CVE-2007-1637: Undefined Security Weakness

Multiple buffer overflows in the IMAILAPILib ActiveX control IMailAPI.dll in Ipswitch IMail Server before 2006.2 allow remote attackers to execute arbitrary code via the 1 WebConnect and 2 Connect members in the a IMailServer control; 3 Sync3 and 4 Init3 members in the b IMailLDAPService control;...

Secunia Research: InterActual Player / CinePlayer IASystemInfo.dll ActiveX Control Buffer Overflow

====================================================================== Secunia Research 21/03/2007 - InterActual Player / CinePlayer - - IASystemInfo.dll ActiveX Control Buffer Overflow - ====================================================================== Table of Contents Affected...

McAfee ePolicy Orchestrator and ProtectionPilot ActiveX control buffer overflow vulnerability

Overview A vulnerability in an ActiveX control provided with the McAfee ePolicy Orchestrator and ProtectionPilot software could allow a remote attacker to execute arbitrary code on an affected system. Description The McAfee ePolicy Orchestrator and ProtectionPilot are applications that are design...

Stack overflow

Stack-based buffer overflow in the IASystemInfo.dll ActiveX control in 1 InterActual Player 2.60.12.0717, 2 Roxio CinePlayer 3.2, 3 WinDVD 7.0.27.172, and possibly other products, allows remote attackers to execute arbitrary code via a long ApplicationType property...

CVE-2007-0348

Stack-based buffer overflow in the IASystemInfo.dll ActiveX control in 1 InterActual Player 2.60.12.0717, 2 Roxio CinePlayer 3.2, 3 WinDVD 7.0.27.172, and possibly other products, allows remote attackers to execute arbitrary code via a long ApplicationType property...

CVE-2007-0348

Stack-based buffer overflow in the IASystemInfo.dll ActiveX control in 1 InterActual Player 2.60.12.0717, 2 Roxio CinePlayer 3.2, 3 WinDVD 7.0.27.172, and possibly other products, allows remote attackers to execute arbitrary code via a long ApplicationType property...

CVE-2007-0348

CVE-2007-0348 : The IASystemInfo.dll ActiveX control in InterActual Player, Roxio CinePlayer, and WinDVD 7 embeds a stack-based buffer overflow vulnerability that can be triggered by a long ApplicationType property, enabling remote arbitrary code execution. Public references confirm vulnerable co...

WinDVD7 IASystemInfo.DLL ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in IASystemInfo.dll ActiveX control in InterVideo WinDVD 7. By sending an overly long string to the "ApplicationType" property, an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/browser/windvd7/applicationtype ms...

Stack overflow

Multiple stack-based buffer overflows in the SiteManager.SiteMgr.1 ActiveX control SiteManager.dll in the ePO management console in McAfee ePolicy Orchestrator ePO before 3.6.1 Patch 1 and ProtectionPilot PRP before 1.5.0 HotFix allow remote attackers to execute arbitrary code via a long argument...

CVE-2007-1498

McAfee ePolicy Orchestrator (ePO) SiteManager.dll ActiveX control contains multiple stack-based buffer overflows that allow remote code execution when long arguments are passed to ExportSiteList, VerifyPackageCatalog, or related vectors (via swprintf usage). The affected component is SiteManager....

CVE-2007-1498

Multiple stack-based buffer overflows in the SiteManager.SiteMgr.1 ActiveX control SiteManager.dll in the ePO management console in McAfee ePolicy Orchestrator ePO before 3.6.1 Patch 1 and ProtectionPilot PRP before 1.5.0 HotFix allow remote attackers to execute arbitrary code via a long argument...

SupportSoft tgctlsi.dll ActiveX control buffer overflow

Added: 03/15/2007 CVE: CVE-2006-6490 BID: 22564 OSVDB: 33481 Background SupportSoft ActiveX controls are used by third-party products to provide remote technical support. Problem SupportSoft ActiveX controls are affected by multiple buffer overflow vulnerabilities which can lead to command...

SupportSoft tgctlsi.dll ActiveX control buffer overflow

Added: 03/15/2007 CVE: CVE-2006-6490 BID: 22564 OSVDB: 33481 Background SupportSoft ActiveX controls are used by third-party products to provide remote technical support. Problem SupportSoft ActiveX controls are affected by multiple buffer overflow vulnerabilities which can lead to command...

[Full-disclosure] [Advisory]McAfee ePolicy Orchestrator Multiple Remote Buffer Overflow Vulnerabilities

hi full-disclosure, McAfee ePolicy Orchestrator Multiple Remote Buffer Overflow Vulnerabilities by cocoruder of FSRTFortinet Security Research Team hfliatfortinet.com Summary: Multiple remote buffer overflow vulnerabilities exist in the ActiveX Control named "SiteManager.Dll" of McAfee ePolicy...

Input validation

The Rediff Toolbar 2.0 ActiveX control in redifftoolbar.dll allows remote attackers to cause a denial of service via unspecified manipulations, possibly involving improper initialization or blank arguments...

Stack overflow

Multiple stack-based buffer overflows in an ActiveX control in SwDir.dll 10.1.4.20 in Macromedia Shockwave allow remote attackers to cause a denial of service Internet Explorer 7 crash and possibly execute arbitrary code via a long 1 BGCOLOR, 2 SRC, 3 AutoStart, 4 Sound, 5 DrawLogo, or 6...

CVE-2007-1403

Multiple stack-based buffer overflows in an ActiveX control in SwDir.dll 10.1.4.20 in Macromedia Shockwave allow remote attackers to cause a denial of service Internet Explorer 7 crash and possibly execute arbitrary code via a long 1 BGCOLOR, 2 SRC, 3 AutoStart, 4 Sound, 5 DrawLogo, or 6...

CVE-2007-1402

The Rediff Toolbar 2.0 ActiveX control in redifftoolbar.dll allows remote attackers to cause a denial of service via unspecified manipulations, possibly involving improper initialization or blank arguments...

CVE-2007-1402

The CVE-2007-1402 entry concerns the Rediff Toolbar 2.0 ActiveX control (redifftoolbar.dll). According to connected sources, it allows remote attackers to cause a denial of service via unspecified manipulations, possibly involving improper initialization or blank arguments. The NVD entry lists a ...

CVE-2007-1402

The Rediff Toolbar 2.0 ActiveX control in redifftoolbar.dll allows remote attackers to cause a denial of service via unspecified manipulations, possibly involving improper initialization or blank arguments...