000 Controllo UA di Microsoft Office ActiveX control OUACTRL.OCX 1.0.1.9 allows remote attackers to cause a denial of service probably winhlp32.exe crash via a long first argument. NOTE: it is not clear whether this issue crosses...

CVE-2007-2903

Buffer overflow in the HelpPopup method in the Microsoft Office 2000 Controllo UA di Microsoft Office ActiveX control OUACTRL.OCX 1.0.1.9 allows remote attackers to cause a denial of service probably winhlp32.exe crash via a long first argument. NOTE: it is not clear whether this issue crosses...

Buffer overflow

Buffer overflow in a certain ActiveX control in LTRDF14e.DLL 14.5.0.44 in LeadTools Raster Dialog File Object allows remote attackers to execute arbitrary code via a long Directory property value...

CVE-2007-2895

Buffer overflow in a certain ActiveX control in LTRDF14e.DLL 14.5.0.44 in LeadTools Raster Dialog File Object allows remote attackers to execute arbitrary code via a long Directory property value...

CVE-2007-2895

CVE-2007-2895 describes a buffer overflow in LeadTools Raster Dialog File Object’s ActiveX control LTRDF14e.DLL 14.5.0.44. The vulnerability allows remote code execution when an attacker supplies a long Directory property value, as noted across NVD and CVE records. The affected component is an Ac...

CVE-2007-2895

Buffer overflow in a certain ActiveX control in LTRDF14e.DLL 14.5.0.44 in LeadTools Raster Dialog File Object allows remote attackers to execute arbitrary code via a long Directory property value...

CVE-2007-2885

CVE-2007-2885 (and related CVE-2007-4254) affect the MSVDT Database Designer 7.0 ActiveX control (VDT70.DLL). The NotSafe function argument can cause a denial of service (IE6 crash) per CVE-2007-2885, and CVE-2007-4254 describes a stack-based buffer overflow in the same control that could allow r...

CVE-2007-2885

The NotSafe function in the MSVDTDatabaseDesigner7 ActiveX control in VDT70.DLL in Microsoft Visual Database Tools MSVDT Database Designer 7.0 allows remote attackers to cause a denial of service Internet Explorer 6 crash via a long argument...

CVE-2007-2903: Undefined Security Weakness

Buffer overflow in the HelpPopup method in the Microsoft Office 2000 Controllo UA di Microsoft Office ActiveX control OUACTRL.OCX 1.0.1.9 allows remote attackers to cause a denial of service probably winhlp32.exe crash via a long first argument. NOTE: it is not clear whether this issue crosses...

ProgramChecker sasatl.dll ActiveX Control Multiple Overflows

The Windows remote host contains the ProgramChecker ActiveX control from Zenturi, a set of tools for examining programs running on a PC. The version of this ActiveX control on the remote host reportedly contains multiple vulnerabilities. A remote attacker may be able to leverage these issues to...

British Telecommunications Business Connect webhelper ActiveX control buffer overflows

Overview The British Telecommunications Business Connect webhelper ActiveX control contains multiple buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The registration process for British Telecommunications BT intern...

British TeleCommunications Consumer Webhelper 2.0.0.7 - Multiple Buffer Overflow Vulnerabilities

British TeleCommunications Consumer Webhelper 2.0.0.7 - Multiple Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/24219/info The British Telecommunications Consumer Webhelper ActiveX control is prone to multiple buffer-overflow vulnerabilities because it fails to...

Zenturi ProgramChecker ActiveX Control Arbitrary File Download

This module allows remote attackers to place arbitrary files on a users file system via the Zenturi ProgramChecker sasatl.dll 1.5.0.531 ActiveX Control. Module Options msf use exploit/windows/browser/zenturiprogramchecker/unsafe msf undefinedunsafe show actions ...actions... msf undefinedunsafe s...

Command injection

The VCDAPILibApi ActiveX control in vc9api.DLL 9.0.0.57 in Virtual CD 9.0.0.2 allows remote attackers to execute arbitrary commands via a command line in the first argument to the VCDLaunchAndWait function...

Buffer overflow

Buffer overflow in the Dart Communications PowerTCP ZIP Compression ActiveX control in DartZip.dll 1.8.5.3, when Internet Explorer 6 is used, allows user-assisted remote attackers to execute arbitrary code via a long first argument to the QuickZip function, a related issue to CVE-2007-2855...

CVE-2007-2856

Buffer overflow in the Dart Communications PowerTCP ZIP Compression ActiveX control in DartZip.dll 1.8.5.3, when Internet Explorer 6 is used, allows user-assisted remote attackers to execute arbitrary code via a long first argument to the QuickZip function, a related issue to CVE-2007-2855...

CVE-2007-2853

The VCDAPILibApi ActiveX control in vc9api.DLL 9.0.0.57 in Virtual CD 9.0.0.2 allows remote attackers to execute arbitrary commands via a command line in the first argument to the VCDLaunchAndWait function...

CVE-2007-2853

CVE-2007-2853 affects the VCDAPILibApi ActiveX control in vc9api.DLL 9.0.0.57 within Virtual CD 9.0.0.2. A remote attacker can execute arbitrary commands by passing a command line as the first argument to VCDLaunchAndWait, enabling command injection. The connected records confirm the vulnerabilit...

CVE-2007-2855

Buffer overflow in a certain ActiveX control in DartZipLite.dll 1.8.5.3 in Dart ZipLite Compression for ActiveX allows user-assisted remote attackers to execute arbitrary code via a long first argument to the QuickZip function, a related issue to CVE-2007-2856...

CVE-2007-2856

The CVE-2007-2856 entry documents a buffer overflow in the Dart Communications PowerTCP ZIP Compression ActiveX control (DartZip.dll 1.8.5.3). The flaw, triggered when Internet Explorer 6 handles a long first argument to the QuickZip function, allows user‑assisted remote code execution. This is d...