Oracle Hyperion ActiveX security vulnerabilities

Buffer overflow in ODBC driver used by ActiveX component, unsafe methods...

PcVue ActiveX multiple security vulnerabilities

Unsafe methods, array index overflow, code execution...

CheckPoint SSL VPN ActiveX code execution

Unsafe methods allow file upload and execute...

Easewe FTP OCX ActiveX Control code execution

Unsafe methods allow data access and code execution...

Macrovision InstallShield Update Service ActiveX Unsafe Method

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Macrovision...

WinZip FileView (WZFILEVIEW.FileViewCtrl.61) ActiveX Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::IE,...

SupportSoft DNA Editor ActiveX unauathorized access

Multiple unsafe methods...

Symantec AppStream Client LaunchObj ActiveX Control Multiple Unsafe Methods (SYM09-001)

The version of the LaunchObj ActiveX control, a component included with Symantec AppStream Client / Altiris Streaming Agent and installed on the remote Windows host, reportedly contains a number of unsafe methods, such as 'installAppMgr', that can be used to download and execute arbitrary code. I...

PDFBuilderX ActiveX unauthorized filesystem access

Unsafe methods are available...

Microsoft Windows Media Encoder ActiveX code execution

Control supports unsafe methods...

Adobe Acrobat / Reader multiple security vulnerabilities

Multiple buffer overflows and integer overflows, unsafe methods, unsafe dynamic library loading...

HP Info Center ActiveX code execution

Few unsafe methods are explosed...

CA BrightStor ARCserve Backup unauthorized RPC access

Multiple unsafe methods are available with RPC interface...

CVE-2007-2929

The IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibly acpir.dll before 1.0.0.9 Automated Solutions 1.0 before fix pack 1, exposes unsafe methods to arbitrary web domains, which allows remote attackers to download arbitrary code on...

CVE-2007-2929

The CVE-2007-2929 issue affects the IBM/Lenovo Access Support acpRunner ActiveX control, distributed with AcpController.dll prior to version 1.2.8.0 (and possibly acpir.dll prior to 1.0.0.9). The ActiveX control exposes unsafe methods to arbitrary web domains, enabling remote attackers to downloa...

CVE-2007-2929: Undefined Security Weakness

The IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibly acpir.dll before 1.0.0.9 Automated Solutions 1.0 before fix pack 1, exposes unsafe methods to arbitrary web domains, which allows remote attackers to download arbitrary code on...

Multiple Kaspersky Antivirus / Internet Security security vulnerabilities

Multiple unsafe ActiveX methods allows files uploading from vulnerable host. Buffer overflow on ARJ files parsing. Local driver buffer overflow...

Kaspersky Antivirus ActiveX Unsafe Methods Vulnerability

This vulnerability allows remote attackers to download and remove any file on vulnerable installations of Kaspersky Anti-Virus. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaws exist within the ActiveX controls...

TeeChat Pro ActiveX unauthorized access

Unsafe methods allow to save file to any location...

WinZip FileView ActiveX control unsafe method

Added: 11/27/2006 CVE: CVE-2006-5198 BID: 21060 OSVDB: 30433 Background WinZip includes the FileView ActiveX control which provides a user interface similar to the file view pane in Windows Explorer. Problem The FileView ActiveX control is marked "safe for scripting" and exposes several unsafe...