CVE-2007-2656

Stack-based buffer overflow in the Hewlett-Packard HP Magview ActiveX control in hpqvwocx.dll 1.0.0.309 allows remote attackers to cause a denial of service application crash and possibly have other impact via a long argument to the DeleteProfile method...

CVE-2007-2658

Unspecified vulnerability in the ID Automation Linear Barcode 1.6.0.5 ActiveX control in IDAutomationLinear6.dll allows remote attackers to cause a denial of service via a long argument to the SaveEnhWMF method...

Stack overflow

Stack-based buffer overflow in the Clever Database Comparer 2.2 ActiveX control comparerax.ocx allows remote attackers to execute arbitrary code via a long argument to the ConnectToDatabase function...

CVE-2007-2648

Stack-based buffer overflow in the Clever Database Comparer 2.2 ActiveX control comparerax.ocx allows remote attackers to execute arbitrary code via a long argument to the ConnectToDatabase function...

CVE-2007-2648

The CVE-2007-2648 entry concerns the Clever Database Comparer 2.2 ActiveX control (comparerax.ocx). The provided sources describe a stack-based buffer overflow that enables an attacker to execute arbitrary code by supplying a long argument to the ConnectToDatabase function. The NVD entry lists th...

CVE-2007-2648

Stack-based buffer overflow in the Clever Database Comparer 2.2 ActiveX control comparerax.ocx allows remote attackers to execute arbitrary code via a long argument to the ConnectToDatabase function...

Symantec Norton Internet Security 2006 COM对象安全绕过漏洞

Norton Internet Security 2006是一款可以对反间谍软件，病毒，反垃圾，恶意网络通信进行保护的安全套件。 Norton Internet Security 2006安装的ActiveX控件存在设计错误，远程攻击者可以利用漏洞以应用程序进程权限执行任意代码。 Norton Internet Security 2006安装如下ActiveX控件注册为安全脚本： Progid: Symantec.Norton.AntiVirus.NAVOptions Clsid: 085ABFE2-D753-445C-8A2A-D4BD46CE0811 File: C:\Program...

CVE-2007-2656: Undefined Security Weakness

Stack-based buffer overflow in the Hewlett-Packard HP Magview ActiveX control in hpqvwocx.dll 1.0.0.309 allows remote attackers to cause a denial of service application crash and possibly have other impact via a long argument to the DeleteProfile method...

CVE-2007-2644

A certain ActiveX control in Morovia Barcode ActiveX Professional 3.3.1304 allows remote attackers to overwrite arbitrary files by calling the Save method with an arbitrary filename...

Code injection

A certain ActiveX control in Morovia Barcode ActiveX Professional 3.3.1304 allows remote attackers to overwrite arbitrary files by calling the Save method with an arbitrary filename...

CVE-2007-2644

The connected Nessus entry identifies Morovia Barcode ActiveX Control

EUVD-2007-2636

A certain ActiveX control in Morovia Barcode ActiveX Professional 3.3.1304 allows remote attackers to overwrite arbitrary files by calling the Save method with an arbitrary filename...

ID Automation Linear Barcode - ActiveX Denial of Service

ID Automation Linear Barcode - ActiveX Denial of Service 2007/05/13 -------------------------------------------------------------------------------------------------- ID Automation Linear Barcode ActiveX Control IDAutomationLinear6.dll v. 1.6.0.5 DoS url: http://www.idautomation.com/ price: from...

ID Automation Linear Barcode ActiveX Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================================== ID Automation Linear Barcode ActiveX Denial of Service Exploit ============================================================== 2007/05/13...

CVE-2007-2644: Undefined Security Weakness

A certain ActiveX control in Morovia Barcode ActiveX Professional 3.3.1304 allows remote attackers to overwrite arbitrary files by calling the Save method with an arbitrary filename...

Design/Logic Flaw

Unspecified vulnerability in the Init function in the Audio CD Ripper OCX AudioCDRipperOCX.ocx 1.0 ActiveX control allows remote attackers to cause a denial of service NULL dereference and Internet Explorer crash via unspecified vectors...

CVE-2007-2603

Unspecified vulnerability in the Init function in the Audio CD Ripper OCX AudioCDRipperOCX.ocx 1.0 ActiveX control allows remote attackers to cause a denial of service NULL dereference and Internet Explorer crash via unspecified vectors...

CVE-2007-2604

Unspecified vulnerability in the FlexLabel ActiveX control allows remote attackers to cause a denial of service unstable behavior via an improper initialization, as demonstrated by a certain value of the Caption property...

CVE-2006-3456

The Symantec NAVOPTS.DLL ActiveX control aka Symantec.Norton.AntiVirus.NAVOptions 12.2.0.13, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, is designed for use only in application-embedded web browsers, which allows remote attackers to "crash the control" via...

CVE-2007-2601

CVE-2007-2601 is tied to a buffer overflow in the GDivX Zenith Player’s AviFixer ActiveX control (the fix.dll 1.0.0.1 component). The vulnerability allows remote attackers to execute arbitrary code by supplying a long value to the SetInputFile property. This is supported by multiple connected sou...