CVE-2008-1307

Heap-based buffer overflow in the KUpdateObj2 Class ActiveX control in UpdateOcx2.dll in Beijing KingSoft Antivirus Online Update Module 2007.12.29.29 allows remote attackers to execute arbitrary code via a long argument to the SetUninstallName method...

CVE-2008-1309

The RealPlayer rmoc3260.dll ActiveX control in RealPlayer Enterprise/RealPlayer 10/10.5 and RealPlayer 11 (pre-builds) contains a heap-memory corruption flaw in the Console/Controls properties that enables arbitrary code execution or a browser crash after sending long strings, as described in CVE...

CVE-2008-1307

CVE-2008-1307 describes a heap-based buffer overflow in the KUpdateObj2 ActiveX control (UpdateOcx2.dll) of Beijing KingSoft Antivirus Online Update Module 2007.12.29.29. A long argument to the SetUninstallName method allows remote attackers to execute arbitrary code. The vulnerability is documen...

CVE-2007-6253

Multiple buffer overflows in Adobe Form Designer 5.0 and Form Client 5.0 allow remote attackers to execute arbitrary code via unknown vectors in the 1 Adobe File Dialog Button FileDlg.dll and the 2 Adobe Copy to Server Object SvrCopy.dll ActiveX controls...

Buffer overflow

Multiple buffer overflows in Adobe Form Designer 5.0 and Form Client 5.0 allow remote attackers to execute arbitrary code via unknown vectors in the 1 Adobe File Dialog Button FileDlg.dll and the 2 Adobe Copy to Server Object SvrCopy.dll ActiveX controls...

Microsoft Office Web Components OWC.Spreadsheet.9 ActiveX Control overflow

Added: 03/12/2008 CVE: CVE-2006-4695 BID: 28135 OSVDB: 42711 Background Microsoft Office Web Components OWC are a group of OLE classes implemented as ActiveX controls. Problem A buffer overflow vulnerability in the OWC.Spreadsheet.9 ActiveX control allows command execution when a user loads a web...

Microsoft Office Web Components Spreadsheet ActiveX control URL parsing stack buffer overflow

Overview The Microsoft Office Web Components ActiveX controls contain a stack buffer overflow in the processing of URLs, which allows a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft Office Web Components are ActiveX controls that provide...

Microsoft Office Web Components OWC.Spreadsheet.9 ActiveX Control overflow

Added: 03/12/2008 CVE: CVE-2006-4695 BID: 28135 OSVDB: 42711 Background Microsoft Office Web Components OWC are a group of OLE classes implemented as ActiveX controls. Problem A buffer overflow vulnerability in the OWC.Spreadsheet.9 ActiveX control allows command execution when a user loads a web...

Microsoft Office Web Components OWC.Spreadsheet.9 ActiveX Control overflow

Added: 03/12/2008 CVE: CVE-2006-4695 BID: 28135 OSVDB: 42711 Background Microsoft Office Web Components OWC are a group of OLE classes implemented as ActiveX controls. Problem A buffer overflow vulnerability in the OWC.Spreadsheet.9 ActiveX control allows command execution when a user loads a web...

Adobe Form Designer and Advanced Form Client ActiveX controls contain multiple buffer overflows

Overview Adobe Form Designer and Advanced Form Client contain multiple ActiveX buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The Adobe Form Designer and Advanced Form Client software provide multiple ActiveX...

RealPlayer ActiveX (rmoc3260.dll) Console Property Memory Corruption Arbitrary Code Execution

The remote host contains the Real Player ActiveX control, included with the RealPlayer media player, used to play content in a browser. The version of this control installed on the remote host reportedly contains a buffer overflow that can be leveraged by calls to various methods, such as...

Microsoft Office Web Components OWC.Spreadsheet.9 ActiveX Control overflow

Added: 03/12/2008 CVE: CVE-2006-4695 BID: 28135 OSVDB: 42711 Background Microsoft Office Web Components OWC are a group of OLE classes implemented as ActiveX controls. Problem A buffer overflow vulnerability in the OWC.Spreadsheet.9 ActiveX control allows command execution when a user loads a web...

CVE-2007-6253

Multiple buffer overflows in Adobe Form Designer 5.0 and Form Client 5.0 allow remote attackers to execute arbitrary code via unknown vectors in the 1 Adobe File Dialog Button FileDlg.dll and the 2 Adobe Copy to Server Object SvrCopy.dll ActiveX controls...

Microsoft Office Web Components ActiveX Control DataSource Remote Code Execution Vulnerability

Description Microsoft Office Web Components is prone to a remote code-execution vulnerability. An attacker may exploit this issue by enticing victims into opening a maliciously crafted HTML document. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the conte...

Real Networks RealPlayer 'rmoc3260.dll' ActiveX控件内存破坏漏洞

BUGTRAQ ID: 28157 CNCAN ID:CNCAN-2008031113 Real Networks RealPlayer是一款流行的媒体播放程序。 Real Networks RealPlayer包含的'rmoc3260.dll' ActiveX控件存在内存破坏问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 问题存在于'rmoc3260.dll' ActiveX控件，版本为6.0.10.4： 2F542A2E-EDC9-4BF7-8CB1-87C9919F7F93 CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA...

Kingsoft Antivirus在线升级模块ActiveX控件远程缓冲区溢出漏洞

BUGTRAQ ID: 28172 CNCAN ID:CNCAN-2008031108 Kingsoft Antivirus Online Update Module是一款反病毒在线升级模块。 Kingsoft Antivirus在线升级模块包含的ActiveX控件不正确处理用户提交的参数数据，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。...

Novell iPrint Control ActiveX control ExecuteRequest buffer overflow

Added: 03/11/2008 CVE: CVE-2008-0935 BID: 27939 OSVDB: 42063 Background Novell iPrint is an application which allows users to install and manage printers. Novell iPrint installs the Novell iPrint Control ActiveX control named ienipp.ocx. Problem A buffer overflow vulnerability in the ExecuteReque...

Microsoft Office Web Components ActiveX Control URL Parsing Remote Code Execution Vulnerability

Description Microsoft Office Web Components is prone to a remote code-execution vulnerability. An attacker may exploit this issue by enticing victims into opening a maliciously crafted HTML document. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the conte...

Novell iPrint Control ActiveX control ExecuteRequest buffer overflow

Added: 03/11/2008 CVE: CVE-2008-0935 BID: 27939 OSVDB: 42063 Background Novell iPrint is an application which allows users to install and manage printers. Novell iPrint installs the Novell iPrint Control ActiveX control named ienipp.ocx. Problem A buffer overflow vulnerability in the ExecuteReque...

Novell iPrint Control ActiveX control ExecuteRequest buffer overflow

Added: 03/11/2008 CVE: CVE-2008-0935 BID: 27939 OSVDB: 42063 Background Novell iPrint is an application which allows users to install and manage printers. Novell iPrint installs the Novell iPrint Control ActiveX control named ienipp.ocx. Problem A buffer overflow vulnerability in the ExecuteReque...