CVE-2004-2635

An ActiveX control for McAfee Security Installer Control System 4.0.0.81 allows remote attackers to access the Windows registry via web pages that use the control's RegQueryValue method...

CVE-2004-1043

Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to execute arbitrary code by using the "Related Topics" command in the Help ActiveX Control hhctrl.ocx to open a Help popup window containing the PCHealth tools.htm file in the local zone and injecting Javascript to be executed, as...

Internet Explorer Help ActiveX Control Local Zone Security Restriction Bypass Vulnerability (updated)

I appologize for the previous vulnerability longnamevuln because it was incomplete. After realizing my mistake, longnamevuln looked useless. However, it was just incomplete, not useless. What longnamevuln did was open a local file in the browser window. To execute active content, it needed to be...

CVE-2004-1324

The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the 1 artist or 2 song fields of a music file, if the file is processed using Internet Explorer...

CVE-2004-1325

The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and the size of the file if the file exists, which allows remote attackers to determine the existence of files on the local system...

Microsoft Windows Media Player 9.0 - ActiveX Control Media File Attribute Corruption

Microsoft Windows Media Player 9.0 - ActiveX Control Media File Attribute Corruption source: https://www.securityfocus.com/bid/12031/info The Windows Media Player ActiveX control is prone to a security weakness. The issue is that the control may be abused by a Web page to change attributes of med...

Microsoft Windows Media Player 9.0 - ActiveX Control File Enumeration

Microsoft Windows Media Player 9.0 - ActiveX Control File Enumeration source: https://www.securityfocus.com/bid/12032/info The Windows Media Player ActiveX control is prone to a security weakness that may allow a malicious Web page to enumerate files that exist on the client computer. This could...

Microsoft Windows Media Player 9.0 - ActiveX Control Media File Attribute Corruption

source: https://www.securityfocus.com/bid/12031/info The Windows Media Player ActiveX control is prone to a security weakness. The issue is that the control may be abused by a Web page to change attributes of media files such as MP3. An attacker can influence attributes such as the artist, song...

Microsoft Windows Media Player 9.0 - ActiveX Control File Enumeration

source: https://www.securityfocus.com/bid/12032/info The Windows Media Player ActiveX control is prone to a security weakness that may allow a malicious Web page to enumerate files that exist on the client computer. This could aid in further attacks. This issue is reported to affect Windows Media...

coffeecupbof.txt

AUTHOR Komrade [email protected] http://unsecure.altervista.org DATE 22/11/2004 PRODUCTS CoffeCup Direct FTP - FTP client for Windows. CoffeeCup Free FTP - free FTP client for Windows. AFFECTED VERSION Versions verified to be vulnerable: CoffeeCup Direct FTP 6.2.0.62 latest version CoffeeCu...

WeOnlyDo! COM Ftp DELUXE ActiveX Control Buffer Overflow Vulnerability

AUTHOR Komrade [email protected] http://unsecure.altervista.org DATE 22/11/2004 PRODUCT WodFtpDLX is an ActiveX component that supports encrypted and non-encrypted FTP access to the servers for transferring files. It can be used in various programs, scripts, web applications to connect to F...

CoffeeCup FTP Clients Buffer Overflow Vulnerability

AUTHOR Komrade [email protected] http://unsecure.altervista.org DATE 22/11/2004 PRODUCTS CoffeCup Direct FTP - FTP client for Windows. CoffeeCup Free FTP - free FTP client for Windows. AFFECTED VERSION Versions verified to be vulnerable: CoffeeCup Direct FTP 6.2.0.62 latest version CoffeeCu...

wodFtpDLX Client ActiveX Control Buffer Overflow Crash Exploit

Exploit for unknown platform in category dos / poc ============================================================== wodFtpDLX Client ActiveX Control Buffer Overflow Crash Exploit ============================================================== / WodFtpDLX Client ActiveX Control Buffer Overflow Crash...

wodFtpDLX Client ActiveX Control Buffer Overflow Crash Exploit

No description provided by source. / WodFtpDLX Client ActiveX Control Buffer Overflow Crash Exploit created by Komrade e-mail: unsecureataltervistadotorg web: http://unsecure.altervista.org Tested on WodFtpDLX.ocx versions 2.3.2.90 - 2.3.0.0 - 2.2.0.1 on a Windows XP Professional sp2 operating...

wodFtpDLX Client - ActiveX Control Buffer Overflow Crash

wodFtpDLX Client - ActiveX Control Buffer Overflow Crash / WodFtpDLX Client ActiveX Control Buffer Overflow Crash Exploit created by Komrade e-mail: unsecureataltervistadotorg web: http://unsecure.altervista.org Tested on WodFtpDLX.ocx versions 2.3.2.90 - 2.3.0.0 - 2.2.0.1 on a Windows XP...

wodFtpDLX Client - ActiveX Control Buffer Overflow Crash

/ WodFtpDLX Client ActiveX Control Buffer Overflow Crash Exploit created by Komrade e-mail: unsecureataltervistadotorg web: http://unsecure.altervista.org Tested on WodFtpDLX.ocx versions 2.3.2.90 - 2.3.0.0 - 2.2.0.1 on a Windows XP Professional sp2 operating system. This exploit creates a fake F...

Internet Explorer HTML Help Control ActiveX crossite scripting

By clicking control element, it's possible to activate script in context of different site or local system...

Microsoft Windows HTML Help Control Cross-Zone Scripting Vulnerability

Description The Microsoft Windows HTML Help ActiveX control hhctrl.ocx is prone to a vulnerability that may permit cross-zone scripting. The HTML Help control is a component that allows help functionality to be inserted in an HTML file. It is possible to exploit this vulnerability through Interne...

Microsoft MSN "Hrtbeat.ocx" ActiveX control contains unspecified vulnerability

Overview A vulnerability exists in the Microsoft MSN "Hrtbeat.ocx" ActiveX control. Description ActiveX is a technology that allows programmers to create reusable software components that can be incorporated into applications to extend their functionality. Microsoft Internet Explorer provides...

Microsoft Internet Explorer Heartbeat ActiveX Control Unspecified Vulnerability

Description An unspecified vulnerability exists in the Microsoft Internet Explorer Heartbeat MSN gaming ActiveX control Hrtbeat.ocx. Technologies Affected Avaya DefinityOne Media Servers Avaya IP600 Media Servers Avaya Modular Messaging MSS 1.1.0 Avaya Modular Messaging MSS 2.0.0 Avaya S3400...