CVE-2007-2938

The CVE-2007-2938 entry affects the BaseRunner ActiveX control in the Ademco ATNBaseLoader100 Module (ATNBaseLoader100.dll) version 5.4.0.6. It describes a buffer overflow condition that, when Internet Explorer 6 is used, allows remote attackers to execute arbitrary code via a long argument to th...

CVE-2007-2946

CVE-2007-2946 involves a buffer overflow in LeadTools Raster Dialog File_D Object (LTRDFD14e.DLL), an ActiveX control, version 14.5.0.44. The flaw can be triggered by a long DestinationPath property value, enabling remote code execution or a denial of service (causing Internet Explorer 7 to crash...

SOL7528 - Heap-based buffer overflow vulnerability in ActiveX control

A heap-based buffer overflow vulnerability exists in the FirePass ActiveX control. This ActiveX control is installed in Microsoft Internet Explorer when a user logs on to FirePass. In some configurations, this control may be installed at the FirePass logon page prior to authentication. It is...

Logitech VideoCall ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in the Logitech VideoCall ActiveX Control wcamxmp.dll 2.0.3470.448. By sending an overly long string to the "Start" method, an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/browser/logitechvideocall/start msf...

zenturi-overwrite.txt

pre 2007/05/30 ------------------------------------------------------------------------------------------- Zenturi ProgramChecker ActiveX sasatl.dll Arbitrary file download/overwrite Exploit url: http://www.programchecker.com/activeintro.aspx author: shinnai mail: shinnaiatautisticidotorg site:...

Macrovision FLEXnet Connect Software Manager DWUpdateService ActiveX control contains dangerous methods

Overview The Macrovision FLEXnet Connect Software Manager DWUpdateService ActiveX control fails to restrict access to its methods, which can allow a remote, unauthenticated attacker to execute arbitrary commands on a vulnerable system. Description Macrovision FLEXnet Connect is a software package...

Authentium Command Antivirus odapi.dll multiple ActiveX buffer overflows

Overview Authentium Command Antivirus contains multiple ActiveX vulnerabilities, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Authentium Command Antivirus provides multiple ActiveX controls. Many of the ActiveX controls provided ...

Logitech VideoCall multiple ActiveX controls contain stack buffer overflows

Overview Logitech VideoCall ActiveX controls contain multiple stack buffer overflows, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Logitech VideoCall is video conferencing software for Windows. Logitech VideoCall includes...

Buffer overflow

Buffer overflow in the HelpPopup method in the Microsoft Office 2000 Controllo UA di Microsoft Office ActiveX control OUACTRL.OCX 1.0.1.9 allows remote attackers to cause a denial of service probably winhlp32.exe crash via a long first argument. NOTE: it is not clear whether this issue crosses...

CVE-2007-2903

Buffer overflow in the HelpPopup method in the Microsoft Office 2000 Controllo UA di Microsoft Office ActiveX control OUACTRL.OCX 1.0.1.9 allows remote attackers to cause a denial of service probably winhlp32.exe crash via a long first argument. NOTE: it is not clear whether this issue crosses...

CVE-2007-2903

Buffer overflow in the HelpPopup method in the Microsoft Office 2000 Controllo UA di Microsoft Office ActiveX control OUACTRL.OCX 1.0.1.9 allows remote attackers to cause a denial of service probably winhlp32.exe crash via a long first argument. NOTE: it is not clear whether this issue crosses...

CVE-2007-2903

CVE-2007-2903 describes a buffer overflow in the HelpPopup method of the Microsoft Office 2000 Controllo UA di Microsoft Office ActiveX control (OUACTRL.OCX) 1.0.1.9. An attacker could trigger a denial-of-service (likely a winhlp32.exe crash) by supplying a long first argument. The note in the en...

Buffer overflow

Buffer overflow in a certain ActiveX control in LTRDF14e.DLL 14.5.0.44 in LeadTools Raster Dialog File Object allows remote attackers to execute arbitrary code via a long Directory property value...

CVE-2007-2895

Buffer overflow in a certain ActiveX control in LTRDF14e.DLL 14.5.0.44 in LeadTools Raster Dialog File Object allows remote attackers to execute arbitrary code via a long Directory property value...

CVE-2007-2895

Buffer overflow in a certain ActiveX control in LTRDF14e.DLL 14.5.0.44 in LeadTools Raster Dialog File Object allows remote attackers to execute arbitrary code via a long Directory property value...

CVE-2007-2885

CVE-2007-2885 (and related CVE-2007-4254) affect the MSVDT Database Designer 7.0 ActiveX control (VDT70.DLL). The NotSafe function argument can cause a denial of service (IE6 crash) per CVE-2007-2885, and CVE-2007-4254 describes a stack-based buffer overflow in the same control that could allow r...

CVE-2007-2885

The NotSafe function in the MSVDTDatabaseDesigner7 ActiveX control in VDT70.DLL in Microsoft Visual Database Tools MSVDT Database Designer 7.0 allows remote attackers to cause a denial of service Internet Explorer 6 crash via a long argument...

CVE-2007-2895

CVE-2007-2895 describes a buffer overflow in LeadTools Raster Dialog File Object’s ActiveX control LTRDF14e.DLL 14.5.0.44. The vulnerability allows remote code execution when an attacker supplies a long Directory property value, as noted across NVD and CVE records. The affected component is an Ac...

Zenturi ProgramChecker ActiveX File Download/Overwrite Exploit

Exploit for unknown platform in category remote exploits ============================================================== Zenturi ProgramChecker ActiveX File Download/Overwrite Exploit ============================================================== 2007/05/30...

EDraw Office Viewer Component Unsafe Method Exploit

No description provided by source. pre span style="font: 14pt Courier New;"p align="center"b2007/05/28/b/p/span codespan style="font: 10pt Courier New;"span class="general1-symbol"----------------------------------------------------------------------------------------------- bEDraw Office Viewer...