Code injection

Microsoft Internet Explorer 5.01, 6, and 7 uses certain COM objects from 1 Msb1fren.dll, 2 Htmlmm.ocx, and 3 Blnmgrps.dll as ActiveX controls, which allows remote attackers to execute arbitrary code via unspecified vectors, a different issue than CVE-2006-4697...

CVE-2007-0219

CVE-2007-0219 affects Microsoft Internet Explorer 5.01/6/7 via COM objects instantiated as ActiveX controls. The vulnerability arises when IE tries to instantiate COM objects (not intended for IE) such as those in Imjpcksid.dll, Htmlmm.ocx, and Blnmgrps.dll, leading to remote code execution. Open...

CVE-2007-0219

Microsoft Internet Explorer 5.01, 6, and 7 uses certain COM objects from 1 Msb1fren.dll, 2 Htmlmm.ocx, and 3 Blnmgrps.dll as ActiveX controls, which allows remote attackers to execute arbitrary code via unspecified vectors, a different issue than CVE-2006-4697...

CVE-2006-4697

Microsoft Internet Explorer 5.01, 6, and 7 uses certain COM objects from Imjpcksid.dll as ActiveX controls, which allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: this issue might be related to CVE-2006-4193...

CVE-2007-0219: Undefined Security Weakness

Microsoft Internet Explorer 5.01, 6, and 7 uses certain COM objects from 1 Msb1fren.dll, 2 Htmlmm.ocx, and 3 Blnmgrps.dll as ActiveX controls, which allows remote attackers to execute arbitrary code via unspecified vectors, a different issue than CVE-2006-4697...

CVE-2006-4697: Undefined Security Weakness

Microsoft Internet Explorer 5.01, 6, and 7 uses certain COM objects from Imjpcksid.dll as ActiveX controls, which allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: this issue might be related to CVE-2006-4193...

Null pointer dereference

Multiple ActiveX controls in Microsoft Windows 2000, XP, 2003, and Vista allows remote attackers to cause a denial of service Internet Explorer crash by accessing the bgColor, fgColor, linkColor, alinkColor, vlinkColor, or defaultCharset properties in the 1 giffile, 2 htmlfile, 3 jpegfile, 4...

CVE-2007-0612

CVE-2007-0612 affects multiple Windows ActiveX controls via mshtml.dll (and TriEditDocument.triedit.dll) where accessing bgColor/fgColor/linkColor/alinkColor/vlinkColor/defaultCharset in various file objects triggers a NULL pointer dereference, causing Internet Explorer denial of service (crash)....

CVE-2007-0612

Multiple ActiveX controls in Microsoft Windows 2000, XP, 2003, and Vista allows remote attackers to cause a denial of service Internet Explorer crash by accessing the bgColor, fgColor, linkColor, alinkColor, vlinkColor, or defaultCharset properties in the 1 giffile, 2 htmlfile, 3 jpegfile, 4...

Microsoft Internet Explorer 5.0.1 - Multiple ActiveX Controls Denial of Service Vulnerabilities

Microsoft Internet Explorer 5.0.1 - Multiple ActiveX Controls Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/22288/info Microsoft Internet Explorer is prone to multiple denial-of-service vulnerabilities because the application fails to handle exceptional conditions...

Microsoft Internet Explorer 5.0.1 - Multiple ActiveX Controls Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/22288/info Microsoft Internet Explorer is prone to multiple denial-of-service vulnerabilities because the application fails to handle exceptional conditions. These issues are triggered when an attacker entices a victim user to visit a malicious website...

Apple Quicktime HREFTrack Cross-Zone Scripting vulnerability

Overview Web browsers running the Apple QuickTime plugin may allow remote web sites to reference content on the local filesystem. This may allow an attacker to execute script within the security context of the local machine. Description Web browser plugins that allow remote web sites to reference...

Sina UC 2 0 0 6 Activex SendChatRoomOpt Exploit-vulnerability warning-the black bar safety net

Ghost boy: I compile, download address: ! 2007011012544.rar "http://201314.free.fr/attachments/200701/2007011012544.rar" Source: Ph4nt0m ////////////////////////////////////////////////////////////////////////////////////////////////////////////// // Sina UC ActiveX multiple remote stack overflow...

WinZip FileView ActiveX controls CreateNewFolderFromName Method Buffer Overflow Vulnerability

WinZip FileView ActiveX controls CreateNewFolderFromName Method Buffer Overflow Vulnerability ------------------------------------------------------------------ SUMMARY: A vulnerability has been identified in Winzip 10.0 Build 6667,May be other version, which could be exploited by remote or local...

WinZIP 10.0 FileView ActiveX Controls Remote Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================================= WinZIP 10.0 FileView ActiveX Controls Remote Overflow Exploit ============================================================= / ---=== winzip-exploit.html XiaoHui : 76693223at163co...

WinZip 10.0 - FileView ActiveX Controls Remote Overflow

WinZip 10.0 - FileView ActiveX Controls Remote Overflow / ---=== winzip-exploit.html XiaoHui : 76693223at163com HomePage: www.nipc.org.cn c 2006 All rights reserved. note:Because of the prior vuln in FileView ActiveX Control,Micorsoft has disabled this ActiveX Controls, To test this vuln,You can...

WinZip 10.0 - FileView ActiveX Controls Remote Overflow

/ ---=== winzip-exploit.html XiaoHui : 76693223at163com HomePage: www.nipc.org.cn c 2006 All rights reserved. note:Because of the prior vuln in FileView ActiveX Control,Micorsoft has disabled this ActiveX Controls, To test this vuln,You can delete the key:...

Microsoft IE dxtmsft3.dll Multiple ActiveX COM Object DoS

Microsoft Internet Explorer contains a flaw that may allow a remote denial of service. The issue is triggered when a user accesses a malicious web site that contains scripting code calling a number of ActiveX COM objects in the dxtmsft3.dll library, and will result in loss of availability for the...

CVE-2006-3893

Multiple buffer overflows in the ActiveX controls in Newtone ImageKit 5 before Fix 30 and 6 before Fix 40, as used in CASIO Photo Loader software before 3.01 and possibly other software, allow remote attackers to execute arbitrary code via a crafted HTML document...

CVE-2006-3893

Multiple buffer overflows in the ActiveX controls in Newtone ImageKit 5 before Fix 30 and 6 before Fix 40, as used in CASIO Photo Loader software before 3.01 and possibly other software, allow remote attackers to execute arbitrary code via a crafted HTML document...