506 matches found
CVE-2002-2313
Eudora email client 5.1.1, with "use Microsoft viewer" enabled, allows remote attackers to execute arbitrary programs via an HTML email message containing a META refresh tag that references an embedded .mhtml file with ActiveX controls that execute a second embedded program, which is processed by...
Symantec Products ActiveX Control NavComUI.dll Code Execution (CVE-2007-2955)
Symantec products include various software applications that deal with security and information management. A remote attacker could exploit this issue by convincing a user to visit a specially crafted HTML document or open a malicious web page. Successful exploitation could result in remote code...
Electronic Arts SnoopyCtrl ActiveX control and plug-in stack buffer overflows
Overview The Electronic Arts SnoopyCtrl ActiveX control and plug-in contains multiple stack buffer overflows, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Electronic Arts EA.com provides an ActiveX control and Netscape-style...
Buffer overflow
Multiple buffer overflows in unspecified ActiveX controls in COM objects in Avaya IP Softphone R5.2 before SP3, and R6.0, allow remote attackers to execute arbitrary code via unspecified vectors...
CVE-2007-3286
Multiple buffer overflows in unspecified ActiveX controls in COM objects in Avaya IP Softphone R5.2 before SP3, and R6.0, allow remote attackers to execute arbitrary code via unspecified vectors...
CVE-2007-4802
Multiple heap-based buffer overflows in GlobalLink 2.7.0.8 allow remote attackers to execute arbitrary code via 1 a long eighth argument to the SetInfo method in a certain ActiveX control in glItemCom.dll or 2 a long second argument to the SetClientInfo method in a certain ActiveX control in...
Microsoft Agent fails to properly handle specially crafted URLs
Overview Microsoft Agent fails to properly handle specially crafted URLs, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system Description Microsoft Agent is software that provides animated characters to enhance interaction with computer systems...
CVE-2007-4790
Stack-based buffer overflow in certain ActiveX controls in 1 FPOLE.OCX 6.0.8450.0 and 2 Foxtlib.ocx, as used in the Microsoft Visual FoxPro 6.0 fpole 1.0 Type Library; and Internet Explorer 5.01, 6 SP1 and SP2, and 7; allows remote attackers to execute arbitrary code via a long first argument to...
Stack overflow
Stack-based buffer overflow in certain ActiveX controls in 1 FPOLE.OCX 6.0.8450.0 and 2 Foxtlib.ocx, as used in the Microsoft Visual FoxPro 6.0 fpole 1.0 Type Library; and Internet Explorer 5.01, 6 SP1 and SP2, and 7; allows remote attackers to execute arbitrary code via a long first argument to...
Move Networks Quantum Streaming Player ActiveX stack buffer overflows
Overview The Move Networks Quantum Streaming Player ActiveX controls contain multiple stack buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Move Networks Quantum Streaming Player is an ActiveX video player for use ...
InterActual Player IAMCE ActiveX control stack buffer overflow
Overview The InterActual Player IAMCE ActiveX control contains a stack buffer overflow, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description InterActual Player is a video DVD playing application for Windows systems. InterActual Player wa...
CVE-2007-2955
Multiple unspecified "input validation error" vulnerabilities in multiple ActiveX controls in NavComUI.dll, as used in multiple Norton AntiVirus, Internet Security, and System Works products for 2006, allows remote attackers to execute arbitrary code via 1 the AnomalyList property to...
Input validation
Multiple unspecified "input validation error" vulnerabilities in multiple ActiveX controls in NavComUI.dll, as used in multiple Norton AntiVirus, Internet Security, and System Works products for 2006, allows remote attackers to execute arbitrary code via 1 the AnomalyList property to...
CVE-2007-2955
Multiple unspecified "input validation error" vulnerabilities in multiple ActiveX controls in NavComUI.dll, as used in multiple Norton AntiVirus, Internet Security, and System Works products for 2006, allows remote attackers to execute arbitrary code via 1 the AnomalyList property to...
CVE-2007-2955
CVE-2007-2955 affects Symantec Norton product NavComUI.dll’s ActiveX controls AxSysListView32 and AxSysListView32OAA. The vulnerability arises from input validation errors when handling the properties “AnomalyList” and “Anomaly,” enabling a remote attacker to execute arbitrary code via specially ...
Stack overflow
Multiple stack-based buffer overflows in a InterActual Player 2.60.12.0717 and b Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via a 1 long FailURL attribute in the IAMCE ActiveX Control IAMCE.dll or a 2 long URLCode attribute in the IAKey ActiveX Control IAKey.dll. NOTE:...
NGS-enjoysap-heap.txt
======= Summary ======= Name: EnjoySAP, SAP GUI for Windows - Heap Overflow Release Date: 5 July 2007 Reference: NGS00482 Discover: Mark Litchfield Vendor: SAP Vendor Reference: SECRES-290 Systems Affected: All ASCII Versions Risk: High Status: Fixed ======== TimeLine ======== Discovered: 4 Janua...
NGS-enjoysap-stack.txt
======= Summary ======= Name: EnjoySAP, SAP GUI for Windows - Stack Overflow Release Date: 5 July 2007 Reference: NGS00483 Discover: Mark Litchfield Vendor: SAP Vendor Reference: SECRES-289 Systems Affected: All Versions Risk: High Status: Fixed ======== TimeLine ======== Discovered: 4 January 20...