Quiksoft EasyMail SMTP ActiveX control stack buffer overflow vulnerabilities

Overview The Quiksoft EasyMail SMTP ActiveX control contains multiple stack buffer overflow vulnerabilities, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Quiksoft EasyMail Objects is a set of ActiveX controls that provides emai...

Oracle JInitiator beans.ocx ActiveX Multiple Buffer Overflows

The remote host contains one or more versions of the 'beans.ocx' ActiveX control, distributed as a part of Oracle JInitiator. The version of at least one of these controls on the remote host reportedly is affected by multiple and as-yet unspecified stack buffer overflows in its initialization...

NVR SP2 2.0 nvUnifiedControl.dll 1.1.45.0 - SetText() Command Execution

NVR SP2 2.0 nvUnifiedControl.dll 1.1.45.0 - SetText Command Execution ------------------------------------------------------------------------------------------ PoC2 NVR SP2 2.0 nvUnifiedControl.AUnifiedControl.1 nvUnifiedControl.dll v. 1.1.45.0 "SetText" Remote BoF Heap Spray Technique url:...

Oracle JInitiator ActiveX control stack buffer overflows

Overview The Oracle JInitiator ActiveX control contains multiple stack buffer overflows, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Oracle JInitiator allows users to run Oracle Developer Server applications within a web...

NVR SP2 2.0 nvUtility.dll 1.0.14.0 - SaveXMLFile() Insecure Method

NVR SP2 2.0 nvUtility.dll 1.0.14.0 - SaveXMLFile Insecure Method -------------------------------------------------------------------------------------------- NVR SP2 2.0 nvUtility.Utility.1 nvUtility.dll v. 1.0.14.0 "SaveXMLFile" Inscure Method url: http://www.acti.com/index.asp author: shinnai...

eCentrex VOIP Client UACOMX.OCX ActiveX控件栈溢出漏洞

BUGTRAQ ID: 25383 eCentrex VOIP Client是一款网络电话客户端软件。 eCentrex VOIP Client的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 eCentrex SIP UA Com模块（euacom.dll）在处理传送给eCentrex VOIP Client组件ActiveX控件（uacomx.ocx）的ReInit方式的超长参数时存在栈溢出漏洞，如果用户受骗访问了恶意网页，就可能触发这个溢出，导致执行任意指令。 eCentrex VOIP Client ActiveX 2.0.1...

CVE-2007-4489

Buffer overflow in the IUAComFormX ActiveX control in uacomx.ocx 2.0.1 in the eCentrex VOIP Client module allows remote attackers to execute arbitrary code via a long Username argument to the ReInit method...

Buffer overflow

Buffer overflow in the IUAComFormX ActiveX control in uacomx.ocx 2.0.1 in the eCentrex VOIP Client module allows remote attackers to execute arbitrary code via a long Username argument to the ReInit method...

CVE-2007-4489

The CVE-2007-4489 issue affects the IUAComFormX ActiveX control in uacomx.ocx 2.0.1, used by the eCentrex VOIP Client module. The root cause is a buffer overflow triggered by a long Username argument to the ReInit method, which can allow remote code execution. The available connected documents co...

CVE-2007-4489

Buffer overflow in the IUAComFormX ActiveX control in uacomx.ocx 2.0.1 in the eCentrex VOIP Client module allows remote attackers to execute arbitrary code via a long Username argument to the ReInit method...

CVE-2007-4489: Undefined Security Weakness

Buffer overflow in the IUAComFormX ActiveX control in uacomx.ocx 2.0.1 in the eCentrex VOIP Client module allows remote attackers to execute arbitrary code via a long Username argument to the ReInit method...

联想Automated Solutions ActiveX控件多个安全漏洞

BUGTRAQ ID: 25311 CVECAN ID: CVE-2007-2928,CVE-2007-2929,CVE-2007-2240 Automated Solutions是联想和IBM电脑中所安装的ActiveX工具软件包。 Automated Solutions的ActiveX控件实现上存在格式串处理漏洞，远程攻击者可能利用此漏洞控制用户系统。 Automated...

Path traversal

Absolute path traversal vulnerability in a certain ActiveX control in officeviewer.ocx 5.1.199.1 in EDraw Office Viewer Component 5.1 allows remote attackers to create or overwrite arbitrary files via a full pathname in the second argument to the HttpDownloadFile method, a different vulnerability...

CVE-2007-4420

Absolute path traversal vulnerability in a certain ActiveX control in officeviewer.ocx 5.1.199.1 in EDraw Office Viewer Component 5.1 allows remote attackers to create or overwrite arbitrary files via a full pathname in the second argument to the HttpDownloadFile method, a different vulnerability...

CVE-2007-4420

Technical details for CVE-2007-4420 are not publicly available in the provided documents. Monitor for updates.

CVE-2007-4420

Absolute path traversal vulnerability in a certain ActiveX control in officeviewer.ocx 5.1.199.1 in EDraw Office Viewer Component 5.1 allows remote attackers to create or overwrite arbitrary files via a full pathname in the second argument to the HttpDownloadFile method, a different vulnerability...

Microsoft Internet Explorer multiple security vulnerabilities

Memory corruption on ActiveX parsing, unsafe Visual Basic ActiveX execution, Visual Basic ActiveX memory corruption...

Microsoft IE tblinf32.dll ActiveX控件远程代码执行漏洞（MS07-045）

BUGTRAQ ID: 25289 CVECAN ID: CVE-2007-2216 Internet Explorer是微软发布的非常流行的WEB浏览器。 IE的tblinf32.dll ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 IE中tblinf32.dll或vstlbinf.dll ActiveX控件没有正确地实现IObjectsafety，如果用户受骗访问了恶意站点的话就可能导致执行任意指令。成功利用此漏洞的攻击者可以获得与本地用户相同的用户权限，那些帐户被配置为拥有较少系统用户权限的用户比具有管理用户权限的用户受到的影响要小。 Microsoft...

Microsoft OLE自动化SubstringData函数堆溢出漏洞（MS07-043）

Microsoft Windows是微软发布的非常流行的操作系统。 Windows OLE机制的实现上存在整数溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 对象链接和嵌入（OLE）自动化是一个Windows协议，允许应用程序共享数据或控制其他应用程序。在使用OLE自动化时如果向TextNode JavaScript对象的substringData 方式传送了特制参数的话，就可能触发整数溢出，导致错误的内存分配。如果在实例化了不同的ActiveX对象后出现上述情况的话，则在解除分配ActiveX对象时就会触发堆溢出，导致执行任意代码。 Microsoft Office 2004 for...

TlbInf32 ActiveX Command Execution

======================================================================== = TlbInf32 ActiveX Command Execution = = MS Bulletin posted: = http://www.microsoft.com/technet/security/Bulletin/MS07-045.mspx = = Affected Software: = Internet Explorer = tlbInf32.dll = vstlbinf.dll = = Public disclosure o...