Design/Logic Flaw

Microsoft Internet Explorer 7 allows remote attackers to cause a denial of service browser hang via JavaScript that matches a regular expression against a long string, as demonstrated using /./...

MS Windows Animated Cursor (.ANI) Stack Overflow Exploit

No description provided by source. / Copyright c 2007 devcode ^^ D E V C O D E ^^ Windows .ANI LoadAniIcon Stack Overflow CVE-2007-1765 Description: A vulnerability has been identified in Microsoft Windows, which could be exploited by remote attackers to take complete...

CVE-2007-1403

The CVE-2007-1403 entry concerns the Macromedia Shockwave SwDir.dll ActiveX control (10.1.4.20) with remote denial of service and potential code execution via stack/buffer overflows in multiple properties (e.g., BGCOLOR, SRC, AutoStart, Sound, DrawLogo, DrawProgress). Connected advisories (CPAI-2...

Design/Logic Flaw

A certain ActiveX control in the DivXBrowserPlugin npdivx32.dll in DivX Web Player, as distributed with DivX Player 1.3.0, allows remote attackers to cause a denial of service Internet Explorer 7 crash via large values to DivxWP.Resize, related to resizing images...

CVE-2007-1294

The CVE-2007-1294 issue affects the DivX Web Player’s DivXBrowserPlugin (npdivx32.dll) shipped with DivX Player 1.3.0. The vulnerability allows remote attackers to trigger a denial-of-service via oversized values passed to DivxWP.Resize, related to image resizing, causing Internet Explorer 7 to c...

CVE-2007-1294

A certain ActiveX control in the DivXBrowserPlugin npdivx32.dll in DivX Web Player, as distributed with DivX Player 1.3.0, allows remote attackers to cause a denial of service Internet Explorer 7 crash via large values to DivxWP.Resize, related to resizing images...

Code injection

A certain ActiveX control in the Common Controls Replacement Project CCRP CCRP BrowseDialog Server ccrpbds6.dll allows remote attackers to cause a denial of service Internet Explorer 7 crash via a long 1 IsFolderAvailable or 2 RootFolder property value, different vectors than CVE-2007-0371...

DivX Web Player 1.3.0 (npdivx32.dll) Remote Denial of Service Exploit

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"----------------------------------------------------------------------------- DivX Web Player 1.3.0 npdivx32.dll "Resize" method Denial of Service url: http://www.divx.com/...

DivX Web Player 1.3.0 (npdivx32.dll) Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ===================================================================== DivX Web Player 1.3.0 npdivx32.dll Remote Denial of Service Exploit =====================================================================...

CVE-2007-1162

CVE-2007-1162 affects the CCRP BrowseDialog Server ActiveX control (ccrpbds6.dll) used by the Common Controls Replacement Project. The vulnerability is a denial-of-service condition triggered by excessively long values for the IsFolderAvailable or RootFolder properties, representing a vector dist...

Cross site scripting

The child frames in Microsoft Internet Explorer 7 inherit the default charset from the parent window when a charset is not specified in an HTTP Content-Type header or META tag, which allows remote attackers to conduct cross-site scripting XSS attacks, as demonstrated using the UTF-7 character set...

CVE-2007-1114

The CVE-2007-1114 entry describes a cross-site scripting issue in Microsoft Internet Explorer 7 where child frames inherit the page charset from the parent when the Content-Type header or META tag lacks a charset. This can enable XSS, demonstrated with UTF-7. The vulnerability affects how IE7 han...

CVE-2007-1094

CVE-2007-1094 affects Microsoft Internet Explorer 7. A memory corruption/NULL dereference vulnerability is triggered by crafted JavaScript in onUnload handlers that modify the document structure, leading to denial of service. The issue involves an unspecified error in handling onUnload and docume...

Secunia Research: Internet Explorer 7 "onunload" Event Spoofing Vulnerability

====================================================================== Secunia Research 23/02/2007 - Internet Explorer 7 "onunload" Event Spoofing Vulnerability - ====================================================================== Table of Contents Affected...

BrowseDialog Class (ccrpbds6.dll) Multiple Methods DoS Exploit

Exploit for unknown platform in category dos / poc ============================================================== BrowseDialog Class ccrpbds6.dll Multiple Methods DoS Exploit ==============================================================...

ActSoft DVD-Tools (dvdtools.ocx) Remote Buffer Overflow Exploit PoC

Exploit for unknown platform in category dos / poc =================================================================== ActSoft DVD-Tools dvdtools.ocx Remote Buffer Overflow Exploit PoC ===================================================================...

ActSoft DVD-Tools - dvdtools.ocx Remote Buffer Overflow (PoC)

ActSoft DVD-Tools - dvdtools.ocx Remote Buffer Overflow PoC ------------------------------------------------------------------------------------------------- ActSoft DVD-Tools dvdtools.ocx Buffer Overflow developer's url: http://www.activex-soft.com author: shinnai mail: shinnaiatautisticidotorg...

ActSoft DVD-Tools - 'dvdtools.ocx' Remote Buffer Overflow (PoC)

------------------------------------------------------------------------------------------------- ActSoft DVD-Tools dvdtools.ocx Buffer Overflow developer's url: http://www.activex-soft.com author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org Tested on Windows XP...

CVE-2007-0429

Affected software: DivX Player 6.4.1 includes DivXBrowserPlugin (npdivx32.dll) used as an ActiveX control in Internet Explorer. Vulnerability: invoking the GoWindowed method on a certain ActiveX instance can trigger a denial-of-service condition, leading to IE7 crash. Root cause: improper handlin...

Code injection

A certain ActiveX control in the Common Controls Replacement Project CCRP CCRP BrowseDialog Server ccrpbds6.dll allows remote attackers to cause a denial of service Internet Explorer 7 crash via a long CCRPBDc.SelectedFolder property value...