CVE-2007-2495

Multiple stack-based buffer overflows in the ExcelOCX ActiveX control in ExcelViewer.ocx 3.1.0.6 allow remote attackers to cause a denial of service Internet Explorer 7 crash via a long 1 DoOleCommand, 2 FTPDownloadFile, 3 FTPUploadFile, 4 HttpUploadFile, 5 Save, 6 SaveWebFile, 7 HttpDownloadFile...

CVE-2007-2496: Undefined Security Weakness

The WordOCX ActiveX control in WordViewer.ocx 3.2.0.5 allows remote attackers to cause a denial of service Internet Explorer 7 crash via a long 1 DoOleCommand, 2 FTPDownloadFile, 3 FTPUploadFile, 4 HttpUploadFile, 5 GotoPage, 6 Save, 7 SaveWebFile, 8 HttpDownloadFile, 9 Open, 10 OpenWebFile, 11...

PowerPoint Viewer OCX 3.2 (ActiveX Control) Denial of Service Exploit

No description provided by source. span style="font: 10pt Courier New;"span class="general1-symbol"----------------------------------------------------------------------------- bPowerPointViewer.ocx v. 3.1.0.3 multiple methods Denial of Service/b url: urlhttp://www.officeocx.com//url price: from...

Axis Communications CamImage ActiveX control stack buffer overflow

Overview The Axis Communications CamImage ActiveX control contains a stack buffer overflow, which can allow a remote, unauthenticated attacker to run arbitrary code on a vulnerable system. Description Axis Communications provides an ActiveX control for viewing motion JPEG streams in Microsoft...

McAfee ePolicy Orchestrator SiteManager ActiveX Multiple Buffer Overflows (CVE-2007-1498)

Multiple vulnerabilities exist in the McAfee ePolicy Orchestrator ePO, and the Protection Pilot products. McAfee ePolicy Orchestrator is a central management system to enforce and monitor system security. A remote attacker could exploit this issue by convincing a user to visit a specially crafted...

PowerPoint Viewer OCX 3.2 - ActiveX Control Denial of Service

PowerPoint Viewer OCX 3.2 - ActiveX Control Denial of Service 2007/05/01 ----------------------------------------------------------------------------- PowerPointViewer.ocx v. 3.1.0.3 multiple methods Denial of Service url: http://www.officeocx.com/ price: from €63.95 update to last version to...

PowerPoint Viewer OCX 3.2 (ActiveX Control) Denial of Service Exploit

Exploit for unknown platform in category dos / poc ===================================================================== PowerPoint Viewer OCX 3.2 ActiveX Control Denial of Service Exploit ===================================================================== 2007/05/01...

PowerPoint Viewer OCX 3.2 - ActiveX Control Denial of Service

2007/05/01 ----------------------------------------------------------------------------- PowerPointViewer.ocx v. 3.1.0.3 multiple methods Denial of Service url: http://www.officeocx.com/ price: from €63.95 update to last version to €1,585.95 Royalty author: shinnai mail:...

Buffer overflow

Multiple buffer overflows in the WinDVDX ActiveX control in InterVideo Home Theater 2.1.13.0 and 2.5.13.58 allow remote attackers to execute arbitrary code via a long string argument to the 1 GetDiscType or 2 AddFileList method. NOTE: the provenance of this information is unknown; the details are...

CVE-2007-2323

CVE-2007-2323 describes multiple buffer overflows in the WinDVDX ActiveX control used by InterVideo Home Theater (versions 2.1.13.0 and 2.5.13.58). The flaw allows remote attackers to execute arbitrary code by passing a long string to the GetDiscType or AddFileList methods. The vulnerability is r...

CVE-2007-2323: Undefined Security Weakness

Multiple buffer overflows in the WinDVDX ActiveX control in InterVideo Home Theater 2.1.13.0 and 2.5.13.58 allow remote attackers to execute arbitrary code via a long string argument to the 1 GetDiscType or 2 AddFileList method. NOTE: the provenance of this information is unknown; the details are...

Stack overflow

Stack-based buffer overflow in the DoWebMenuAction function in the IncrediMail IMMenuShellExt ActiveX control ImShExt.dll allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-1683

Stack-based buffer overflow in the DoWebMenuAction function in the IncrediMail IMMenuShellExt ActiveX control ImShExt.dll allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-1683

Stack-based buffer overflow in the DoWebMenuAction function in the IncrediMail IMMenuShellExt ActiveX control ImShExt.dll allows remote attackers to execute arbitrary code via unspecified vectors...

IncrediMail IMMenuShellExt ActiveX control stack buffer overflow vulnerability

Overview The IncrediMail IMMenuShellExt ActiveX control contains a stack buffer overflow, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description IncrediMail is an email application that includes animations and 1000's of emoticons...

Buffer overflow

A certain ActiveX control in askPopStp.dll in Netsprint Ask IE Toolbar 1.1 allows remote attackers to cause a denial of service Internet Explorer crash via a long AddAllowed property value, related to "improper memory handling," possibly a buffer overflow...

CVE-2007-2210

A certain ActiveX control in askPopStp.dll in Netsprint Ask IE Toolbar 1.1 allows remote attackers to cause a denial of service Internet Explorer crash via a long AddAllowed property value, related to "improper memory handling," possibly a buffer overflow...

CVE-2007-2210

Summary: CVE-2007-2210 involves an ActiveX control (askPopStp.dll) in the Netsprint Ask IE Toolbar 1.1. The vulnerability arises from improper memory handling related to a long AddAllowed property value, potentially causing a buffer overflow and a remote denial of service (Internet Explorer crash...

CVE-2007-2210

A certain ActiveX control in askPopStp.dll in Netsprint Ask IE Toolbar 1.1 allows remote attackers to cause a denial of service Internet Explorer crash via a long AddAllowed property value, related to "improper memory handling," possibly a buffer overflow...

Stack overflow

Stack-based buffer overflow in the Microgaming Download Helper ActiveX control dlhelper.dll before 7.2.0.19, and the WebHandler Class control, allows remote attackers to execute arbitrary code via unspecified vectors...