CVE-2008-0248

CVE-2008-0248 describes a buffer overflow in an ActiveX control (ccpm_0237.dll) used by StreamAudio ChainCast ProxyManager. The overflow can be triggered by a long URL argument to the InternalTuneIn method, allowing remote attackers to execute arbitrary code. The description and references indica...

CVE-2008-0248

Buffer overflow in an ActiveX control in ccpm0237.dll for StreamAudio ChainCast ProxyManager allows remote attackers to execute arbitrary code via a long URL argument to the InternalTuneIn method...

AOL Radio MediaPlaybackControl.exe AmpX ActiveX控件栈溢出漏洞

BUGTRAQ ID: 27207 CVECAN ID: CVE-2007-6250 AOL的AmpX ActiveX控件是AOL Radio使用的用于播放网页中音频流的控件。 AmpX.dll所提供的AmpX ActiveX控件使用了名为AOLMediaPlaybackControl.exe的程序，而AOLMediaPlaybackControl中存在栈溢出漏洞。如果用户受骗访问了恶意网页并向AmpX ActiveX控件的AppendFileToPlayList方式传送了超长参数的话，就可以触发这个溢出，导致执行任意指令。 AOL AmpX.dll 2.6.1.11 临时解决方法：...

CVE-2008-0248: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in an ActiveX control in ccpm0237.dll for StreamAudio ChainCast ProxyManager allows remote attackers to execute arbitrary code via a long URL argument to the InternalTuneIn method...

Design/Logic Flaw

An ActiveX control for Microsoft Visual FoxPro vfp6r.dll 6.0.8862.0 allows remote attackers to execute arbitrary commands by invoking the DoCmd method...

Design/Logic Flaw

The Microsoft VFPOLEServer ActiveX control allows remote attackers to execute arbitrary code by invoking the foxcommand method...

Design/Logic Flaw

The Microsoft Rich Textbox ActiveX Control RICHTX32.OCX 6.1.97.82 allows remote attackers to execute arbitrary commands by invoking the insecure SaveFile method...

CVE-2008-0236

An ActiveX control for Microsoft Visual FoxPro vfp6r.dll 6.0.8862.0 allows remote attackers to execute arbitrary commands by invoking the DoCmd method...

CVE-2008-0235

The Microsoft VFPOLEServer ActiveX control allows remote attackers to execute arbitrary code by invoking the foxcommand method...

CVE-2008-0235

CVE-2008-0235 affects the Microsoft VFP_OLE_Server ActiveX control. The vulnerability allows remote attackers to execute arbitrary code by invoking the foxcommand method. The NVD entry lists a base score of 10.0 (HIGH) with network attack vector and no authentication, indicating a severe remote c...

CVE-2008-0235

The Microsoft VFPOLEServer ActiveX control allows remote attackers to execute arbitrary code by invoking the foxcommand method...

CVE-2008-0236

CVE-2008-0236 concerns an ActiveX control for Microsoft Visual FoxPro (vfp6r.dll 6.0.8862.0). The DoCmd method in the Visual FoxPro vfp6r.dll ActiveX control can be exploited to trigger remote command execution by a user visiting a crafted webpage, with the attack operating in the user’s security...

CVE-2008-0236

An ActiveX control for Microsoft Visual FoxPro vfp6r.dll 6.0.8862.0 allows remote attackers to execute arbitrary commands by invoking the DoCmd method...

CVE-2008-0237

The CVE-2008-0237 entry involves the Microsoft Rich Textbox ActiveX control (Richtx32.ocx, v6.1.97.82). The vulnerability lies in the SaveFile method, which can be abused to create or overwrite arbitrary files via a web page, enabling remote access to write files on the target system. Exploitatio...

CVE-2008-0237

The Microsoft Rich Textbox ActiveX Control RICHTX32.OCX 6.1.97.82 allows remote attackers to execute arbitrary commands by invoking the insecure SaveFile method...

Gateway CWebLaunchCtl ActiveX控件远程栈溢出漏洞

BUGTRAQ ID: 27193 Gateway是美国一个著名的电脑品牌，产品包括PC、笔记本、外围设备等。 Gateway电脑所带的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 Gateway电脑中所安装的CWebLaunchCtl ActiveX控件（weblaunch.ocx）没有正确地验证对DoWebLaunch函数的输入，如果用户受骗访问了恶意网页并向该函数传送了超长参数的话，就可能触发栈溢出，导致执行任意指令。 Gateway weblaunch.ocx 1.0.0.1 临时解决方法： 在IE中禁用CWebLaunchCtl...

Qvod Player 2.1.5 - QvodInsert.dll ActiveX Control Remote Buffer Overflow

Qvod Player 2.1.5 - QvodInsert.dll ActiveX Control Remote Buffer Overflow source: https://www.securityfocus.com/bid/27271/info Qvod Player 'QvodInsert.dll' ActiveX control is prone to is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on...

CVE-2008-0236: Undefined Security Weakness

An ActiveX control for Microsoft Visual FoxPro vfp6r.dll 6.0.8862.0 allows remote attackers to execute arbitrary commands by invoking the DoCmd method...

CVE-2008-0237: Improper Input Validation

The Microsoft Rich Textbox ActiveX Control RICHTX32.OCX 6.1.97.82 allows remote attackers to execute arbitrary commands by invoking the insecure SaveFile method...

Microsoft VFP_OLE_Server ActiveX控件远程命令执行漏洞

Microsoft Visual FoxPro是一款数据库管理和应用软件开发系统。 Microsoft VFPOLEServer ActiveX控件存在设计问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意命令。 问题是Microsoft VFPOLEServer控件不安全使用"foxcommand"函数，直接传递运行应用程序作为参数，可导致应用程序权限执行。 Microsoft VFPOLEServer ActiveX Control 0 + Microsoft Internet Explorer 6.0 + Microsoft Internet Explorer 5.5 SP2 ...