11679 matches found
Buffer overflow
Multiple buffer overflows in the BaoFeng2 storm ActiveX control in Mps.dll allow remote attackers to have an unknown impact via a long 1 URL, 2 backImage, or 3 titleImage property value; 4 a long first argument to the advancedOpen method; a long argument to the 5 isDVDPath or 6 rawParse method; o...
CVE-2007-4821
Buffer overflow in a certain ActiveX control in officeviewer.ocx 5.2.218.1 in EDraw Office Viewer Component 5.2 allows remote attackers to execute arbitrary code via a long first argument to the HttpDownloadFileToTempDir method, a different vulnerability than CVE-2007-3169...
CVE-2007-4816
Multiple buffer overflows in the BaoFeng2 storm ActiveX control in Mps.dll allow remote attackers to have an unknown impact via a long 1 URL, 2 backImage, or 3 titleImage property value; 4 a long first argument to the advancedOpen method; a long argument to the 5 isDVDPath or 6 rawParse method; o...
CVE-2007-4814
Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL sqldmo.dll 2000.085.2004.00 in Microsoft SQL Server Enterprise Manager 8.05.2004 allows remote attackers to execute arbitrary code via a long second argument to the Start method...
CVE-2007-4816
The BaoFeng2 storm ActiveX control in Mps.dll contains multiple buffer overflows that allow remote attackers to achieve an unknown impact. Vulnerable inputs include long values for the URL , backImage , and titleImage properties, as well as long first arguments to the advancedOpen method, long ar...
CVE-2007-4814
CVE-2007-4814 affects the SQL Server Distributed Management Objects (DMO) ActiveX control sqldmo.dll. A buffer overflow in the Start method is triggered by a long argument, enabling remote code execution. Exploitation details are documented in SAINT references, with note that exploits exist for M...
CVE-2007-4816
Multiple buffer overflows in the BaoFeng2 storm ActiveX control in Mps.dll allow remote attackers to have an unknown impact via a long 1 URL, 2 backImage, or 3 titleImage property value; 4 a long first argument to the advancedOpen method; a long argument to the 5 isDVDPath or 6 rawParse method; o...
CVE-2007-4821
Buffer overflow in a certain ActiveX control in officeviewer.ocx 5.2.218.1 in EDraw Office Viewer Component 5.2 allows remote attackers to execute arbitrary code via a long first argument to the HttpDownloadFileToTempDir method, a different vulnerability than CVE-2007-3169...
CVE-2007-4802
Multiple heap-based buffer overflows in GlobalLink 2.7.0.8 allow remote attackers to execute arbitrary code via 1 a long eighth argument to the SetInfo method in a certain ActiveX control in glItemCom.dll or 2 a long second argument to the SetClientInfo method in a certain ActiveX control in...
Heap overflow
Multiple heap-based buffer overflows in GlobalLink 2.7.0.8 allow remote attackers to execute arbitrary code via 1 a long eighth argument to the SetInfo method in a certain ActiveX control in glItemCom.dll or 2 a long second argument to the SetClientInfo method in a certain ActiveX control in...
CVE-2007-4802
CVE-2007-4802 affects GlobalLink 2.7.0.8 (glItemCom.dll, glitemflat.dll). The issue is multiple heap-based buffer overflows that allow remote attackers to execute arbitrary code via: (1) a long eighth argument to SetInfo in glItemCom.dll and (2) a long second argument to SetClientInfo in glitemfl...
Microsoft Agent crafted URL vulnerability
Added: 09/11/2007 CVE: CVE-2007-3040 BID: 25566 OSVDB: 36934 Background Microsoft Agent is a component of the Windows operating system designed to make using a computer easier through enriched user interaction. Problem A vulnerability in Microsoft Agent allows command execution when a user loads ...
Microsoft Agent agentdpv.dll ActiveX Control Malformed URL Stack Buffer Overflow Vulnerability
Description Microsoft Agent agentsvr.exe is prone to a stack-based buffer-overflow vulnerability because the application fails to adequately bounds-check user-supplied data. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the currently...
Microsoft SQL Server Distributed Management Objects (sqldmo.dll) BoF
No description provided by source. !-- 18.48 01/09/2007 Microsoft SQL Server Distributed Management Objects OLE DLL for SQL Enterprise Manager sqldmo.dll remote buffer overflow poc file version: 2000.085.2004.00 product version: 8.05.2004 passing some fuzzy chars to Start method: EAX 00000000 ECX...
Assurent VR - Microsoft Agent Crafted URL Stack Buffer Overflow
Microsoft Agent Crafted URL Stack Buffer Overflow Assurent ID: FSC20070911-11 1. Affected Software Microsoft Agent, version 2.0.0.3425 bundled with Windows 2000 Service Pack 4 Reference: http://www.microsoft.com/msagent/ 2. Vulnerability Summary The Microsoft Agent ActiveX control contains a buff...
CVE-2007-4814: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL sqldmo.dll 2000.085.2004.00 in Microsoft SQL Server Enterprise Manager 8.05.2004 allows remote attackers to execute arbitrary code via a long second argument to the Start method...
Microsoft Agent crafted URL vulnerability
Added: 09/11/2007 CVE: CVE-2007-3040 BID: 25566 OSVDB: 36934 Background Microsoft Agent is a component of the Windows operating system designed to make using a computer easier through enriched user interaction. Problem A vulnerability in Microsoft Agent allows command execution when a user loads ...
联众世界游戏大厅GLItemCom.DLL ActiveX控件堆溢出漏洞
BUGTRAQ ID: 25565 联众世界游戏大厅是联众世界自主开发的一款集棋牌、休闲、对战于一体的游戏客户端。 联众世界游戏大厅所安装的GLItemCom.DLL ActiveX控件中SetClientInfo函数存在堆溢出漏洞。 如果用户受骗使用IE访问了恶意网页的话，就可以触发这个溢出，导致在用户系统上执行任意指令。以下是已公开的PoC代码： -----Cut Below------------------------------------------------------------------ OBJECT id=target...
Microsoft Agent crafted URL vulnerability
Added: 09/11/2007 CVE: CVE-2007-3040 BID: 25566 OSVDB: 36934 Background Microsoft Agent is a component of the Windows operating system designed to make using a computer easier through enriched user interaction. Problem A vulnerability in Microsoft Agent allows command execution when a user loads ...
CVE-2007-4816: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple buffer overflows in the BaoFeng2 storm ActiveX control in Mps.dll allow remote attackers to have an unknown impact via a long 1 URL, 2 backImage, or 3 titleImage property value; 4 a long first argument to the advancedOpen method; a long argument to the 5 isDVDPath or 6 rawParse method; o...