6210 matches found
CVE-2005-0360: Undefined Security Weakness
The Microsoft Log Sink Class ActiveX control in pkmcore.dll is marked as "safe for scripting" for Internet Explorer, which allows remote attackers to create or append to arbitrary files...
CVE-2002-1795: Undefined Security Weakness
Cross-site scripting XSS vulnerability in connect.asp in Microsoft Terminal Services Advanced Client TSAC ActiveX control allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
Microsoft Log Sink Class ActiveX control incorrectly marked "safe for scripting"
Overview The Microsoft Log Sink Class ActiveX control is incorrectly marked safe for scripting. This may allow a remote attacker to create or append to arbitrary files on a vulnerable system. Description ActiveXActiveX is a technology that allows programmers to create reusable software components...
RealPlayer / RealOne Player for Windows Multiple Vulnerabilities (2005-06-23)
According to its build number, the installed version of RealPlayer / RealOne Player for Windows has several vulnerabilities : - A malicious MP3 file can be used to overwrite an arbitrary file or execute an ActiveX control. - Using a specially crafted RealMedia file, an attacker may be able to cau...
Adobe Acrobat and Acrobat Reader vulnerable to information disclosure via "LoadFile()" method in ActiveX control
Overview Adobe Acrobat Reader and Acrobat web control contain a flaw that allows the existence of local files to be discovered. Description The Adobe Acrobat Internet Explorer ActiveX web control may disclose the existence of local files if the LoadFile method is called with the complete file nam...
CVE-2004-1947
The AVXSCANONLINE.AvxScanOnlineCtrl.1 ActiveX control in BitDefender Scan Online allows remote attackers to 1 obtain sensitive information such as system drives and contents or 2 use the RequestFile method to download and execute arbitrary code via an object codebase that uses bitdefender.cab...
Adobe SVG Viewer multiple bugs
ActiveX control contains few metods used to access local and remote files, scripting in local zone, crossite scripting...
Local file detection bug found through Adobe SVG Viewer
Hyperdose Security Advisory Name: Local file detection bug found through Adobe SVG Viewer Systems Affected: v3.0 unclear if earlier versions were affected Severity: Low Author: Robert Fly - [email protected] Advisory URL: http://www.hyperdose.com/advisories/H2005-07.txt --Adobe Description--...
CVE-2005-0918
The NPSVG3.dll ActiveX control for Adobe SVG Viewer 3.02 and earlier, when running on Internet Explorer, allows remote attackers to determine the existence of arbitrary files by setting the src property to the target filename and using Javascript to determine if the web page immediately stops...
CVE-2005-0918
The issue concerns the NPSVG3.dll ActiveX control used by Adobe SVG Viewer (versions 3.02 and earlier) on Internet Explorer. The vulnerability allows remote attackers to infer the existence of arbitrary files by setting the control’s src property to a target filename and observing whether the pag...
PT-2005-1945 · Adobe · Svg Viewer
Name of the Vulnerable Software and Affected Versions: Adobe SVG Viewer versions 3.02 and earlier Description: The issue allows remote attackers to determine the existence of arbitrary files by setting the src property to the target filename and using Javascript to determine if the web page...
CVE-2005-0918: Observable Discrepancy
The NPSVG3.dll ActiveX control for Adobe SVG Viewer 3.02 and earlier, when running on Internet Explorer, allows remote attackers to determine the existence of arbitrary files by setting the src property to the target filename and using Javascript to determine if the web page immediately stops...
Adobe SVG Viewer 3.0 - ActiveX Control SRC Information Disclosure
source: https://www.securityfocus.com/bid/13490/info The Adobe SVG Viewer ActiveX control is prone to an information disclosure vulnerability. Reports indicate that the Adobe SVG Viewer ActiveX control may be employed to disclose the existence of a target file. Information that is harvested by...
[SNS Advisory No.80] nProtect:Netizen Arbitrary File Download Vulnerability
------------------------------------------------------------------ SNS Advisory No.80 nProtect:Netizen Arbitrary File Download Vulnerability Problem first discovered on: Wed, 13 Apr 2005 Published on: Mon, 25 Apr 2005 ------------------------------------------------------------------ Severity...
Local file detection found through Adobe Reader ActiveX control
Hyperdose Security Advisory Name: Local file detection found through Adobe Reader ActiveX control Systems Affected: Adobe Reader 7.0 and earlier Severity: Low Author: Robert Fly - [email protected] Advisory URL: http://www.hyperdose.com/advisories/H2005-06.txt --Adobe Description-- From...
CVE-1999-1578
CVE-1999-1578 involves a buffer overflow in the Registration Wizard ActiveX control (regwizc.dll, InvokeRegWizard) version 3.0.0.0, used by Internet Explorer 4.01 and 5. The root cause is a buffer overflow in the ActiveX control, which allows remote attackers to execute arbitrary commands. The vu...
CVE-1999-1579
CVE-1999-1579 affects the Cenroll ActiveX control (xenroll.dll) used in Terminal Server Editions of Windows NT 4.0 and Windows NT Server 4.0 prior to SP6. The vulnerability enables remote attackers to cause a denial of service via resource consumption by creating a large number of arbitrary files...
CVE-1999-1576
Buffer overflow in Adobe Acrobat ActiveX control pdf.ocx, PDF.PdfCtrl.1 1.3.188 for Acrobat Reader 4.0 allows remote attackers to execute arbitrary code via the pdf.setview method...