CVE-2007-2917

Multiple buffer overflows in a certain ActiveX control in odapi.dll in Authentium Command Antivirus before 4.93.8 allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-2982

Multiple buffer overflows in the British Telecommunications Business Connect webhelper ActiveX control before 1.0.0.7 in btbconnectwebcontrol.dll allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-0328

The DWUpdateService ActiveX control in the agent agent.exe in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allows remote attackers to execute arbitrary commands via 1 the Execute method, and obtain the exit status using 2 the GetExitCode method...

CVE-2007-0328

The CVE-2007-0328 issue concerns the DWUpdateService ActiveX control (in Macrovision FLEXnet Connect 6.0 and Update Service 3.x–5.x) exposed by agent.exe. The vulnerability allows remote command execution through the Execute() method and retrieval of the exit status via GetExitCode(), enabling ar...

EDraw Office Viewer Component Unsafe Method Exploit

No description provided by source. pre span style="font: 14pt Courier New;"p align="center"b2007/05/28/b/p/span codespan style="font: 10pt Courier New;"span class="general1-symbol"----------------------------------------------------------------------------------------------- bEDraw Office Viewer...

Zenturi ProgramChecker ActiveX (sasatl.dll) Remote BoF Exploit

Exploit for unknown platform in category remote exploits ============================================================== Zenturi ProgramChecker ActiveX sasatl.dll Remote BoF Exploit ==============================================================...

British Telecommunications webhelper ActiveX控件多个缓冲区溢出漏洞

British Telecommunications webhelper ActiveX是英国电信所提供的帮助工具。 webhelper ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户机器。 Consumer webhelper ActiveX控件（btwebcontrol.dll）和Connect webhelper ActiveX控件（btbconnectwebcontrol.dll）没有正确验证用户输入，如果用户受骗访问了恶意站点的话，就可能触发缓冲区溢出，导致执行任意指令。 British Telecommunications Consumer...

CVE-2007-2917: Undefined Security Weakness

Multiple buffer overflows in a certain ActiveX control in odapi.dll in Authentium Command Antivirus before 4.93.8 allow remote attackers to execute arbitrary code via unspecified vectors...

Zenturi ProgramChecker ActiveX File Download/Overwrite Exploit

No description provided by source. pre span style="font: 14pt Courier New;"p align="center"b2007/05/30/b/p/span codespan style="font: 10pt Courier New;"span class="general1-symbol"------------------------------------------------------------------------------------------- bZenturi ProgramChecker...

CVE-2007-0328

The DWUpdateService ActiveX control in the agent agent.exe in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allows remote attackers to execute arbitrary commands via 1 the Execute method, and obtain the exit status using 2 the GetExitCode method...

CVE-2007-2984: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in the Media Technology Group CDPass ActiveX control in CDPass.dll allow remote attackers to execute arbitrary code via unspecified vectors, possibly involving the GetTOC2 method...

LeadTools Raster Dialog File_D对象ActiveX控件远程溢出漏洞

LEAD Raster对话FileD对象ActiveX控件（LTRDFD14e.DLL）是LEADTOOLS图形组件中的一个工具。 LTRDFD14e.DLL ActiveX控件在处理DestinationPath属性时存在缓冲区溢出，如果用户受骗访问了恶意站点并向该属性传送了超长字符串的话，就可能触发内存破坏，导致执行任意代码。 LeadTools Raster Dialog FileD Object 14.5.0.44 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Zenturi ProgramChecker - ActiveX sasatl.dll Remote Buffer Overflow

Zenturi ProgramChecker - ActiveX sasatl.dll Remote Buffer Overflow ------------------------------------------------------------------------ Zenturi ProgramChecker ActiveX sasatl.dll Remote Buffer Overflow PoC url: http://www.programchecker.com/activeintro.aspx original advisory:...

EDraw Office Viewer Component EDrawOfficeViewer.OCX ActiveX控件缓冲区溢出漏洞

EDraw Office Viewer是一款文字处理组件。 EDraw Office Viewer提供的edrawofficeviewer.ocx ActiveX控件处理参数输入缺少正确边界检查，远程攻击者可以利用漏洞对应用程序进行缓冲区溢出攻击，可能以进程权限执行任意指令。 问题存在于edrawofficeviewer.ocx包含的控件由于不正确处理用户提交的参数，构建恶意WEB页，诱使用户访问，可导致应用程序崩溃。 EDraw Office Viewer Component 4.0.5.20 目前没有解决方案提供： http://www.ocxt.com/...

EDraw Office Viewer Component Denial of Service Exploit

No description provided by source. pre span style="font: 14pt Courier New;"p align="center"b2007/05/29/b/p/span codespan style="font: 10pt Courier New;"span class="general1-symbol"--------------------------------------------------------------------------------------------- bEDraw Office Viewer...

Buffer overflow

Buffer overflow in a certain ActiveX control in LeadTools Raster Dialog FileD Object LTRDFD14e.DLL 14.5.0.44 allows remote attackers to cause a denial of service Internet Explorer 7 crash or execute arbitrary code via a long DestinationPath property value...

CVE-2007-2946

Buffer overflow in a certain ActiveX control in LeadTools Raster Dialog FileD Object LTRDFD14e.DLL 14.5.0.44 allows remote attackers to cause a denial of service Internet Explorer 7 crash or execute arbitrary code via a long DestinationPath property value...

CVE-2007-2938

Buffer overflow in the BaseRunner ActiveX control in the Ademco ATNBaseLoader100 Module ATNBaseLoader100.dll 5.4.0.6, when Internet Explorer 6 is used, allows remote attackers to execute arbitrary code via a long argument to the 1 Send485CMD method, and possibly the 2 SetLoginID, 3 AddSite, 4...

ie6ademco-overflow.txt

!-- IE 6 / Ademco, co., ltd. ATNBaseLoader100 Module ATNBaseLoader100.dll 5, 4, 0, 6 remote buffer overflow exploit / XP SP2 it version by rgod site: retrogod.altervista.org this activex is installed browsing some webcam pages try this google dork: intitle:"Browser Launch Page" dork credit: dragg...

edraw-unsafe.txt

2007/05/28 ----------------------------------------------------------------------------------------------- EDraw Office Viewer Component edrawofficeviewer.ocx v. 4.0.5.20 Unsafe Method Vulnerability url: http://www.ocxt.com/officeviewer.php author: shinnai mail: shinnaiatautisticidotorg site:...