563 matches found
Buffer overflow
Multiple buffer overflows in unspecified ActiveX controls in COM objects in Avaya IP Softphone R5.2 before SP3, and R6.0, allow remote attackers to execute arbitrary code via unspecified vectors...
CVE-2007-3286
Multiple buffer overflows in unspecified ActiveX controls in COM objects in Avaya IP Softphone R5.2 before SP3, and R6.0, allow remote attackers to execute arbitrary code via unspecified vectors...
CVE-2007-3286: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple buffer overflows in unspecified ActiveX controls in COM objects in Avaya IP Softphone R5.2 before SP3, and R6.0, allow remote attackers to execute arbitrary code via unspecified vectors...
CVE-2007-4802
Multiple heap-based buffer overflows in GlobalLink 2.7.0.8 allow remote attackers to execute arbitrary code via 1 a long eighth argument to the SetInfo method in a certain ActiveX control in glItemCom.dll or 2 a long second argument to the SetClientInfo method in a certain ActiveX control in...
Microsoft Agent fails to properly handle specially crafted URLs
Overview Microsoft Agent fails to properly handle specially crafted URLs, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system Description Microsoft Agent is software that provides animated characters to enhance interaction with computer systems...
Stack overflow
Stack-based buffer overflow in certain ActiveX controls in 1 FPOLE.OCX 6.0.8450.0 and 2 Foxtlib.ocx, as used in the Microsoft Visual FoxPro 6.0 fpole 1.0 Type Library; and Internet Explorer 5.01, 6 SP1 and SP2, and 7; allows remote attackers to execute arbitrary code via a long first argument to...
CVE-2007-4790
Stack-based buffer overflow in certain ActiveX controls in 1 FPOLE.OCX 6.0.8450.0 and 2 Foxtlib.ocx, as used in the Microsoft Visual FoxPro 6.0 fpole 1.0 Type Library; and Internet Explorer 5.01, 6 SP1 and SP2, and 7; allows remote attackers to execute arbitrary code via a long first argument to...
Move Networks Quantum Streaming Player ActiveX stack buffer overflows
Overview The Move Networks Quantum Streaming Player ActiveX controls contain multiple stack buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Move Networks Quantum Streaming Player is an ActiveX video player for use ...
InterActual Player IAMCE ActiveX control stack buffer overflow
Overview The InterActual Player IAMCE ActiveX control contains a stack buffer overflow, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description InterActual Player is a video DVD playing application for Windows systems. InterActual Player wa...
Input validation
Multiple unspecified "input validation error" vulnerabilities in multiple ActiveX controls in NavComUI.dll, as used in multiple Norton AntiVirus, Internet Security, and System Works products for 2006, allows remote attackers to execute arbitrary code via 1 the AnomalyList property to...
CVE-2007-2955
Multiple unspecified "input validation error" vulnerabilities in multiple ActiveX controls in NavComUI.dll, as used in multiple Norton AntiVirus, Internet Security, and System Works products for 2006, allows remote attackers to execute arbitrary code via 1 the AnomalyList property to...
CVE-2007-2955
CVE-2007-2955 affects Symantec Norton product NavComUI.dll’s ActiveX controls AxSysListView32 and AxSysListView32OAA. The vulnerability arises from input validation errors when handling the properties “AnomalyList” and “Anomaly,” enabling a remote attacker to execute arbitrary code via specially ...
CVE-2007-2955
Multiple unspecified "input validation error" vulnerabilities in multiple ActiveX controls in NavComUI.dll, as used in multiple Norton AntiVirus, Internet Security, and System Works products for 2006, allows remote attackers to execute arbitrary code via 1 the AnomalyList property to...
Stack overflow
Multiple stack-based buffer overflows in a InterActual Player 2.60.12.0717 and b Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via a 1 long FailURL attribute in the IAMCE ActiveX Control IAMCE.dll or a 2 long URLCode attribute in the IAKey ActiveX Control IAKey.dll. NOTE:...
NGS-enjoysap-heap.txt
======= Summary ======= Name: EnjoySAP, SAP GUI for Windows - Heap Overflow Release Date: 5 July 2007 Reference: NGS00482 Discover: Mark Litchfield Vendor: SAP Vendor Reference: SECRES-290 Systems Affected: All ASCII Versions Risk: High Status: Fixed ======== TimeLine ======== Discovered: 4 Janua...
NGS-enjoysap-stack.txt
======= Summary ======= Name: EnjoySAP, SAP GUI for Windows - Stack Overflow Release Date: 5 July 2007 Reference: NGS00483 Discover: Mark Litchfield Vendor: SAP Vendor Reference: SECRES-289 Systems Affected: All Versions Risk: High Status: Fixed ======== TimeLine ======== Discovered: 4 January 20...
Code injection
Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to cause a denial of service process crash via unspecified vectors...
Code injection
Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to create certain files via unspecified vectors...