6210 matches found
Stack overflow
Stack-based buffer overflow in the SPIDERLib.Loader ActiveX control Spider90.ocx 9.1.0.4353 in TestDirector TD for Mercury Quality Center 9.0 before Patch 12.1, and 8.2 SP1 before Patch 32, allows remote attackers to execute arbitrary code via a long ProgColor property...
CVE-2007-1819
Stack-based buffer overflow in the SPIDERLib.Loader ActiveX control Spider90.ocx 9.1.0.4353 in TestDirector TD for Mercury Quality Center 9.0 before Patch 12.1, and 8.2 SP1 before Patch 32, allows remote attackers to execute arbitrary code via a long ProgColor property...
CVE-2007-1819
CVE-2007-1819 describes a stack-based buffer overflow in the SPIDERLib.Loader ActiveX control (Spider90.ocx) version 9.1.0.4353 used by TestDirector (TD) for Mercury Quality Center, with patches: 9.0 before Patch 12.1 and 8.2 SP1 before Patch 32. The overflow is triggered by a long ProgColor prop...
CVE-2007-1819
Stack-based buffer overflow in the SPIDERLib.Loader ActiveX control Spider90.ocx 9.1.0.4353 in TestDirector TD for Mercury Quality Center 9.0 before Patch 12.1, and 8.2 SP1 before Patch 32, allows remote attackers to execute arbitrary code via a long ProgColor property...
CVE-2006-5820
The AOL SuperBuddy ActiveX control (Sb.SuperBuddy.1) contains a vulnerability in the LinkSBIcons() method. This flaw occurs because the method fails to properly validate a user-controlled address argument before dereferencing it, which can allow a remote, unauthenticated attacker to overwrite arb...
CVE-2006-5820: Undefined Security Weakness
The LinkSBIcons method in the SuperBuddy ActiveX control Sb.SuperBuddy.1 in America Online 9.0 Security Edition dereferences an arbitrary function pointer, which allows remote attackers to execute arbitrary code via a modified pointer value...
HP Instant Support - ActiveX Control Driver Check Buffer Overflow
HP Instant Support - ActiveX Control Driver Check Buffer Overflow source: https://www.securityfocus.com/bid/24730/info HP Instant Support ActiveX control is prone to a remote buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied input before copying it to an...
Code injection
The JNILoader ActiveX control STJNILoader.ocx 3.1.0.26 in IBM Lotus Notes Sametime before 7.5 allows remote attackers to load arbitrary DLL libraries and execute arbitrary code via arbitrary arguments to the loadLibrary function...
CVE-2007-1784
The JNILoader ActiveX control STJNILoader.ocx 3.1.0.26 in IBM Lotus Notes Sametime before 7.5 allows remote attackers to load arbitrary DLL libraries and execute arbitrary code via arbitrary arguments to the loadLibrary function...
CVE-2007-1784
The JNILoader ActiveX control STJNILoader.ocx 3.1.0.26 in IBM Lotus Notes Sametime before 7.5 allows remote attackers to load arbitrary DLL libraries and execute arbitrary code via arbitrary arguments to the loadLibrary function...
CVE-2007-1784
The CVE-2007-1784 entry affects IBM Lotus Notes Sametime (JNILoader ActiveX: STJNILoader.ocx, version 3.1.0.26) where remote attackers can cause arbitrary code execution by passing arbitrary arguments to the loadLibrary function, enabling loading of arbitrary DLLs. Impact is described as remote c...
TSRT-07-03: America Online SuperBuddy ActiveX Control Code Execution Vulnerability
TSRT-07-03: America Online SuperBuddy ActiveX Control Code Execution http://www.tippingpoint.com/security/advisories/TSRT-07-03.html March 30, 2007 -- CVE ID: CVE-2006-5820 -- Affected Vendor: America Online -- Affected Products: America Online 9.0 Security Edition -- TippingPointTM IPS Customer...
CVE-2007-1784: Undefined Security Weakness
The JNILoader ActiveX control STJNILoader.ocx 3.1.0.26 in IBM Lotus Notes Sametime before 7.5 allows remote attackers to load arbitrary DLL libraries and execute arbitrary code via arbitrary arguments to the loadLibrary function...
iDefense Security Advisory 03.29.07: IBM Lotus Sametime JNILoader Arbitrary DLL Load Vulnerability
IBM Lotus Sametime JNILoader Arbitrary DLL Load Vulnerability iDefense Security Advisory 03.29.07 http://labs.idefense.com/intelligence/vulnerabilities/ Mar 29, 2007 I. BACKGROUND IBM Corp.'s Lotus Sametime product provides a real-time online conferencing solution. More information on the product...
Buffer overflow
Buffer overflow in the DownloadCertificateExt function in SignKorea SKCommAX ActiveX control module 7.2.0.2 and 3280 6.6.0.1 allows remote attackers to execute arbitrary code via a long pszUserID argument...
CVE-2007-1722
Buffer overflow in the DownloadCertificateExt function in SignKorea SKCommAX ActiveX control module 7.2.0.2 and 3280 6.6.0.1 allows remote attackers to execute arbitrary code via a long pszUserID argument...
CVE-2007-1722: Undefined Security Weakness
Buffer overflow in the DownloadCertificateExt function in SignKorea SKCommAX ActiveX control module 7.2.0.2 and 3280 6.6.0.1 allows remote attackers to execute arbitrary code via a long pszUserID argument...
Buffer overflow
Multiple buffer overflows in the IMAILAPILib ActiveX control IMailAPI.dll in Ipswitch IMail Server before 2006.2 allow remote attackers to execute arbitrary code via the 1 WebConnect and 2 Connect members in the a IMailServer control; 3 Sync3 and 4 Init3 members in the b IMailLDAPService control;...
CVE-2007-1637
Multiple buffer overflows in the IMAILAPILib ActiveX control IMailAPI.dll in Ipswitch IMail Server before 2006.2 allow remote attackers to execute arbitrary code via the 1 WebConnect and 2 Connect members in the a IMailServer control; 3 Sync3 and 4 Init3 members in the b IMailLDAPService control;...
CVE-2007-1637
CVE-2007-1637 affects Ipswitch IMail Server prior to 2006.2. Multiple buffer overflows in the IMAILAPILib ActiveX control (IMailAPI.dll) allow remote code execution via the IMailServer, IMailLDAPService, and IMailUserCollection components (WebConnect/Connect, Sync3/Init3, and SetReplyTo members)....