11679 matches found
Internet Explorer tblinf32.dll ActiveX IObjectsafety vulnerability
Added: 08/17/2007 CVE: CVE-2007-2216 BID: 25289 OSVDB: 36396 Background The IObjectsafety interface provides methods to get and set safety options for objects which support untrusted clients. Problem The tblinf32.dll ActiveX control implements IObjectsafety incorrectly, allowing execution of code...
EDraw Office Viewer Component 5.1 HttpDownloadFile() Insecure Method
No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"--------------------------------------------------------------------------------------------------------------...
Internet Explorer tblinf32.dll ActiveX IObjectsafety vulnerability
Added: 08/17/2007 CVE: CVE-2007-2216 BID: 25289 OSVDB: 36396 Background The IObjectsafety interface provides methods to get and set safety options for objects which support untrusted clients. Problem The tblinf32.dll ActiveX control implements IObjectsafety incorrectly, allowing execution of code...
Internet Explorer tblinf32.dll ActiveX IObjectsafety vulnerability
Added: 08/17/2007 CVE: CVE-2007-2216 BID: 25289 OSVDB: 36396 Background The IObjectsafety interface provides methods to get and set safety options for objects which support untrusted clients. Problem The tblinf32.dll ActiveX control implements IObjectsafety incorrectly, allowing execution of code...
Microsoft IE向量标记语言VGX.DLL远程堆溢出漏洞（MS07-050）
BUGTRAQ ID: 25310 CVECAN ID: CVE-2007-1749 Internet Explorer是微软发布的非常流行的WEB浏览器。 IE的VML在处理压缩的数据时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 VGX.DLL是IE中负责渲染VML的组件，该组件中的CDownloadSink类实现处理从VML中内嵌URL所下载的数据。例如，以下VML会下载由VGX.DLL!CDownloadSink::OnDataAvailable处理的额外内容： v:rect v:imagedata src="http://malice/compressed.emz...
Internet Explorer tblinf32.dll ActiveX IObjectsafety vulnerability
Added: 08/17/2007 CVE: CVE-2007-2216 BID: 25289 OSVDB: 36396 Background The IObjectsafety interface provides methods to get and set safety options for objects which support untrusted clients. Problem The tblinf32.dll ActiveX control implements IObjectsafety incorrectly, allowing execution of code...
Yahoo! Installer Plugin for Widgets ActiveX control stack buffer overflow
Overview The Yahoo! Installer Plugin for Widgets ActiveX control contains a stack buffer overflow, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Yahoo! Widgets is a program for Windows that allows the user to run applications call...
EDraw Office Viewer Component 5.1 HttpDownloadFile() Insecure Method
No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"-------------------------------------------------------------------------------------------------------------- b0-day EDraw Office Viewer Component 5.1 officeviewer.ocx v. 5.1.199.1...
EDraw Office Viewer Component 5.1 - HttpDownloadFile() Insecure Method
EDraw Office Viewer Component 5.1 - HttpDownloadFile Insecure Method -------------------------------------------------------------------------------------------------------------- 0-day EDraw Office Viewer Component 5.1 officeviewer.ocx v. 5.1.199.1 "HttpDownloadFile" Insecure Method url:...
EDraw Office Viewer Component 5.1 - HttpDownloadFile() Insecure Method
-------------------------------------------------------------------------------------------------------------- 0-day EDraw Office Viewer Component 5.1 officeviewer.ocx v. 5.1.199.1 "HttpDownloadFile" Insecure Method url: http://www.ocxt.com/officeviewer.php author: shinnai mail:...
EDraw Office Viewer Component 5.1 HttpDownloadFile() Insecure Method
Exploit for unknown platform in category remote exploits ==================================================================== EDraw Office Viewer Component 5.1 HttpDownloadFile Insecure Method ====================================================================...
Code injection
The IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibly acpir.dll before 1.0.0.9 Automated Solutions 1.0 before fix pack 1, does not properly validate digital signatures of downloaded software, which makes it easier for remote...
Format string
Format string vulnerability in the IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibly acpir.dll before 1.0.0.9 Automated Solutions 1.0 before fix pack 1, allows remote attackers to execute arbitrary code via format string specifier...
Code injection
The IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibly acpir.dll before 1.0.0.9 Automated Solutions 1.0 before fix pack 1, exposes unsafe methods to arbitrary web domains, which allows remote attackers to download arbitrary code on...
Stack overflow
Multiple stack-based buffer overflows in the Motive ActiveEmailTest.EmailData ActiveUtils EmailData ActiveX control in ActiveUtils.dll in Motive Service Activation Manager 5.1 and Self Service Manager 5.1 and earlier allow remote attackers to execute arbitrary code via unspecified vectors...
CVE-2007-0319
Multiple stack-based buffer overflows in the Motive ActiveEmailTest.EmailData ActiveUtils EmailData ActiveX control in ActiveUtils.dll in Motive Service Activation Manager 5.1 and Self Service Manager 5.1 and earlier allow remote attackers to execute arbitrary code via unspecified vectors...
CVE-2007-2929
The IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibly acpir.dll before 1.0.0.9 Automated Solutions 1.0 before fix pack 1, exposes unsafe methods to arbitrary web domains, which allows remote attackers to download arbitrary code on...
CVE-2007-2240
The IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibly acpir.dll before 1.0.0.9 Automated Solutions 1.0 before fix pack 1, does not properly validate digital signatures of downloaded software, which makes it easier for remote...
CVE-2007-2928
Format string vulnerability in the IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibly acpir.dll before 1.0.0.9 Automated Solutions 1.0 before fix pack 1, allows remote attackers to execute arbitrary code via format string specifier...
CVE-2007-0319
Multiple stack-based buffer overflows in the Motive ActiveEmailTest.EmailData ActiveUtils EmailData ActiveX control in ActiveUtils.dll in Motive Service Activation Manager 5.1 and Self Service Manager 5.1 and earlier allow remote attackers to execute arbitrary code via unspecified vectors...