HP Compaq Notebooks - ActiveX Remote Code Execution

HP Compaq Notebooks - ActiveX Remote Code Execution !- Advisory: Multiple Hewlett-Packard notebook series are prone to a remote code execution attack. The manufacturer's preinstalled software contains a critical flaw within the software built to support one-touch button quick feature access...

HP Compaq Notebooks - ActiveX Remote Code Execution

!- Advisory: Multiple Hewlett-Packard notebook series are prone to a remote code execution attack. The manufacturer's preinstalled software contains a critical flaw within the software built to support one-touch button quick feature access. Overview: ///////// Software called "HP Info Center" is...

MacroVision InstallShield Update Service isusweb.dll unsafe method

Added: 12/07/2007 CVE: CVE-2007-5660 BID: 26280 OSVDB: 38347 Background MacroVision InstallShield is software for creating installers or software packages. Problem Several unsafe methods in the Update Service ActiveX control allow command execution when a user loads a specially crafted web page...

MacroVision InstallShield Update Service isusweb.dll unsafe method

Added: 12/07/2007 CVE: CVE-2007-5660 BID: 26280 OSVDB: 38347 Background MacroVision InstallShield is software for creating installers or software packages. Problem Several unsafe methods in the Update Service ActiveX control allow command execution when a user loads a specially crafted web page...

Design/Logic Flaw

A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to the 1 addTarget, 2 getVariable, or 3 setVariable function, resulting from a "bad initialized pointer," aka a "recursive plugin release vulnerabilit...

CVE-2007-6262

A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to the 1 addTarget, 2 getVariable, or 3 setVariable function, resulting from a "bad initialized pointer," aka a "recursive plugin release vulnerabilit...

CVE-2007-6262

A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to the 1 addTarget, 2 getVariable, or 3 setVariable function, resulting from a "bad initialized pointer," aka a "recursive plugin release vulnerabilit...

CVE-2007-6262

VideoLAN VLC Vulnerability CVE-2007-6262 affects the ActiveX control axvlc.dll in VLC 0.8.6 before 0.8.6d. The three functions addTarget, getVariable, and setVariable do not validate parameters, leading to a bad initialized pointer and enabling remote code execution via crafted arguments (recursi...

CVE-2007-6262

A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to the 1 addTarget, 2 getVariable, or 3 setVariable function, resulting from a "bad initialized pointer," aka a "recursive plugin release vulnerabilit...

VLC Player ActiveX code exectuion

Few uninitialized pointers references...

CORE-2007-1004: VLC Activex Bad Pointer Initialization Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies – CoreLabs Advisory http://www.coresecurity.com/corelabs VLC Activex Bad Pointer Initialization Vulnerability Advisory Information Title: VLC Activex Bad Pointer Initialization Vulnerability Advisory ID: CORE-2007-1004...

VLC 0.86 < 0.86d ActiveX Remote Bad Pointer Initialization PoC

No description provided by source. !-- Core Security Technologiess - CoreLabs Advisory http://www.coresecurity.com/corelabs VLC Activex Bad Pointer Initialization Vulnerability Advisory Information Title: VLC Activex Bad Pointer Initialization Vulnerability...

Design/Logic Flaw

The RealNetworks RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll, as shipped with RealPlayer 11, allows remote attackers to cause a denial of service browser crash via a certain argument to the GetSourceTransport method...

CVE-2007-6235

A certain ActiveX control in RealNetworks RealPlayer 11 allows remote attackers to cause a denial of service application crash via a malformed .au file that triggers a divide-by-zero error. NOTE: this might be related to CVE-2007-4904...

CVE-2007-6224

The RealNetworks RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll, as shipped with RealPlayer 11, allows remote attackers to cause a denial of service browser crash via a certain argument to the GetSourceTransport method...

Design/Logic Flaw

A certain ActiveX control in RealNetworks RealPlayer 11 allows remote attackers to cause a denial of service application crash via a malformed .au file that triggers a divide-by-zero error. NOTE: this might be related to CVE-2007-4904...

CVE-2007-6228

Stack-based buffer overflow in the Helper class in the yt.ythelper.2 ActiveX control in Yahoo! Toolbar 1.4.1 allows remote attackers to cause a denial of service browser crash via a long argument to the c method...

CVE-2007-6235

A certain ActiveX control in RealNetworks RealPlayer 11 allows remote attackers to cause a denial of service application crash via a malformed .au file that triggers a divide-by-zero error. NOTE: this might be related to CVE-2007-4904...

CVE-2007-6224

CVE-2007-6224 affects RealNetworks RealAudioObjects.RealAudio ActiveX control (rmoc3260.dll) shipped with RealPlayer 11. A crafted argument to GetSourceTransport can cause a denial of service resulting in a browser crash. The vulnerable component is the RealAudio ActiveX control; impact is a part...

CVE-2007-6235

The CVE-2007-6235 issue concerns RealNetworks RealPlayer 11, specifically an ActiveX control that can be abused by a malformed .au file to trigger a divide-by-zero error, leading to an application crash (DoS). This is a remote-access vulnerability via a crafted multimedia file; the available conn...