CVE-2008-0237

The Microsoft Rich Textbox ActiveX Control RICHTX32.OCX 6.1.97.82 allows remote attackers to execute arbitrary commands by invoking the insecure SaveFile method...

CVE-2008-0235

CVE-2008-0235 affects the Microsoft VFP_OLE_Server ActiveX control. The vulnerability allows remote attackers to execute arbitrary code by invoking the foxcommand method. The NVD entry lists a base score of 10.0 (HIGH) with network attack vector and no authentication, indicating a severe remote c...

CVE-2008-0236

An ActiveX control for Microsoft Visual FoxPro vfp6r.dll 6.0.8862.0 allows remote attackers to execute arbitrary commands by invoking the DoCmd method...

CVE-2008-0237

The CVE-2008-0237 entry involves the Microsoft Rich Textbox ActiveX control (Richtx32.ocx, v6.1.97.82). The vulnerability lies in the SaveFile method, which can be abused to create or overwrite arbitrary files via a web page, enabling remote access to write files on the target system. Exploitatio...

CVE-2008-0236

CVE-2008-0236 concerns an ActiveX control for Microsoft Visual FoxPro (vfp6r.dll 6.0.8862.0). The DoCmd method in the Visual FoxPro vfp6r.dll ActiveX control can be exploited to trigger remote command execution by a user visiting a crafted webpage, with the attack operating in the user’s security...

Gateway CWebLaunchCtl ActiveX控件远程栈溢出漏洞

BUGTRAQ ID: 27193 Gateway是美国一个著名的电脑品牌，产品包括PC、笔记本、外围设备等。 Gateway电脑所带的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 Gateway电脑中所安装的CWebLaunchCtl ActiveX控件（weblaunch.ocx）没有正确地验证对DoWebLaunch函数的输入，如果用户受骗访问了恶意网页并向该函数传送了超长参数的话，就可能触发栈溢出，导致执行任意指令。 Gateway weblaunch.ocx 1.0.0.1 临时解决方法： 在IE中禁用CWebLaunchCtl...

Qvod Player 2.1.5 - QvodInsert.dll ActiveX Control Remote Buffer Overflow

Qvod Player 2.1.5 - QvodInsert.dll ActiveX Control Remote Buffer Overflow source: https://www.securityfocus.com/bid/27271/info Qvod Player 'QvodInsert.dll' ActiveX control is prone to is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on...

CVE-2008-0235: Improper Control of Generation of Code

The Microsoft VFPOLEServer ActiveX control allows remote attackers to execute arbitrary code by invoking the foxcommand method...

CVE-2008-0237: Improper Input Validation

The Microsoft Rich Textbox ActiveX Control RICHTX32.OCX 6.1.97.82 allows remote attackers to execute arbitrary commands by invoking the insecure SaveFile method...

CVE-2008-0236: Undefined Security Weakness

An ActiveX control for Microsoft Visual FoxPro vfp6r.dll 6.0.8862.0 allows remote attackers to execute arbitrary commands by invoking the DoCmd method...

Microsoft VFP_OLE_Server ActiveX控件远程命令执行漏洞

Microsoft Visual FoxPro是一款数据库管理和应用软件开发系统。 Microsoft VFPOLEServer ActiveX控件存在设计问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意命令。 问题是Microsoft VFPOLEServer控件不安全使用"foxcommand"函数，直接传递运行应用程序作为参数，可导致应用程序权限执行。 Microsoft VFPOLEServer ActiveX Control 0 + Microsoft Internet Explorer 6.0 + Microsoft Internet Explorer 5.5 SP2 ...

Qvod Player 2.1.5 - 'QvodInsert.dll' ActiveX Control Remote Buffer Overflow

source: https://www.securityfocus.com/bid/27271/info Qvod Player 'QvodInsert.dll' ActiveX control is prone to is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Successfully exploiting this issue allows remote...

Stack overflow

Multiple stack-based buffer overflows in the WebLaunch.WeblaunchCtl.1 aka CWebLaunchCtl ActiveX control in weblaunch.ocx 1.0.0.1 in Gateway Weblaunch allow remote attackers to execute arbitrary code via a long string in the 1 second or 2 fourth argument to the DoWebLaunch method. NOTE: some of...

Directory traversal

Directory traversal vulnerability in the WebLaunch.WeblaunchCtl.1 aka CWebLaunchCtl ActiveX control in weblaunch.ocx 1.0.0.1 in Gateway Weblaunch allows remote attackers to execute arbitrary programs via a ..\ dot dot backslash in the second argument to the DoWebLaunch method. NOTE: some of these...

CVE-2008-0220

Multiple stack-based buffer overflows in the WebLaunch.WeblaunchCtl.1 aka CWebLaunchCtl ActiveX control in weblaunch.ocx 1.0.0.1 in Gateway Weblaunch allow remote attackers to execute arbitrary code via a long string in the 1 second or 2 fourth argument to the DoWebLaunch method. NOTE: some of...

CVE-2008-0221

Directory traversal vulnerability in the WebLaunch.WeblaunchCtl.1 aka CWebLaunchCtl ActiveX control in weblaunch.ocx 1.0.0.1 in Gateway Weblaunch allows remote attackers to execute arbitrary programs via a ..\ dot dot backslash in the second argument to the DoWebLaunch method. NOTE: some of these...

CVE-2008-0220

Multiple stack-based buffer overflows in the WebLaunch.WeblaunchCtl.1 aka CWebLaunchCtl ActiveX control in weblaunch.ocx 1.0.0.1 in Gateway Weblaunch allow remote attackers to execute arbitrary code via a long string in the 1 second or 2 fourth argument to the DoWebLaunch method. NOTE: some of...

CVE-2008-0221

Directory traversal vulnerability in the WebLaunch.WeblaunchCtl.1 aka CWebLaunchCtl ActiveX control in weblaunch.ocx 1.0.0.1 in Gateway Weblaunch allows remote attackers to execute arbitrary programs via a ..\ dot dot backslash in the second argument to the DoWebLaunch method. NOTE: some of these...

CVE-2008-0220

CVE-2008-0220 : Multiple stack-based buffer overflows in the WebLaunch.WeblaunchCtl.1 (CWebLaunchCtl) ActiveX control in weblaunch.ocx 1.0.0.1 (Gateway Weblaunch) allow remote attackers to execute arbitrary code by sending a long string in the (1) second or (2) fourth argument to the DoWebLaunch ...

CVE-2008-0221

The CVE-2008-0221 entry describes a Directory traversal vulnerability in the WebLaunch.WeblaunchCtl.1 (CWebLaunchCtl) ActiveX control in weblaunch.ocx 1.0.0.1 (Gateway Weblaunch). The underlying issue is that an attacker can supply a ..\ (dot dot backslash) as the second argument to the DoWebLaun...