CVE-2007-3660

CVE-2007-3660 affects the Nonnoi ASP/Barcode ActiveX control (nonnoi_ASPBarcode.dll). The vulnerability allows remote attackers to overwrite arbitrary files via an argument to the SaveBarcode function. Impact is partial confidentiality, integrity, and availability (per CVSS 2.0: AV:N/AC:L/Au:N/C:...

CVE-2007-3669

Technical details about CVE-2007-3669 are not publicly available in the provided documents. No concrete information on affected products, vulnerable components, impact, or remediation is present; monitor for updates.

CVE-2007-3664

Technical details about CVE-2007-3664 are not publicly available in the provided documents. Monitor for updates from NVD/CVE records; no confirmed affected products, versions, or remedies are disclosed here.

CVE-2007-3664

Multiple unspecified vulnerabilities in Eltima Software RunService ActiveX control RunService.dll allow remote attackers to cause a denial of service via certain functions when "improperly used", as demonstrated by the AcceptControls subroutine...

CVE-2007-3661

Eltima Software Virtual Serial Port VSPAX ActiveX control VSPort.DLL allows remote attackers to cause a denial of service via certain function calls, as demonstrated via the 1 Attach, 2 Write, and 3 WriteStr functions...

CVE-2007-3669

Multiple unspecified vulnerabilities in the Innovasys DockStudioXP InnovaDSXP2.OCX ActiveX Control have unspecified attack vectors and impact, including a denial of service via "improper use" of the SaveToFile function...

Path traversal

Absolute path traversal vulnerability in a certain ActiveX control in hpqvwocx.dll 2.1.0.556 in Hewlett-Packard HP Digital Imaging allows remote attackers to create or overwrite arbitrary files via the second argument to the SaveToFile method...

CVE-2007-3649

Absolute path traversal vulnerability in a certain ActiveX control in hpqvwocx.dll 2.1.0.556 in Hewlett-Packard HP Digital Imaging allows remote attackers to create or overwrite arbitrary files via the second argument to the SaveToFile method...

CVE-2007-3649

The CVE-2007-3649 issue affects HP Digital Imaging’s hpqvwocx.dll 2.1.0.556 (ActiveX control). The vulnerability is an absolute path traversal in the SaveToFile method’s second argument, allowing remote attackers to create or overwrite arbitrary files. The provided sources confirm the affected co...

CVE-2007-3649

Absolute path traversal vulnerability in a certain ActiveX control in hpqvwocx.dll 2.1.0.556 in Hewlett-Packard HP Digital Imaging allows remote attackers to create or overwrite arbitrary files via the second argument to the SaveToFile method...

CVE-2007-3633

Absolute path traversal vulnerability in the Chilkat Software Chilkat Zip ActiveX control in ChilkatZip2.dll 12.4.2.0 allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the 1 SaveLastError method and probably the 2 WriteExe method...

Chilkat Zip ActiveX控件任意文件覆盖漏洞

BUGTRAQ ID: 24806 Chilkat Zip是一个功能强大的ActiveX控件，允许建立及管理压缩文件。 Chilkat Zip ActiveX控件在处理请求参数时存在漏洞，远程攻击者可能利用此漏洞破坏用户系统上的文件。 Chilkat Zip ActiveX控件（ChilkatZip2.dll）的SaveLastError和WriteExe方式没有正确地验证用户输入。如果用户受骗访问了恶意站点并向上述方式传送了恶意参数的话，就可能导致覆盖任意系统文件。 Chilkat Software Chilkat Zip 12.4.2.0...

neotracepro-overflow.txt

Date: 24/03/07 México / PRIVATE DON'T DISTRIBUTE PRIVATE DON'T DISTRIBUTE PRIVATE / I found this buffer overflow fuzzing NeoTraceExplorer.dll an ActiveX Control with ComRaider from iDefense. It has a method called TraceTarget which can be exploited passing a large string 486 bytes due there's no...

CVE-2007-3633

CVE-2007-3633 concerns an absolute path traversal in the ChilkatZip2.dll 12.4.2.0 Chilkat Zip ActiveX control. The vulnerability arises from passing a full pathname to the SaveLastError or possibly the WriteExe method, enabling remote attackers to create or overwrite arbitrary files. Affected com...

chilkat-multi.txt

------------------------------------------------------------------------------ Chilkat Software Chilkat Zip ActiveX Component ChilkatZip2.dll v. 12.4.2.0 "SaveLastError" and "WriteExe" Insecure Methods url: http://www.chilkatsoft.com/ author: shinnai mail: shinnaiatautisticidotorg site:...

CVE-2007-3669: Undefined Security Weakness

Multiple unspecified vulnerabilities in the Innovasys DockStudioXP InnovaDSXP2.OCX ActiveX Control have unspecified attack vectors and impact, including a denial of service via "improper use" of the SaveToFile function...

CVE-2007-3633

Absolute path traversal vulnerability in the Chilkat Software Chilkat Zip ActiveX control in ChilkatZip2.dll 12.4.2.0 allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the 1 SaveLastError method and probably the 2 WriteExe method...

CVE-2007-3664: Undefined Security Weakness

Multiple unspecified vulnerabilities in Eltima Software RunService ActiveX control RunService.dll allow remote attackers to cause a denial of service via certain functions when "improperly used", as demonstrated by the AcceptControls subroutine...

CVE-2007-3633: Undefined Security Weakness

Absolute path traversal vulnerability in the Chilkat Software Chilkat Zip ActiveX control in ChilkatZip2.dll 12.4.2.0 allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the 1 SaveLastError method and probably the 2 WriteExe method...

NeoTracePro 3.25 ActiveX TraceTarget() Remote BoF Exploit

No description provided by source. !-- / PUBLIC SINCE MAY 31th 2007 / / PRIVATE DON'T DISTRIBUTE PRIVATE DON'T DISTRIBUTE PRIVATE / NeoTracePro 3.25 ActiveX Control "TraceTarget" b0f NeoTraceExplorer.dll Remote 0-day Exploit Risk Level: High Impact: Remote command execution Author: A. Alejandro...