11679 matches found
CVE-2007-6535
Buffer overflow in the YShortcut ActiveX control in YShortcut.dll 2006.8.15.1 in Yahoo! Toolbar might allow attackers to execute arbitrary code via a long string to the IsTaggedBM method...
Buffer overflow
Buffer overflow in the YShortcut ActiveX control in YShortcut.dll 2006.8.15.1 in Yahoo! Toolbar might allow attackers to execute arbitrary code via a long string to the IsTaggedBM method...
CVE-2007-6535
Buffer overflow in the YShortcut ActiveX control in YShortcut.dll 2006.8.15.1 in Yahoo! Toolbar might allow attackers to execute arbitrary code via a long string to the IsTaggedBM method...
CVE-2007-6535
CVE-2007-6535 describes a buffer overflow in Yahoo! Toolbar’s YShortcut ActiveX control (YShortcut.dll 2006.8.15.1). The overflow is triggered by a long string passed to the IsTaggedBM method, potentially allowing arbitrary code execution. Sources consistently identify this as a Yahoo! Toolbar Ac...
CVE-2007-6535
Buffer overflow in the YShortcut ActiveX control in YShortcut.dll 2006.8.15.1 in Yahoo! Toolbar might allow attackers to execute arbitrary code via a long string to the IsTaggedBM method...
CVE-2007-6530
Buffer overflow in the XUpload.ocx ActiveX control in Persits Software XUpload 2.1.0.1, and probably other versions before 3.0, as used by HP Mercury LoadRunner and Groove Virtual Office, allows remote attackers to execute arbitrary code via a long argument to the AddFolder function...
Stack overflow
Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll, and dwa7w.dll, in Domino 6.x and 7.x allow remote attackers to execute arbitrary code, as demonstrated by an overflow from a long GeneralServerName propert...
Buffer overflow
Buffer overflow in the XUpload.ocx ActiveX control in Persits Software XUpload 2.1.0.1, and probably other versions before 3.0, as used by HP Mercury LoadRunner and Groove Virtual Office, allows remote attackers to execute arbitrary code via a long argument to the AddFolder function...
DSquare Exploit Pack: D2SEC_XUPLOAD
Name| d2secxupload ---|--- CVE| CVE-2007-6530 Exploit Pack| D2ExploitPack Description| Persits Software XUpload ActiveX Stack Overflow Notes|...
CVE-2007-4474
Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll, and dwa7w.dll, in Domino 6.x and 7.x allow remote attackers to execute arbitrary code, as demonstrated by an overflow from a long GeneralServerName propert...
CVE-2007-6530
Buffer overflow in the XUpload.ocx ActiveX control in Persits Software XUpload 2.1.0.1, and probably other versions before 3.0, as used by HP Mercury LoadRunner and Groove Virtual Office, allows remote attackers to execute arbitrary code via a long argument to the AddFolder function...
CVE-2007-4474
CVE-2007-4474 involves multiple stack-based buffer overflows in IBM Lotus Domino Web Access ActiveX controls (inotes6.dll, inotes6w.dll, dwa7.dll, dwa7w.dll) used by Domino 6.x/7.x. The root cause is a boundary/overflow vulnerability when handling a long General_ServerName property value in the U...
CVE-2007-6530
CVE-2007-6530 : Buffer overflow in Persits Software XUpload ActiveX control (AddFolder method) allows remote code execution via a long argument. Affected: XUpload 2.1.0.1 and likely earlier versions (pre-3.0). Products listed in description include HP Mercury LoadRunner and Groove Virtual Office....
Groove Virtual Office XUpload ActiveX控件缓冲区溢出漏洞
Groove Virtual Office是一款协同办公处理文档的应用程序。 Groove Virtual Office包含的XUpload ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 XUpload ActiveX控件对"AddFolder"方法缺少正确的边界错误，构建恶意的WEB页，诱使用户访问，可触发缓冲区溢出，精心构建提交数据可能以应用程序进程权限执行任意指令。 Groove Virtual Office 3.x Office Groove 2007不受此漏洞影响：...
Mercury LoadRunner XUpload ActiveX控件缓冲区溢出漏洞
BUGTRAQ ID: CNCAN ID:CNCAN-2007122709 Mercury LoadRunner是一款预测系统行为和性能的负载测试工具。 Mercury LoadRunner包含的XUpload ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 XUpload ActiveX控件对"AddFolder"方法缺少正确的边界错误，构建恶意的WEB页，诱使用户访问，可触发缓冲区溢出，精心构建提交数据可能以应用程序进程权限执行任意指令。 HP LoadRunner 9.x Mercury LoadRunner 8.x --------...
Microsoft Internet Explorer ADODB.Recordset空指针引用拒绝服务漏洞
BUGTRAQ ID: 18773 Microsoft Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer在处理ADODB.Recordset ActiveX对象时存在拒绝服务漏洞，远程攻击者可能利用此漏洞导致用户IE浏览器崩溃。 ADODB.Recordset ActiveX对象的属性被三次赋与不同的值时会触发空指针引用问题，如果用户受骗访问了包含畸形ActiveX引用代码的恶意WEB页面的话就会导致IE拒绝服务。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet...
Microsoft IE StructuredGraphicsControl远程拒绝服务漏洞
BUGTRAQ ID: 18855 Microsoft IE是微软发布的非常流行的WEB浏览器。 Microsoft IE在处理ActiveX对象时存在漏洞，远程攻击者可能利用此漏洞导致用户的IE崩溃。 IE在调用URLOpenBlockingStream处理ActiveX控件时，ppStream参数会触发空指针应用，如果用户受骗访问了恶意的WEB页面的话就会导致拒绝服务。 Microsoft Internet Explorer 6.0 SP2 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 厂商补丁...
WebEx Downloader插件远程代码执行漏洞
BUGTRAQ ID: 18860 CVECAN ID: CVE-2006-3423 WebEx是全球最大的网络通信服务供应商，可提供电信级网络会议解决方案。 WebEx在处理组件下载操作时存在漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意命令。 WebEx在召开或加入网络会议时需要使用Downloader插件来下载一些额外的组件。在下载时由于对各种ActiveX/Java控件参数和配置指令缺少验证，GpcUrlRoot和GpcIniFileName...
