11388 matches found
Macrovision InstallShield Update Service ActiveX Control Code Execution (CVE-2007-5660)
Macrovision InstallShield is a software tool for creating installers or software packages. This vulnerability is due to errors in the Macrovision InstallShield Update Service ActiveX Control when handling webpage scripts. To trigger this issue, an attacker may create a malicious web page that wil...
VideoLAN VLC axvlc.dll ActiveX Crafted Parameter Remote Code Execution (CVE-2007-6262)
VLC media player is a free multimedia player for various audio and video formats as well as DVDs, VCDs, and various streaming protocols. This vulnerability is due to recursive object release as a result from flaws in the VideoLAN VLC ActiveX Control. To trigger this issue, an attacker may create ...
LinkedIn Toolbar IEContextMenu Buffer Overflow (CVE-2007-3955)
A buffer overflow vulnerability exists in LinkedIn Internet Explorer Toolbar. LinkedIn is a popular business-oriented networking site. This vulnerability is due to errors in the LinkedIn Internet Explorer Toolbar IEContextMenu ActiveX Control when handling overly long arguments sent to the search...
Crystal Reports XI Release 2 (Enterprise Tree Control) - ActiveX Buffer Overflow (Denial of Service) (PoC)
Crystal Reports XI Release 2 Enterprise Tree Control - ActiveX Buffer Overflow Denial of Service PoC Application: Crystal Reports XI Release 2 Enterprise Tree Control Remote BoF/Dos www.businessobjects.com Versions: 11 Platforms: Windows XP Professional Bug: buffer-overflow Exploitation: remote...
Crystal Reports XI Release 2 (Enterprise Tree Control) - ActiveX Buffer Overflow (Denial of Service) (PoC)
Application: Crystal Reports XI Release 2 Enterprise Tree Control Remote BoF/Dos www.businessobjects.com Versions: 11 Platforms: Windows XP Professional Bug: buffer-overflow Exploitation: remote Date: 2007-01-16 Author: shinnai e-mail: shinnaiatautisticidotorg web: http://shinnai.altervista.org 1...
StreamAudio ChainCast VMR客户端代理ActiveX控件栈溢出漏洞
BUGTRAQ ID: 27247 StreamAudio用于为在线收音机广播提供流媒体服务。 StreamAudio所带的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 StreamAudio使用Ccpm.ProxyManager.1...
Macrovision FLEXnet Connect ActiveX控件任意文件下载漏洞
BUGTRAQ ID: 27279 Macrovision FLEXnet Connect是一种应用软件的厂商为用户提供产品相关的更新及信息发布的工具。 FLEXnet Connect的ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞下载任意文件到用户系统。 FLEXnet Connect所使用的DownloadManager控件： ISDM.exe version 6.1.100.61372 MVSNClientDownloadManager61Lib.DownloadManager FCED4482-7CCB-4E6F-86C9-DCB22B52843C...
[Full-disclosure] Macrovision FlexNet Connect DownloadManager Insecure Methods
Who: Macrovision What: Macrovision FlexNext Connect is a software package that allows ISV's to update their software products. It is generally used in conjunction with the InstallShield software deploymnet framework. FlexNet uses a number of ActiveX controls, some of which are marked safe for...
Integrity Clientless Security (ICS) Update 3.7.201.0
Check Point Integrity Clientless Security ICS protects your Web site by detecting and disabling spyware processes and allowing you to enforce security policies before a user logs onto your network. Using ICS you can prevent users with potentially harmful software from accessing your Web site, a...
flexnet-overwrite.txt
Who: Macrovision What: Macrovision FlexNext Connect is a software package that allows ISV's to update their software products. It is generally used in conjunction with the InstallShield software deploymnet framework. FlexNet uses a number of ActiveX controls, some of which are marked safe for...
StreamAudio ChainCast ProxyManager ActiveX buffer overflow
Buffer overflow in InternalTuneIn...
联众世界GLChat.ocx ActiveX Control BoF exploit
No description provided by source. define CRTSECURENODEPRECATE include windows.h include stdio.h const unsigned char shellcode174 = 0xE8, 0x00, 0x00, 0x00, 0x00, 0x6A, 0x03, 0xEB, 0x21, 0x7E, 0xD8, 0xE2, 0x73, 0x98, 0xFE, 0x8A, ...
CVE-2008-0248
Buffer overflow in an ActiveX control in ccpm0237.dll for StreamAudio ChainCast ProxyManager allows remote attackers to execute arbitrary code via a long URL argument to the InternalTuneIn method...
Buffer overflow
Buffer overflow in an ActiveX control in ccpm0237.dll for StreamAudio ChainCast ProxyManager allows remote attackers to execute arbitrary code via a long URL argument to the InternalTuneIn method...
CVE-2008-0248
CVE-2008-0248 describes a buffer overflow in an ActiveX control (ccpm_0237.dll) used by StreamAudio ChainCast ProxyManager. The overflow can be triggered by a long URL argument to the InternalTuneIn method, allowing remote attackers to execute arbitrary code. The description and references indica...
CVE-2008-0248
Buffer overflow in an ActiveX control in ccpm0237.dll for StreamAudio ChainCast ProxyManager allows remote attackers to execute arbitrary code via a long URL argument to the InternalTuneIn method...
AOL Radio MediaPlaybackControl.exe AmpX ActiveX控件栈溢出漏洞
BUGTRAQ ID: 27207 CVECAN ID: CVE-2007-6250 AOL的AmpX ActiveX控件是AOL Radio使用的用于播放网页中音频流的控件。 AmpX.dll所提供的AmpX ActiveX控件使用了名为AOLMediaPlaybackControl.exe的程序，而AOLMediaPlaybackControl中存在栈溢出漏洞。如果用户受骗访问了恶意网页并向AmpX ActiveX控件的AppendFileToPlayList方式传送了超长参数的话，就可以触发这个溢出，导致执行任意指令。 AOL AmpX.dll 2.6.1.11 临时解决方法：...
CVE-2008-0248: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in an ActiveX control in ccpm0237.dll for StreamAudio ChainCast ProxyManager allows remote attackers to execute arbitrary code via a long URL argument to the InternalTuneIn method...