Code injection

The Run function in SolidWorks sldimdownload ActiveX control in sldimdownload.dll before 16.0.0.6 allows remote attackers to execute arbitrary commands via the 1 installerpath and 2 applicationarguments arguments...

Stack overflow

Stack-based buffer overflow in the createAndJoinConference function in the AudioConf ActiveX control yacscom.dll in Yahoo! Messenger before 20070313 allows remote attackers to execute arbitrary code via long 1 socksHostname and 2 hostname properties...

CVE-2007-1680

Stack-based buffer overflow in the createAndJoinConference function in the AudioConf ActiveX control yacscom.dll in Yahoo! Messenger before 20070313 allows remote attackers to execute arbitrary code via long 1 socksHostname and 2 hostname properties...

CVE-2007-1684

The Run function in SolidWorks sldimdownload ActiveX control in sldimdownload.dll before 16.0.0.6 allows remote attackers to execute arbitrary commands via the 1 installerpath and 2 applicationarguments arguments...

CVE-2007-1680

Stack-based buffer overflow in the createAndJoinConference function in the AudioConf ActiveX control yacscom.dll in Yahoo! Messenger before 20070313 allows remote attackers to execute arbitrary code via long 1 socksHostname and 2 hostname properties...

CVE-2007-1684

The Run function in SolidWorks sldimdownload ActiveX control in sldimdownload.dll before 16.0.0.6 allows remote attackers to execute arbitrary commands via the 1 installerpath and 2 applicationarguments arguments...

CVE-2007-1680

CVE-2007-1680 is a stack-based buffer overflow in Yahoo! Messenger’s AudioConf ActiveX control (yacscom.dll). The vulnerability occurs when the createAndJoinConference method is called with excessively long socksHostname or hostname parameters, enabling remote code execution under the current use...

Design/Logic Flaw

The StartUploading function in KL.SysInfo ActiveX control AxKLSysInfo.dll in Kaspersky Anti-Virus 6.0 and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows remote attackers to read arbitrary files by triggering an outbound anonymous FTP session that invokes the PUT command...

CVE-2007-1879

The StartUploading function in KL.SysInfo ActiveX control AxKLSysInfo.dll in Kaspersky Anti-Virus 6.0 and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows remote attackers to read arbitrary files by triggering an outbound anonymous FTP session that invokes the PUT command...

iDefense Security Advisory 04.04.07: Kaspersky AntiVirus SysInfo ActiveX Control Information Disclosure Vulnerability

Kaspersky AntiVirus SysInfo ActiveX Control Information Disclosure Vulnerability iDefense Security Advisory 04.04.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 04, 2007 I. BACKGROUND Kaspersky AntiVirus offers comprehensive protection from computer viruses and malware threats. Mor...

AOL SuperBuddy ActiveX Control Remote Code Execution Exploit (meta)

Exploit for unknown platform in category remote exploits =================================================================== AOL SuperBuddy ActiveX Control Remote Code Execution Exploit meta =================================================================== require 'msf/core' module Msf class...

ZDI-07-012: Yahoo! Messenger AudioConf ActiveX Control Buffer Overflow

ZDI-07-012: Yahoo! Messenger AudioConf ActiveX Control Buffer Overflow http://www.zerodayinitiative.com/advisories/ZDI-07-012.html April 3, 2007 -- CVE ID: CVE-2007-1680 -- Affected Vendor: Yahoo! -- Affected Products: Yahoo! Messenger 8.x -- TippingPointTM IPS Customer Protection: TippingPoint I...

AOL SuperBuddy - ActiveX Control Remote Code Execution (Metasploit)

AOL SuperBuddy - ActiveX Control Remote Code Execution Metasploit require 'msf/core' module Msf class Exploits::Windows::Browser::AOLSuperBuddyLinkSBIcons 'AOL Sb.Superbuddy vulnerability', 'Description' = %q This module exploits a flaw in AOL Sb.SuperBuddy. We stole this code from a pre-existing...

HP Mercury Quality Center ActiveX Control ProgColor Buffer Overflow

This module exploits a stack-based buffer overflow in SPIDERLib.Loader ActiveX control Spider90.ocx 9.1.0.4353 installed by TestDirector TD for Hewlett-Packard Mercury Quality Center 9.0 before Patch 12.1, and 8.2 SP1 before Patch 32. By setting an overly long value to 'ProgColor', an attacker ca...

SolidWorks Sldimdownload ActiveX Control Arbitrary Code Execution

The remote host contains a version of the 'sldimdownload' ActiveX control included with SolidWorks' 3D CAD software. The version of this ActiveX control on the remote host fails to sanitize input to the 'installerpath' and 'applicationarguments' parameters of the 'Run' method. If an attacker can...

AOL SuperBuddy - ActiveX Control Remote Code Execution (Metasploit)

require 'msf/core' module Msf class Exploits::Windows::Browser::AOLSuperBuddyLinkSBIcons 'AOL Sb.Superbuddy vulnerability', 'Description' = %q This module exploits a flaw in AOL Sb.SuperBuddy. We stole this code from a pre-existing metasploit module. , 'License' = MSFLICENSE, 'Author' = 'kradchad...

Yahoo! Messenger AudioConf ActiveX Control (yacscom.dll) Multiple Property Overflow

The remote host contains a version of the 'AudioConf' ActiveX control included with Yahoo! Messenger. The version of this ActiveX control on the remote host has a buffer overflow triggered by calling the control's 'createAndJoinConference' method with large values for the 'socksHostname' and...

iDefense Security Advisory 04.02.07: Hewlett-Packard Mercury Quality Center ActiveX Control ProgColor Buffer Overflow Vulnerability

Hewlett-Packard Mercury Quality Center ActiveX Control ProgColor Buffer Overflow Vulnerability iDefense Security Advisory 04.02.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 02, 2007 I. BACKGROUND Hewlett-Packard Mercury Quality Center is a web-based interface that allows managers...

Yahoo! Messenger AudioConf ActiveX Control Buffer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Yahoo Messenger. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists within the ActiveX control Yahoo.AudioConf: DLL:...

TestDirector (TD) for Mercury Quality Center SPIDERLib.Loader ActiveX Control (Spider90.ocx) ProgColor Property Overflow (2)

The remote host is running Mercury Quality Center, a web-based solution for automatic software testing. The version of Quality Center installed on the remote host hosts an ActiveX control affected by a buffer overflow vulnerability and will serve up a copy of that control if a connecting client...