EDraw Flowchart ActiveX Control 2.0 - Insecure Method

----------------------------------------------------------------------------------------------------- EDraw Flowchart ActiveX Control EDImage.ocx v. 2.0.2005.1104 "HttpDownloadFile" Insecure Method url: http://www.anydraw.com Author: shinnai mail: shinnaiatautisticidotorg site:...

Buffer overflow

Buffer overflow in the GomManager GomWeb Control ActiveX control in GomWeb3.dll 1.0.0.12 in Gretech Online Movie Player GOM Player 2.1.6.3499 allows remote attackers to execute arbitrary code via a long argument to the OpenUrl method...

CVE-2007-5779

Buffer overflow in the GomManager GomWeb Control ActiveX control in GomWeb3.dll 1.0.0.12 in Gretech Online Movie Player GOM Player 2.1.6.3499 allows remote attackers to execute arbitrary code via a long argument to the OpenUrl method...

CVE-2007-5779

Gretech Online Movie Player (GOM Player) version 2.1.6.3499 is vulnerable to a stack buffer overflow in the GomManager (GomWeb Control) ActiveX control located in GomWeb3.dll 1.0.0.12 . A remote attacker can exploit this by providing an overly long argument to the OpenUrl method, potentially lead...

CVE-2007-5779

Buffer overflow in the GomManager GomWeb Control ActiveX control in GomWeb3.dll 1.0.0.12 in Gretech Online Movie Player GOM Player 2.1.6.3499 allows remote attackers to execute arbitrary code via a long argument to the OpenUrl method...

SonicWall SSL-VPN NeLaunchCtrl ActiveX Control Remote Exploit

Exploit for unknown platform in category remote exploits ============================================================= SonicWall SSL-VPN NeLaunchCtrl ActiveX Control Remote Exploit ============================================================= var shellcode =...

SonicWALL SSL VPN 1.3 3 WebCacheCleaner - ActiveX FileDelete Method Traversal Arbitrary File Deletion

SonicWALL SSL VPN 1.3 3 WebCacheCleaner - ActiveX FileDelete Method Traversal Arbitrary File Deletion source: https://www.securityfocus.com/bid/26288/info SonicWALL SSL VPN Client is prone to multiple remote vulnerabilities. The issues occur in different ActiveX controls and include...

SonicWALL SSL-VPN - NeLaunchCtrl ActiveX Control Remote Command Execution

SonicWALL SSL-VPN - NeLaunchCtrl ActiveX Control Remote Command Execution var shellcode =...

SonicWall SSL-VPN NetExtender ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in SonicWall SSL-VPN NetExtender. By sending an overly long string to the "AddRouteEntry" method located in the NELaunchX.dll 1.0.0.26 Control, an attacker may be able to execute arbitrary code. Module Options msf use...

FLEXnet Connect Update Service ActiveX Control Multiple Code Execution Vulnerabilities

Macrovision FLEXnet Connect, formerly known as InstallShield Update Service, is installed on the remote host. It is a software management solution for internally-developed and third-party applications, and may have been installed as part of the FLEXnet Connect SDK, other InstallShield software, o...

SonicWALL SSL-VPN - 'NeLaunchCtrl' ActiveX Control Remote Command Execution

var shellcode =...

CVE-2007-5722

Stack-based buffer overflow in a certain ActiveX control in GLChat.ocx 2.5.1.32 in GlobalLink 2.7.0.8, as used in Ourgame GLWorld and possibly other products, allows remote attackers to execute arbitrary code via a long first argument to the ConnectAndEnterRoom method, possibly involving the...

Stack overflow

Stack-based buffer overflow in a certain ActiveX control in GLChat.ocx 2.5.1.32 in GlobalLink 2.7.0.8, as used in Ourgame GLWorld and possibly other products, allows remote attackers to execute arbitrary code via a long first argument to the ConnectAndEnterRoom method, possibly involving the...

CVE-2007-5722

Stack-based buffer overflow in a certain ActiveX control in GLChat.ocx 2.5.1.32 in GlobalLink 2.7.0.8, as used in Ourgame GLWorld and possibly other products, allows remote attackers to execute arbitrary code via a long first argument to the ConnectAndEnterRoom method, possibly involving the...

CVE-2007-5722

A stack-based buffer overflow exists in the GLChat.ocx 2.5.1.32 ActiveX control within GlobalLink 2.7.0.8 , notably used in Ourgame GLWorld . The vulnerability is caused by a lack of proper bounds-checking when handling user-supplied data via a long first argument to the ConnectAndEnterRoom metho...

VulnCheck KEV: CVE-2007-5722

Stack-based buffer overflow in a certain ActiveX control in GLChat.ocx 2.5.1.32 in GlobalLink 2.7.0.8, as used in Ourgame GLWorld and possibly other products, allows remote attackers to execute arbitrary code via a long first argument to the ConnectAndEnterRoom method, possibly involving the...

GlobalLink 2.7.0.8 - ConnectAndEnterRoom ActiveX Control Stack Buffer Overflow

GlobalLink 2.7.0.8 - ConnectAndEnterRoom ActiveX Control Stack Buffer Overflow source: https://www.securityfocus.com/bid/26244/info GlobalLink is prone to a stack-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an...

GlobalLink ConnectAndEnterRoom ActiveX Control Stack Buffer Overflow Vulnerability

Description GlobalLink is prone to a stack-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer. An attacker can exploit this issue to execute arbitrary code within the context of the affected...

GlobalLink 2.7.0.8 - ConnectAndEnterRoom ActiveX Control Stack Buffer Overflow

source: https://www.securityfocus.com/bid/26244/info GlobalLink is prone to a stack-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer. An attacker can exploit this issue to execute arbitrar...

Microsoft Visual FoxPro FPOLE.OCX ActiveX控件任意命令执行漏洞

BUGTRAQ ID: 25977 CVECAN ID: CVE-2007-5322 Visual FoxPro是微软发布的数据库开发工具。 Visual FoxPro的FPOLE.OCX ActiveX控件没有正确地验证对FoxDoCmd方式的输入，如果用户受骗访问了恶意站点的话，就可能导致在浏览器会话中执行任意指令。 Microsoft Visual FoxPro 6.0 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.microsoft.com/technet/security/ object...