CVE-2007-0356: Undefined Security Weakness

The Common Controls Replacement Project CCRP FolderTreeview FTV ActiveX control ccrpftv6.ocx allows remote attackers to cause a denial of service Internet Explorer 7 crash via a long CCRP.RootFolder property value...

CVE-2007-0371: Undefined Security Weakness

A certain ActiveX control in the Common Controls Replacement Project CCRP CCRP BrowseDialog Server ccrpbds6.dll allows remote attackers to cause a denial of service Internet Explorer 7 crash via a long CCRPBDc.SelectedFolder property value...

Microsoft Visual Studio 2005 WMI Object Broker vulnerability

Added: 01/15/2007 CVE: CVE-2006-4704 BID: 20843 OSVDB: 30155 Background Microsoft Visual Studio is a product to assist with software development in the Windows operating system. Problem A flaw in the WMI Object Broker ActiveX control allows attackers to bypass security zone restrictions, leading ...

GraceNote CDDBControl ActiveX Control Buffer Overflow (CVE-2006-3134; CVE-2006-6442)

A vulnerability has been discovered in America Online AOL CDDB ActiveX Control. Gracenote CDDB ActiveX control contains a buffer overflow error that allows remote attackers to execute arbitrary code via a long option string. A remote attacker could exploit this flaw to execute arbitrary code and...

Citrix Presentation Server Client wfica.ocx Buffer Overflow (CVE-2006-6334)

Citrix Presentation Server, a remote access application publishing product, is prone to a buffer overflow vulnerability. By convincing a user to visit a malicious Web page or open a malicious HTML, a remote attacker could cause the victim's system to execute arbitrary commands and take complete...

Oracle ORADC - ActiveX Control Remote Code Execution

Oracle ORADC - ActiveX Control Remote Code Execution source: https://www.securityfocus.com/bid/22026/info Oracle ORADC ActiveX control is prone to a remote code-execution vulnerability. Exploiting this issue allows remote attackers to execute arbitrary machine code in the context of applications...

Oracle ORADC - ActiveX Control Remote Code Execution

source: https://www.securityfocus.com/bid/22026/info Oracle ORADC ActiveX control is prone to a remote code-execution vulnerability. Exploiting this issue allows remote attackers to execute arbitrary machine code in the context of applications using the affected ActiveX control and possibly to...

Acer LunchApp ActiveX Control fails to properly restrict access to methods

Overview The Acer LunchApp ActiveX control contains methods that can allow a remote, unauthenticated attacker to run arbitrary commands on a vulnerable system. Description The Acer LunchApp ActiveX control is provided by LunchApp.ocx. It contains a method called Run, which takes three parameters:...

Stack overflow

Multiple stack-based multiple buffer overflows in the BRWOSSRE2UC.dll ActiveX Control in Sina UC2006 and earlier allow remote attackers to execute arbitrary code via a long string in the 1 astrVerion parameter to the SendChatRoomOpt function or 2 the astrDownDir parameter to the SendDownLoadFile...

CVE-2007-0174

Multiple stack-based multiple buffer overflows in the BRWOSSRE2UC.dll ActiveX Control in Sina UC2006 and earlier allow remote attackers to execute arbitrary code via a long string in the 1 astrVerion parameter to the SendChatRoomOpt function or 2 the astrDownDir parameter to the SendDownLoadFile...

CVE-2007-0174

Multiple stack-based multiple buffer overflows in the BRWOSSRE2UC.dll ActiveX Control in Sina UC2006 and earlier allow remote attackers to execute arbitrary code via a long string in the 1 astrVerion parameter to the SendChatRoomOpt function or 2 the astrDownDir parameter to the SendDownLoadFile...

CVE-2007-0174

CVE-2007-0174 affects Sina UC2006 and earlier via the BRWOSSRE2UC.dll ActiveX Control. Two vulnerable paths: SendChatRoomOpt with a long astrVerion string, and SendDownLoadFile with a long astrDownDir string. This causes stack-based buffer overflows that allow remote code execution. Exploitation ...

winzip overflow exploit-vulnerability warning-the black bar safety net

Before seen a FileView ActiveX control overflow,but not this function,published online in the overflow code is also not very good, This is CreateNewFolderFromName function overflow,but since the front is a vulnerability issue,! Microsoft seems to have disabled this control, The test can be delete...

CVE-2006-6885

An ActiveX control in SwDir.dll in Macromedia Shockwave 10 allows remote attackers to cause a denial of service Internet Explorer 7 crash via a long string in the swURL attribute...

CVE-2006-6885

The CVE describes a vulnerability in Macromedia Shockwave 10 where an ActiveX control in SwDir.dll (SwDir ActiveX) can be abused by sending a long string in the swURL attribute to cause a denial of service (IE7 crash). Affected component: SwDir.dll ActiveX control within Shockwave 10. Root cause:...

CVE-2006-6884

Buffer overflow in the WZFILEVIEW.FileViewCtrl.61 ActiveX control aka Sky Software "FileView" ActiveX control for WinZip 10.0 Build 6667 allows remote attackers to execute arbitrary code via a long argument to the CreateNewFolderFromName method, a different vulnerability than CVE-2006-5198...

CVE-2006-6884

A buffer overflow exists in the WZFILEVIEW.FileViewCtrl.61 ActiveX control (also known as the Sky Software "FileView" ActiveX control) within WinZip 10.0 Build 6667 . The vulnerability is triggered by providing a long argument to the CreateNewFolderFromName method, allowing remote attackers to ex...

CVE-2006-6884: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the WZFILEVIEW.FileViewCtrl.61 ActiveX control aka Sky Software "FileView" ActiveX control for WinZip 10.0 Build 6667 allows remote attackers to execute arbitrary code via a long argument to the CreateNewFolderFromName method, a different vulnerability than CVE-2006-5198...

Citrix ICA Client ActiveX control buffer overflow

Overview A vulnerability in an ActiveX control provided with the Citrix Presentation Server Client could allow a remote attacker to execute arbitrary code on an affected system. Description The Citrix Presentation Server Client software provides an ActiveX control that can be used to integrate th...

CVE-2006-6488

Stack-based buffer overflow in the DoModal function in the Dialog Wrapper Module ActiveX control DlgWrapper.dll before 8.4.166.0, as used by ICONICS OPC Enabled Gauge, Switch, and Vessel ActiveX, allows remote attackers to execute arbitrary code via a long 1 FileName or 2 Filter argument...