CA eTrust Intrusion Detection CallCode ActiveX vulnerability

Added: 08/09/2007 CVE: CVE-2007-3302 BID: 25050 OSVDB: 37698 Background CA eTrust Intrusion Detection includes the CallCode Caller.dll ActiveX control. Problem The CallCode ActiveX control is incorrectly marked safe for scripting. This ActiveX control contains scriptable functions which, if a use...

CA eTrust Intrusion Detection CallCode ActiveX vulnerability

Added: 08/09/2007 CVE: CVE-2007-3302 BID: 25050 OSVDB: 37698 Background CA eTrust Intrusion Detection includes the CallCode Caller.dll ActiveX control. Problem The CallCode ActiveX control is incorrectly marked safe for scripting. This ActiveX control contains scriptable functions which, if a use...

CA eTrust Intrusion Detection CallCode ActiveX vulnerability

Added: 08/09/2007 CVE: CVE-2007-3302 BID: 25050 OSVDB: 37698 Background CA eTrust Intrusion Detection includes the CallCode Caller.dll ActiveX control. Problem The CallCode ActiveX control is incorrectly marked safe for scripting. This ActiveX control contains scriptable functions which, if a use...

CA eTrust Intrusion Detection CallCode ActiveX vulnerability

Added: 08/09/2007 CVE: CVE-2007-3302 BID: 25050 OSVDB: 37698 Background CA eTrust Intrusion Detection includes the CallCode Caller.dll ActiveX control. Problem The CallCode ActiveX control is incorrectly marked safe for scripting. This ActiveX control contains scriptable functions which, if a use...

Stack overflow

Stack-based buffer overflow in a certain ActiveX control in VDT70.DLL in Microsoft Visual Database Tools Database Designer 7.0 for Microsoft Visual Studio 6 allows remote attackers to execute arbitrary code via a long argument to the NotSafe method. NOTE: this may overlap CVE-2007-2885 or...

CVE-2007-4252

Absolute path traversal vulnerability in a certain ActiveX control in CkString.dll 1.1 and earlier in CHILKAT ASP String allows remote attackers to create or overwrite arbitrary files via a full pathname in the first argument to the SaveToFile method, a different vulnerability than CVE-2007-3633...

CVE-2007-4252

Absolute path traversal vulnerability in a certain ActiveX control in CkString.dll 1.1 and earlier in CHILKAT ASP String allows remote attackers to create or overwrite arbitrary files via a full pathname in the first argument to the SaveToFile method, a different vulnerability than CVE-2007-3633...

CVE-2007-4254

CVE-2007-4254 is a stack-based buffer overflow in the MSVDTActiveX control (VDT70.DLL) used by Microsoft Visual Database Tools Database Designer 7.0 (Visual Studio 6). The NotSafe method accepts a long argument, which can overflow a buffer and enable remote code execution. The vulnerability affec...

CVE-2007-4254

Stack-based buffer overflow in a certain ActiveX control in VDT70.DLL in Microsoft Visual Database Tools Database Designer 7.0 for Microsoft Visual Studio 6 allows remote attackers to execute arbitrary code via a long argument to the NotSafe method. NOTE: this may overlap CVE-2007-2885 or...

CVE-2007-4252

CVE-2007-4252 is tied to the Chilkat Zip ActiveX control (ChilkatZip2.dll 12.4.2.0). The vulnerability is an absolute path traversal through the SaveLastError and likely WriteExe methods, enabling remote attackers to create or overwrite arbitrary files when a full pathname is supplied. This align...

Xunlei Web Thunder ThunderServer.webThunder.1 ActiveX AddCategory文件下载漏洞

Xunlei Web Thunder是一款基于多资源超线程技术的下载工具。 Xunlei Web Thunder ThunderServer.webThunder.1 ActiveX控件存在输入验证错误，远程攻击者可以利用漏洞下载任意文件到目标用户系统，可导致任意命令执行。 攻击者必须构建恶意WEB页，诱使用户访问来触发。目前没有详细漏洞细节提供。 Xunlei Web Thunder ThunderServer.webThunder.1 1.8.4.130 目前没有详细解决方案提供： http://my.xunlei.com/setup.htm...

Path traversal

Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll in EMC VMware 6.0.0 allows remote attackers to execute arbitrary local programs via a full pathname in the first two arguments to the 1 CreateProcess or 2 CreateProcessEx method...

CVE-2007-4155

CVE-2007-4155 is a Windows-hosted vulnerability in VMware’s vielib.dll (ActiveX) that enables absolute path traversal to trigger CreateProcess/CreateProcessEx, allowing remote attackers to execute arbitrary local programs on VMware Workstation/Player 6.0.0 family. VMware advisories (VMSA-2007-000...

CVE-2007-4155

Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll in EMC VMware 6.0.0 allows remote attackers to execute arbitrary local programs via a full pathname in the first two arguments to the 1 CreateProcess or 2 CreateProcessEx method...

Heap overflow

Heap-based buffer overflow in the BlueSkychat BlueSkyCat ActiveX control V2.V2Ctrl.1 in v2.ocx 8.1.2.0 and earlier allows remote attackers to execute arbitrary code via a long string in the second argument to the ConnecttoServer method...

CVE-2007-4145

Heap-based buffer overflow in the BlueSkychat BlueSkyCat ActiveX control V2.V2Ctrl.1 in v2.ocx 8.1.2.0 and earlier allows remote attackers to execute arbitrary code via a long string in the second argument to the ConnecttoServer method...

CVE-2007-4145

Heap-based buffer overflow in the BlueSkychat BlueSkyCat ActiveX control V2.V2Ctrl.1 in v2.ocx 8.1.2.0 and earlier allows remote attackers to execute arbitrary code via a long string in the second argument to the ConnecttoServer method...

CVE-2007-4145

CVE-2007-4145 describes a heap-based buffer overflow in the BlueSkychat (BlueSkyCat) ActiveX control (V2.V2Ctrl.1) in v2.ocx

Baidu Soba Remote Code Execute Vulnerability(FGA-2007-10)

hi full-disclosure, Baidu Soba Remote Code Execute Vulnerability by cocoruder of Fortinet Security Research Team http://ruder.cdut.net Summary: Baidu Soba is a popular browser toolbar which developed by Baidu, a Chinese web search engine company, like Google, more informations can be found at:...

Yahoo! Widgets ActiveX control GetComponentVersion buffer overflow

Added: 08/03/2007 CVE: CVE-2007-4034 BID: 25086 OSVDB: 37705 Background Yahoo! Widgets is desktop software which runs any number of small, real-time, Internet applications called widgets. Problem A buffer overflow vulnerability in the YDPCTL ActiveX Control allows command execution when a user...