IBM Lotus Domino Web Access ActiveX Control Buffer Overflow Vulnerabilities

The remote host contains the Domino Web Access or iNotes6 Class ActiveX control, which is used by IBM Lotus Domino for uploading files and clearing the cache on logout. The version of this control on the remote host reportedly contains multiple stack-based buffer overflows. If a remote attacker c...

AOL Picture Editor 'YGPPicEdit.dll' ActiveX Control 9.5.1.8 - Multiple Buffer Overflow Vulnerabilities

source: https://www.securityfocus.com/bid/27026/info AOL Picture Editor 'YGPPicEdit.dll' ActiveX control is prone to multiple vulnerabilities that attackers can exploit to crash the application. The issues stem from various buffer-overflow conditions. An attacker can exploit these issues by...

AOL Picture Editor YGPPicEdit.dll ActiveX Control 9.5.1.8 - Multiple Buffer Overflow Vulnerabilities

AOL Picture Editor YGPPicEdit.dll ActiveX Control 9.5.1.8 - Multiple Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/27026/info AOL Picture Editor 'YGPPicEdit.dll' ActiveX control is prone to multiple vulnerabilities that attackers can exploit to crash the application. T...

HP LoadRunner 9.0 ActiveX AddFolder Buffer Overflow

This module exploits a stack buffer overflow in Persits Software Inc's XUpload ActiveX controlversion 2.1.0.1 thats included in HP LoadRunner 9.0. By passing an overly long string to the AddFolder method, an attacker may be able to execute arbitrary code. Module Options msf use...

HP Software Update RulesEngine.dll控件远程文件覆盖漏洞

BUGTRAQ ID: 26950 HP Software Update是HP笔记本中默认安装的自动升级和补丁软件。 HP Software Updates所带的ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞访问或破坏用户系统上的任意文件。 HP Software Updates所安装的RulesEngine.dll控件（CLSID：7CB9D4F5-C492-42A4-93B1-3F7D6946470D，默认路径C:\Program...

HP Software Update HPRulesEngine.ContentCollection ActiveX (RulesEngine.dll) Multiple Insecure Methods

The remote host contains the HP Software Update software, installed by default on many HP notebooks to support automatic software updates and vulnerability patching. The version of this software on the remote host includes an ActiveX control, 'RulesEngineLib', that reportedly contains two insecur...

HP Software Updates ActiveX unauthorized access

Unsafe SaveToFile method allows access to filesystem...

CVE-2007-6513

HP eSupportDiagnostics ActiveX control hpediag.dll 1.0.11.0 exports dangerous methods, which allows remote attackers to 1 read arbitrary files via the ReadTextFile method, or 2 read arbitrary registry values via the ReadValue method...

CVE-2007-6516

Buffer overflow in RavWare Software MAS Flic ActiveX Control masflc.ocx 1.0.0.1 allows remote attackers to execute arbitrary code via a long FileName property...

Security feature bypass

HP eSupportDiagnostics ActiveX control hpediag.dll 1.0.11.0 exports dangerous methods, which allows remote attackers to 1 read arbitrary files via the ReadTextFile method, or 2 read arbitrary registry values via the ReadValue method...

Buffer overflow

Buffer overflow in RavWare Software MAS Flic ActiveX Control masflc.ocx 1.0.0.1 allows remote attackers to execute arbitrary code via a long FileName property...

CVE-2007-6513

HP eSupportDiagnostics ActiveX control (hpediag.dll) version 1.0.11.0 contains exported methods ReadTextFile and ReadValue that allow a remote attacker to read arbitrary files and read arbitrary registry values. This constitutes an information disclosure vulnerability in the HP eSupportDiagnostic...

CVE-2007-6516

Buffer overflow in RavWare Software MAS Flic ActiveX Control masflc.ocx 1.0.0.1 allows remote attackers to execute arbitrary code via a long FileName property...

CVE-2007-6516

The CVE-2007-6516 entry describes a buffer overflow in RavWare Software MAS Flic ActiveX Control (masflc.ocx) version 1.0.0.1, exploitable by sending a long FileName property to enable remote code execution. The vulnerability is documented by multiple sources (NVD, CVE list). The provided connect...

CVE-2007-6513

HP eSupportDiagnostics ActiveX control hpediag.dll 1.0.11.0 exports dangerous methods, which allows remote attackers to 1 read arbitrary files via the ReadTextFile method, or 2 read arbitrary registry values via the ReadValue method...

IBM Domino Web Access Upload Control ActiveX buffer overflow

Buffer overflow in InstallBrowserHelperDll with GeneralServerName property...

Adobe Flash Player ActiveX控件通用跨站脚本漏洞

Adobe Flash Player是一款流行的FLASH播放程序。 Adobe Flash Player包含的ActiveX控件处理navigateToURL API存在缺陷，远程攻击者可以利用漏洞进行跨站脚本攻击，可获得敏感信息或进行其他攻击。 navigateToURL API函数接收两个参数，URL和要浏览的帧名，SWF动画可在javascript: URI中传递而帧名可是其他域的帧名，这可导致URI执行在其他帧安全上下文中执行，攻击者可以构建恶意WEB页，诱使用户访问来触发。 RedHat Enterprise Linux Supplementary v.5 server...

Yahoo工具条YShortcut.dll控件缓冲区溢出漏洞

CNCAN ID:CNCAN-2007122011 Yahoo toolbar是一款嵌入到浏览器的工具条。 Yahoo toolbar包含的ActiveX YShortcut.dll存在缓冲区溢出，远程攻击者可以利用漏洞可能以应用程序进程权限执行任意指令。 YShortcut是Yahoo工具栏允许映射URL为快捷方式的工具，其中IsTaggedBM函数在WEB浏览器地址栏上输入任何东西时调用，如果传递超过3000字符的数据，可导致缓冲区溢出。相对于自身的边界检查，Yahoo依靠IE浏览器上的2083最大URL长度来控制，此对象没有被标记为安全脚本： YShortcut.dll,...

IBM Lotus Domino Web Access ActiveX control stack buffer overflows

Overview The IBM Lotus Domino Web Access ActiveX control contains multiple stack buffer overflow vulnerabilities, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description IBM Lotus Domino includes an ActiveX control called Domino Web Access,...

CVE-2007-6506

The HPRulesEngine.ContentCollection.1 ActiveX Control in RulesEngine.dll for HP Software Update 4.000.005.007 and earlier, including 3.0.8.4, allows remote attackers to 1 overwrite and corrupt arbitrary files via arguments to the SaveToFile method, and possibly 2 access arbitrary files via the...