CVE-2007-5438

Unspecified vulnerability in a certain ActiveX control in Reconfig.DLL in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7...

CVE-2007-5436

Buffer overflow in a certain ActiveX control in ScanObjectBrowser.DLL in G DATA Antivirus 2007 might allow remote attackers to execute arbitrary code via unspecified parameters to the SelectPath function. NOTE: this issue might not cross privilege boundaries in most environments, since it is not...

CVE-2007-5438

Unspecified vulnerability in a certain ActiveX control in Reconfig.DLL in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7...

CVE-2007-5436

The CVE-2007-5436 entry concerns G DATA Antivirus 2007. A buffer overflow in the ActiveX control ScanObjectBrowser.DLL, specifically in the SelectPath function, could allow remote code execution via unspecified parameters. The issue is described as not crossing privilege boundaries in many enviro...

CVE-2007-5438

CVE-2007-5438 involves an unspecified vulnerability in a VMware ActiveX control (Reconfig.DLL) that could allow local users to cause a denial of service to the Virtual Disk Mount Service (vmount2.exe). Affected products and build ranges include VMware Workstation 5.5.x <5.5.8 build 108000, Wor...

PBEmail 7 ActiveX Edition Insecure Method Exploit

No description provided by source. pre bFound by/b: Katatafish karatatataathushdotcom bsoftware/b:PBEmail 7 ActiveX Edition bVendor:/b http://www.perfectionbytes.com bvulnerability/b: Insecure method SaveSenderToXmlXmlFilePath: BSTR; stdcall; in PBEmail7Ax.dll bTested on Internet explorer 7 with...

CVE-2007-3675

Multiple format string vulnerabilities in the kavwebscan.CKAVWebScan ActiveX control kavwebscan.dll in Kaspersky Online Scanner before 5.0.98 allow remote attackers to execute arbitrary code via format string specifiers in "various string formatting functions," which trigger heap-based buffer...

CVE-2007-3675

CVE-2007-3675 concerns the kavwebscan.CKAVWebScan ActiveX control (kavwebscan.dll) used by Kaspersky Online Scanner. Public records state that this ActiveX contains a format string vulnerability in multiple string formatting functions, which can trigger a heap-based buffer overflow and allow remo...

PBEmail 7 ActiveX Edition Insecure Method Exploit

Exploit for unknown platform in category remote exploits ================================================= PBEmail 7 ActiveX Edition Insecure Method Exploit ================================================= Found by: Katatafish karatatataathushdotcom software:PBEmail 7 ActiveX Edition Vendor:...

PBEmail 7 - ActiveX Edition Insecure Method

PBEmail 7 - ActiveX Edition Insecure Method Found by: Katatafish karatatataathushdotcom software:PBEmail 7 ActiveX Edition Vendor: http://www.perfectionbytes.com vulnerability: Insecure method SaveSenderToXmlXmlFilePath: BSTR; stdcall; in PBEmail7Ax.dll Tested on Internet explorer 7 with Windows ...

Kaspersky Online Scanner kavwebscan.dll控件远程格式串漏洞

BUGTRAQ ID: 26004 CVECAN ID: CVE-2007-3675 Kaspersky Online Scanner是免费的在线病毒扫描服务，允许用户通过Web浏览器扫描恶意代码。 Kaspersky Online Scanner所带的ActiveX控件实现上存在格式串处理漏洞，远程攻击者可能利用此漏洞控制客户端系统。 Kaspersky Online Scanner所安装的以下在线病毒扫描ActiveX控件： ProgID：kavwebscan.CKAVWebScan ClassID：0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75...

PBEmail 7 - ActiveX Edition Insecure Method

Found by: Katatafish karatatataathushdotcom software:PBEmail 7 ActiveX Edition Vendor: http://www.perfectionbytes.com vulnerability: Insecure method SaveSenderToXmlXmlFilePath: BSTR; stdcall; in PBEmail7Ax.dll Tested on Internet explorer 7 with Windows XP SP 2. Thanks: str0ke kat.SaveSenderToXml...

Microsoft SQL Server Distributed Management Objects buffer overflow

Added: 10/11/2007 CVE: CVE-2007-4814 BID: 25594 OSVDB: 38399 Background Microsoft SQL Server includes a Distributed Management Object model which offers a modern, object-oriented alternative to using stored procedures. The Distributed Management Object model is implemented by the sqldmo.dll Activ...

Microsoft SQL Server Distributed Management Objects buffer overflow

Added: 10/11/2007 CVE: CVE-2007-4814 BID: 25594 OSVDB: 38399 Background Microsoft SQL Server includes a Distributed Management Object model which offers a modern, object-oriented alternative to using stored procedures. The Distributed Management Object model is implemented by the sqldmo.dll Activ...

Kaspersky Online Scanner kavwebscan.CKAVWebScan ActiveX (kavwebscan.dll) Format String Arbitrary Code Execution

The remote host contains the Kaspersky Online Scanner, an online virus scanner for Windows. The version of the Kaspersky Web Scanner ActiveX control installed as part of this software on the remote host contains a format string vulnerability. By tricking a user on the affected host into visiting ...

iDefense Security Advisory 10.10.07: Kaspersky Web Scanner ActiveX Format String Vulnerability

Kaspersky Web Scanner ActiveX Format String Vulnerability iDefense Security Advisory 10.10.07 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 10, 2007 I. BACKGROUND Kaspersky Lab Online Virus Scanner is a free online virus scanner service, enabling a user to scan their system for...

Kasrpsrsky Online Scanner ActiveX format string security vulnerability

Multiple format string vulnerabilities...

Microsoft SQL Server Distributed Management Objects buffer overflow

Added: 10/11/2007 CVE: CVE-2007-4814 BID: 25594 OSVDB: 38399 Background Microsoft SQL Server includes a Distributed Management Object model which offers a modern, object-oriented alternative to using stored procedures. The Distributed Management Object model is implemented by the sqldmo.dll Activ...

Microsoft SQL Server Distributed Management Objects buffer overflow

Added: 10/11/2007 CVE: CVE-2007-4814 BID: 25594 OSVDB: 38399 Background Microsoft SQL Server includes a Distributed Management Object model which offers a modern, object-oriented alternative to using stored procedures. The Distributed Management Object model is implemented by the sqldmo.dll Activ...

VMware Workstation ActiveX Control vielib.dll Command Execution (CVE-2007-4058)

VMware Workstation is a virtualization technology that allows running multiple instances of virtual computers simultaneously with the hosting operating system. A remote attacker could exploit this issue by convincing a user to visit a specially crafted HTML document or open a malicious web page...