6210 matches found
CVE-2006-6659
The Microsoft Office Outlook Recipient ActiveX control ole32.dll in Windows XP SP2 allows remote attackers to cause a denial of service Internet Explorer 7 hang via crafted HTML...
RealPlayer 10.5 - ActiveX Control Denial of Service
RealPlayer.Initialize"AA","defaultV" milw0rm.com 2006-12-20...
RealPlayer 10.5 (ActiveX Control) Denial of Service Exploit
Exploit for unknown platform in category dos / poc =========================================================== RealPlayer 10.5 ActiveX Control Denial of Service Exploit =========================================================== RealPlayer.Initialize"AA","defaultV" 0day.today 2018-01-05...
CVE-2006-6659: Undefined Security Weakness
The Microsoft Office Outlook Recipient ActiveX control ole32.dll in Windows XP SP2 allows remote attackers to cause a denial of service Internet Explorer 7 hang via crafted HTML...
Microsoft Outlook - ActiveX Control Remote Internet Explorer Denial of Service
source: https://www.securityfocus.com/bid/21649/info The Microsoft Office Outlook Recipient Control is prone to a denial-of-service vulnerability. An attacker can exploit this issue to trigger denial-of-service conditions in Internet Explorer or other applications that use the ActiveX control...
Microsoft Outlook - ActiveX Control Remote Internet Explorer Denial of Service
Microsoft Outlook - ActiveX Control Remote Internet Explorer Denial of Service source: https://www.securityfocus.com/bid/21649/info The Microsoft Office Outlook Recipient Control is prone to a denial-of-service vulnerability. An attacker can exploit this issue to trigger denial-of-service...
CVE-2006-6603
Buffer overflow in the YMMAPI.YMailAttach ActiveX control ymmapi.dll before 2005.1.1.4 in Yahoo! Messenger allows remote attackers to execute arbitrary code via a crafted HTML document. NOTE: some details were obtained from third party information...
CVE-2006-6603
Buffer overflow in the YMMAPI.YMailAttach ActiveX control ymmapi.dll before 2005.1.1.4 in Yahoo! Messenger allows remote attackers to execute arbitrary code via a crafted HTML document. NOTE: some details were obtained from third party information...
CVE-2006-6603
CVE-2006-6603 is a buffer overflow in Yahoo! Messenger’s YMMAPI.YMailAttach ActiveX control (ymmapi.dll). A crafted HTML document could trigger code execution with the user’s privileges. The vulnerability affects Yahoo! Messenger prior to version 2005.1.1.4; Yahoo’s security update fixes versions...
Yahoo! Messenger YMMAPI.YMailAttach ActiveX (ymmapi.dll) Overflow
The remote host contains a version of the 'YMailAttach' ActiveX control included with Yahoo! Messenger. The version of this ActiveX control on the remote host reportedly has an unspecified buffer overflow. If an attacker can trick a user on the affected host into visiting a specially crafted web...
CVE-2006-6510
An unspecified ActiveX control in SiteKiosk before 6.5.150 is installed "safe for scripting", which allows local users to bypass security protections and read arbitrary files via certain functions...
CVE-2006-6510
An unspecified ActiveX control in SiteKiosk before 6.5.150 is installed "safe for scripting", which allows local users to bypass security protections and read arbitrary files via certain functions...
CVE-2006-6510
SiteKiosk pre-6.5.150 contains an unspecified ActiveX control labeled “safe for scripting” that can bypass protections and read arbitrary files via certain functions. This is documented across CVE-2006-6510 sources (NVD), and corroborated by the Nessus entry noting additional locally exploitable ...
CVE-2006-6510: Undefined Security Weakness
An unspecified ActiveX control in SiteKiosk before 6.5.150 is installed "safe for scripting", which allows local users to bypass security protections and read arbitrary files via certain functions...
Microsoft Visual Studio “WMI Object Broker”控件代码执行漏洞（MS06-073）
Microsoft Visual Studio是微软公司的开发工具套件系列产品，是一个基本完整的开发工具集，包括了软件整个生命周期中所需要的大部分工具。 Visual Studio的"WMI Object Broker"控件在例程的创建和处理上存在漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意恶意代码。 Visual Studio所捆绑的WMI Object Broker ActiveX控件允许创建系统上已有的ActiveX控件例程。以这种方式创建的ActiveX对象会绕过ActiveX安全限制，如忽略kill bit和safe for...
ZDI-06-047: Microsoft Visual Studio WmiScriptUtils.dll Cross-Zone Scripting Vulnerability
ZDI-06-047: Microsoft Visual Studio WmiScriptUtils.dll Cross-Zone Scripting Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-047.html December 12, 2006 -- CVE ID: CVE-2006-4704 -- Affected Vendor: Microsoft -- Affected Products: Visual Studio 2005 Standard Edition Visual Studio 20...
Microsoft Visual Studio WmiScriptUtils.dll Cross-Zone Scripting Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. Successful exploitation requires that the target user browse to a malicious web page. The specific flaw exists in the Microsoft WMIScriptUtils.WMIObjectBroker2 ActiveX...
CVE-2006-6442
Stack-based buffer overflow in the SetClientInfo function in the CDDBControlAOL.CDDBAOLControl ActiveX control cddbcontrol.dll, as used in America Online AOL 7.0 4114.563, 8.0 4129.230, and 9.0 Security Edition 4156.910, and possibly other products, allows remote attackers to execute arbitrary co...
CVE-2006-6442
Stack-based buffer overflow in the SetClientInfo function in the CDDBControlAOL.CDDBAOLControl ActiveX control cddbcontrol.dll, as used in America Online AOL 7.0 4114.563, 8.0 4129.230, and 9.0 Security Edition 4156.910, and possibly other products, allows remote attackers to execute arbitrary co...