6210 matches found
CVE-2006-6838
Rediff Bol Downloader ActiveX OCX control allows remote attackers to execute arbitrary files, and obtain sensitive information usernames and pathnames, via a URL in the url vbscript parameter...
CVE-2006-6847
An ActiveX control in ierpplug.dll for RealNetworks RealPlayer 10.5 allows remote attackers to cause a denial of service Internet Explorer 7 crash by invoking the RealPlayer.OpenURLInPlayerBrowser method with a long second argument...
WinZip FileView ActiveX controls CreateNewFolderFromName Method Buffer Overflow Vulnerability
WinZip FileView ActiveX controls CreateNewFolderFromName Method Buffer Overflow Vulnerability ------------------------------------------------------------------ SUMMARY: A vulnerability has been identified in Winzip 10.0 Build 6667,May be other version, which could be exploited by remote or local...
ICONICS Dialog Wrapper Module ActiveX control buffer overflow
Buffer overflow in DoModal method...
CVE-2006-6488: Undefined Security Weakness
Stack-based buffer overflow in the DoModal function in the Dialog Wrapper Module ActiveX control DlgWrapper.dll before 8.4.166.0, as used by ICONICS OPC Enabled Gauge, Switch, and Vessel ActiveX, allows remote attackers to execute arbitrary code via a long 1 FileName or 2 Filter argument...
SiteKiosk < 6.5.150 Multiple Vulnerabilities
According to its version number, the installation of SiteKiosk on the remote host contains an unspecified ActiveX control that is marked as 'safe for scripting' yet exposes two dangerous methods that reading and downloading of any file from the kiosk. In addition, it fails to completely sanitize...
rediffbol.txt
Rediff Bol Downloader Allows Downloading and Spawning Arbitary Files Affected Program : Rediff Bol Download ActiveX ActiveX OCX Control that downloads the Rediff Bol Messenger setup and spawns it. Related URL : http://messenger.rediff.com/newbol/ Discovered by : Gregory R. Panakkal Vulnerability...
Rediff Bol Downloader (ActiveX Control) Execute Local File Exploit
No description provided by source. !-- Rediff Bol Downloader ActiveX Allows Downloading and Spawning Arbitary Files Affected Program : Rediff Bol Download ActiveX ActiveX OCX Control that downloads the Rediff Bol Messenger setup and spawns it. Related URL : http://messenger.rediff.com/newbol/...
CVE-2006-6884
Buffer overflow in the WZFILEVIEW.FileViewCtrl.61 ActiveX control aka Sky Software "FileView" ActiveX control for WinZip 10.0 Build 6667 allows remote attackers to execute arbitrary code via a long argument to the CreateNewFolderFromName method, a different vulnerability than CVE-2006-5198...
CVE-2006-6488
Stack-based buffer overflow in the DoModal function in the Dialog Wrapper Module ActiveX control DlgWrapper.dll before 8.4.166.0, as used by ICONICS OPC Enabled Gauge, Switch, and Vessel ActiveX, allows remote attackers to execute arbitrary code via a long 1 FileName or 2 Filter argument...
CVE-2006-6838
Rediff Bol Downloader ActiveX OCX control allows remote attackers to execute arbitrary files, and obtain sensitive information usernames and pathnames, via a URL in the url vbscript parameter...
CVE-2006-6847
An ActiveX control in ierpplug.dll for RealNetworks RealPlayer 10.5 allows remote attackers to cause a denial of service Internet Explorer 7 crash by invoking the RealPlayer.OpenURLInPlayerBrowser method with a long second argument...
PT-2006-7435 · Rediff · Rediff Bol Downloader Activex
Name of the Vulnerable Software and Affected Versions: Rediff Bol Downloader ActiveX OCX control affected versions not specified Description: The issue allows remote attackers to execute arbitrary files and obtain sensitive information, such as usernames and pathnames, by providing a URL in the u...
Rediff Bol Downloader - ActiveX Control Execute Local File
Rediff Bol Downloader - ActiveX Control Execute Local File rboldwn.url = "file://C:/WINNT/Notepad.exe" rboldwn.fontsize = 14 rboldwn.barcolor = EE4E00 rboldwn.start = "start" milw0rm.com 2006-12-31...
Rediff Bol Downloader (ActiveX Control) Execute Local File Exploit
Exploit for unknown platform in category remote exploits ================================================================== Rediff Bol Downloader ActiveX Control Execute Local File Exploit ================================================================== rboldwn.url = "file://C:/WINNT/Notepad.ex...
[Full-disclosure] Rediff Bol Downloader ActiveX Allows Downloading and Spawning Arbitary Files
Rediff Bol Downloader ActiveX Allows Downloading and Spawning Arbitary Files Affected Program : Rediff Bol Download ActiveX ActiveX OCX Control that downloads the Rediff Bol Messenger setup and spawns it. Related URL : http://messenger.rediff.com/newbol/ Discovered by : Gregory R. Panakkal...
Rediff Bol Downloader - ActiveX Control Execute Local File
rboldwn.url = "file://C:/WINNT/Notepad.exe" rboldwn.fontsize = 14 rboldwn.barcolor = EE4E00 rboldwn.start = "start" milw0rm.com 2006-12-31...
[SA23463] NeoTrace Express/Pro ActiveX Control "TraceTarget()" Buffer Overflow
TITLE: NeoTrace Express/Pro ActiveX Control "TraceTarget" Buffer Overflow SECUNIA ADVISORY ID: SA23463 VERIFY ADVISORY: http://secunia.com/advisories/23463/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: NeoTrace Pro 3.x http://secunia.com/product/7223/ NeoTrace...
CVE-2006-6707
Stack-based buffer overflow in the NeoTraceExplorer.NeoTraceLoader ActiveX control NeoTraceExplorer.dll in NeoTrace Express 3.25 and NeoTrace Pro aka McAfee Visual Trace 3.25 allows remote attackers to execute arbitrary code via a long argument string to the TraceTarget method. NOTE: The provenan...