Symantec Norton Antivirus NAVOPTS.DLL ActiveX Control Remote Code Execution Vulnerability

Description Symantec Norton Antivirus ActiveX control is prone to a remote code-execution vulnerability. An attacker may exploit this issue by enticing victims into opening a maliciously crafted HTML document. Successful exploits will allow attackers to execute arbitrary code in the context of th...

CVE-2007-2567: Undefined Security Weakness

Buffer overflow in the SaveBarCode function in the Taltech Tal Bar Code ActiveX control allows remote attackers to execute arbitrary code via unspecified vectors...

BarCodeWiz ActiveX Control 2.0 (BarcodeWiz.dll) Remote BoF PoC

Exploit for unknown platform in category dos / poc ============================================================== BarCodeWiz ActiveX Control 2.0 BarcodeWiz.dll Remote BoF PoC ============================================================== 2007/05/09...

Internet Explorer Multiple COM Objects Memory Corruption (MS07-027; CVE-2007-0942; CVE-2007-0944; CVE-2007-0945; CVE-2007-2221)

Microsoft Internet Explorer is the most widely used Internet browser. Multiple remote code execution vulnerabilities have been reported in Microsoft Internet Explorer. The vulnerabilities are due to several memory corruption errors in Microsoft Internet Explorer when instantiating the vulnerable...

Barcodewiz ActiveX Control 2.52 - 'Barcodewiz.dll' Overwrite (SEH)

shellcode=unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49%49%51%5a%56%54%58%36%33%30%56%58%34%41%30%42%36" shellcode=shellcode+unescape"%48%48%30%42%33%30%42%43%56%58%32%42%44%42%48%34%41%32%41%44%30%41%44%54%42%44%51%42%30%41%44%41"...

McAfee VirusScan 10.0.21 - ActiveX control Stack Overflow (PoC)

Proof of Concept - Mc Afee Viruscan Stack Overflow v10.0.21 Proof of Concept - Mc Afee Viruscan Stack Overflow v10.0.21 http://download.mcafee.com/fr/ author - callAX mail - [email protected] Url - http://www.shellcode.com.ar / http://www.securenetworks.ch sub CrAsHm3 Arg0 =...

CVE-2007-2584: Undefined Security Weakness

Buffer overflow in the IsOldAppInstalled function in the McSubMgr.McSubMgr Subscription Manager ActiveX control MCSUBMGR.DLL in McAfee SecurityCenter before 6.0.25 and 7.x before 7.2.147 allows remote attackers to execute arbitrary code via a crafted argument...

Barcodewiz ActiveX Control 2.0 - Barcodewiz.dll Remote Buffer Overflow (PoC)

Barcodewiz ActiveX Control 2.0 - Barcodewiz.dll Remote Buffer Overflow PoC 2007/05/09 -------------------------------------------------------------------------------- BarCodeWiz ActiveX Control 2.0 BarcodeWiz.dll Remote Buffer Overflow Exploit url: http://www.barcodewiz.com/ price: from $139 to...

Barcodewiz ActiveX Control 2.52 - Barcodewiz.dll Overwrite (SEH)

Barcodewiz ActiveX Control 2.52 - Barcodewiz.dll Overwrite SEH shellcode=unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49%49%51%5a%56%54%58%36%33%30%56%58%34%41%30%42%36"...

BarCodeWiz ActiveX Control 2.52 (BarcodeWiz.dll) SEH Overwrite Exploit

Exploit for unknown platform in category remote exploits ====================================================================== BarCodeWiz ActiveX Control 2.52 BarcodeWiz.dll SEH Overwrite Exploit ======================================================================...

McAfee VirusScan 10.0.21 - ActiveX control Stack Overflow (PoC)

McAfee VirusScan 10.0.21 - ActiveX control Stack Overflow PoC Proof of Concept - Mc Afee Viruscan Stack Overflow v10.0.21 Proof of Concept - Mc Afee Viruscan Stack Overflow v10.0.21 http://download.mcafee.com/fr/ author - callAX mail - [email protected] Url - http://www.shellcode.com.ar /...

CVE-2007-2585: Undefined Security Weakness

Stack-based buffer overflow in the Verify function in the BarCodeWiz ActiveX control 2.0 and 2.52 BarcodeWiz.dll allows remote attackers to execute arbitrary code via a long argument...

Microsoft CAPICOM Certificates ActiveX Control Code Execution (MS07-028; CVE-2007-0940)

CAPICOM Certificates CAPICOM.dll is an ActiveX control that provides a method for encrypting data based on secure underlying Windows CryptoAPI functionality.A remote code execution vulnerability has been reported in Cryptographic API Component Object Model CAPICOM Certificates.A remote attacker...

CVE-2007-2566: Undefined Security Weakness

The SaveBarCode function in the Taltech Tal Bar Code ActiveX control allows remote attackers to cause a denial of service disk consumption by uploading multiple bar codes, as demonstrated by a WSF package...

Heap overflow

Heap-based buffer overflow in the ConnectAsyncEx function in VNC Viewer ActiveX control scvncctrl.dll in the SmartCode VNC Manager 3.6 allows remote attackers to execute arbitrary code via a long argument...

Design/Logic Flaw

Unspecified vulnerability in the Cryptographic API Component Object Model Certificates ActiveX control CAPICOM.dll in Microsoft CAPICOM and BizTalk Server 2004 SP1 and SP2 allows remote attackers to execute arbitrary code via unspecified vectors, aka the "CAPICOM.Certificates Vulnerability."...

CVE-2007-0323

Buffer overflow in the SetLanguage function in Research In Motion RIM TeamOn Import Object ActiveX control TOImport.dll allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-2526

CVE-2007-2526 describes a heap-based buffer overflow in the ConnectAsyncEx function of the VNC Viewer ActiveX control (scvncctrl.dll) used by SmartCode VNC Manager 3.6, enabling remote code execution via a long argument. The connected sources confirm the vulnerable component and impact but do not...

CVE-2007-0323

CVE-2007-0323 describes a buffer overflow in the SetLanguage function of the Research In Motion TeamOn Import Object ActiveX control (TOImport.dll). The vulnerability could allow an attacker to execute arbitrary code on a vulnerable system, potentially via a user-loaded HTML/IE context that lever...

CVE-2007-0940

CVE-2007-0940 describes a remote code execution vulnerability in the CAPICOM Certificates ActiveX control (CAPICOM.dll) used by Microsoft CAPICOM and BizTalk Server 2004 SP1/SP2. The flaw arises from how CAPICOM.Certificates validates inputs, enabling an attacker who entices a user to visit a cra...