CVE-2007-2604

Unspecified vulnerability in the FlexLabel ActiveX control allows remote attackers to cause a denial of service unstable behavior via an improper initialization, as demonstrated by a certain value of the Caption property...

CVE-2006-3456

The Symantec NAVOPTS.DLL ActiveX control aka Symantec.Norton.AntiVirus.NAVOptions 12.2.0.13, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, is designed for use only in application-embedded web browsers, which allows remote attackers to "crash the control" via...

CVE-2007-2601

CVE-2007-2601 is tied to a buffer overflow in the GDivX Zenith Player’s AviFixer ActiveX control (the fix.dll 1.0.0.1 component). The vulnerability allows remote attackers to execute arbitrary code by supplying a long value to the SetInputFile property. This is supported by multiple connected sou...

CVE-2007-2603

CVE-2007-2603 concerns the Audio CD Ripper OCX (AudioCDRipperOCX.ocx) 1.0 ActiveX control. The issue is an unspecified vulnerability in the Init function that allows remote attackers to cause a denial of service (NULL dereference and Internet Explorer crash) via unspecified vectors. Connected rec...

CVE-2007-2604

CVE-2007-2604 concerns the FlexLabel ActiveX control. The issue is an unspecified vulnerability that allows remote attackers to cause a denial of service (unstable behavior) through improper initialization of the Caption property. Connected documents confirm the same description across multiple s...

CVE-2006-3456

CVE-2006-3456 concerns the Symantec NAVOPTS.DLL ActiveX control (NAVOptions) in Norton AntiVirus/Internet Security/System Works 2005–2006 (NAVOptions 12.2.0.13). The control, intended for application-embedded web browsers, can be loaded in a standard browser window, causing initialization errors ...

CVE-2007-2604

Unspecified vulnerability in the FlexLabel ActiveX control allows remote attackers to cause a denial of service unstable behavior via an improper initialization, as demonstrated by a certain value of the Caption property...

BarCodeWiz ActiveX Control 2.0 (BarcodeWiz.dll) Remote BoF PoC

No description provided by source. span style="font: 14pt Courier New;"p align="center"b2007/05/09/b/p/span pre codespan style="font: 10pt Courier New;"span class="general1-symbol"--------------------------------------------------------------------------------...

McAfee ePolicy Orchestrator SiteManager ExportSiteList buffer overflow

Added: 05/11/2007 CVE: CVE-2007-1498 BID: 22952 OSVDB: 33796 Background ePolicy Orchestrator is a centralized security configuration and monitoring application. It includes the SiteManager ActiveX control which is implemented by sitemanager.dll. Problem A buffer overflow vulnerability in the...

Microsoft IE属性方法远程代码执行漏洞（MS07-027）

Internet Explorer是微软发布的非常流行的操作系统。 Internet Explorer的内部调用方法的实现上存在漏洞，远程攻击者可能利用此漏洞控制用户机器。 当Internet Explorer调用属性方法时，可能以一种攻击者可以执行任意代码的方式来破坏内存。攻击者可能通过构建特制网页来利用此漏洞，如果用户查看了该网页，则可能允许远程执行代码。成功利用此漏洞的攻击者可以完全控制受影响的系统。 Microsoft Internet Explorer 6.0 - Microsoft Windows XP SP2 - Microsoft Windows Server 2003...

McAfee VirusScan 10.0.21 ActiveX control Stack Overflow PoC

No description provided by source. html headtitle Prove of Concept - Mc Afee Viruscan Stack Overflow v10.0.21/title /head h4Prove of Concept - Mc Afee Viruscan Stack Overflow v10.0.21 http://download.mcafee.com/fr/ author - callAX mail - [email protected]...

BarCodeWiz ActiveX Control 2.52 (BarcodeWiz.dll) SEH Overwrite Exploit

No description provided by source. !-- =============================================================================================== BarCodeWiz ActiveX Control 2.52 BarcodeWiz.dllStack Overflow SEH Overwrite Exploit By Parveen Vashishtha...

Microsoft IE HTML对象脚本错误远程代码执行漏洞（MS07-027）

Internet Explorer是微软发布的非常流行的操作系统。 IE在处理内存访问的方式上存在漏洞，远程攻击者可能利用此漏洞控制用户机器。 Internet Explorer尝试访问未初始化的内存。因此，内存可能以一种攻击者可以在登录用户的上下文中执行任意代码的方式受到破坏。攻击者者可以通过构建特制的网页来利用这些漏洞。 如果用户查看网页，这些漏洞可能允许远程执行代码。成功利用这些漏洞的攻击者可以完全控制受影响的系统。 Microsoft Internet Explorer 7.0 - Microsoft Windows XP SP2 - Microsoft Windows Vist...

Secunia Research: BearShare NCTAudioFile2 ActiveX Control Buffer Overflow

====================================================================== Secunia Research 09/05/2007 - BearShare NCTAudioFile2 ActiveX Control Buffer Overflow - ====================================================================== Table of Contents Affected...

Norton Antivirus NAVOpts.dll ActiveX控件绕过安全限制漏洞

Symantec Norton AntiVirus是一款功能强大的反病毒程序。 Norton AntiVirus所带的ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞绕过浏览器的安全限制。 Norton会安装以下ActiveX控件： Progid：Symantec.Norton.AntiVirus.NAVOptions Clsid：085ABFE2-D753-445C-8A2A-D4BD46CE0811 文件：C:\Program Files\Norton Internet Security\Norton AntiVirus\NAVOpts.dll 版本：12.2.0.13...

Microsoft Capicom ActiveX控件远程代码执行漏洞（MS07-028）

CAPICOM.Certificates是一种ActiveX控件，允许脚本程序根据安全的基本Windows CryptoAPI功能加密数据。 CAPICOM.Certificates实现上存在输入验证漏洞，远程攻击者可能利用此漏洞控制用户机器。 Microsoft CAPICOM和BizTalk Server中的加密API组件对象模型证书ActiveX控件（CAPICOM.dll）处理某些用户输入时存在漏洞。如果传递了意外数据，则ActiveX控件可能失败，并允许远程执行代码。 Microsoft CAPICOM Microsoft BizTalk Server 2004 SP2...

CVE-2007-2585

Stack-based buffer overflow in the Verify function in the BarCodeWiz ActiveX control 2.0 and 2.52 BarcodeWiz.dll allows remote attackers to execute arbitrary code via a long argument...

Buffer overflow

Multiple buffer overflows in the Office Viewer OCX ActiveX control oa.ocx 3.2 allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via a long argument to the 1 HttpDownloadFile, 2 Open, 3 OpenWebFile, 4 DoOleCommand, 5 FTPDownloadFile, 6 FTPUploadFile, 7...

Microsoft Windows Media Services NMSA Session Description Object ActiveX control contains dangerous methods

Overview The Microsoft Windows Media Services NMSA Session Description Object ActiveX control fails to restrict access to dangerous methods. This vulnerability could allow a remote attacker to execute arbitrary code on an affected system. Description Microsoft Windows Media Services is a software...

incredimail-overflow.txt

IncrediMail IMMenuShellExt ActiveX Control Buffer Overflow Exploit - By Umesh Wanve shellcode=unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49%49%51%5a%56%54%58%36%33%30%56%58%34%41%30%42%36"...