Acer LunchApp ActiveX Control fails to properly restrict access to methods

Overview The Acer LunchApp ActiveX control contains methods that can allow a remote, unauthenticated attacker to run arbitrary commands on a vulnerable system. Description The Acer LunchApp ActiveX control is provided by LunchApp.ocx. It contains a method called Run, which takes three parameters:...

Oracle ORADC - ActiveX Control Remote Code Execution

source: https://www.securityfocus.com/bid/22026/info Oracle ORADC ActiveX control is prone to a remote code-execution vulnerability. Exploiting this issue allows remote attackers to execute arbitrary machine code in the context of applications using the affected ActiveX control and possibly to...

CVE-2007-0174

Multiple stack-based multiple buffer overflows in the BRWOSSRE2UC.dll ActiveX Control in Sina UC2006 and earlier allow remote attackers to execute arbitrary code via a long string in the 1 astrVerion parameter to the SendChatRoomOpt function or 2 the astrDownDir parameter to the SendDownLoadFile...

Stack overflow

Multiple stack-based multiple buffer overflows in the BRWOSSRE2UC.dll ActiveX Control in Sina UC2006 and earlier allow remote attackers to execute arbitrary code via a long string in the 1 astrVerion parameter to the SendChatRoomOpt function or 2 the astrDownDir parameter to the SendDownLoadFile...

CVE-2007-0174

CVE-2007-0174 affects Sina UC2006 and earlier via the BRWOSSRE2UC.dll ActiveX Control. Two vulnerable paths: SendChatRoomOpt with a long astrVerion string, and SendDownLoadFile with a long astrDownDir string. This causes stack-based buffer overflows that allow remote code execution. Exploitation ...

CVE-2007-0174

Multiple stack-based multiple buffer overflows in the BRWOSSRE2UC.dll ActiveX Control in Sina UC2006 and earlier allow remote attackers to execute arbitrary code via a long string in the 1 astrVerion parameter to the SendChatRoomOpt function or 2 the astrDownDir parameter to the SendDownLoadFile...

winzip overflow exploit-vulnerability warning-the black bar safety net

Before seen a FileView ActiveX control overflow,but not this function,published online in the overflow code is also not very good, This is CreateNewFolderFromName function overflow,but since the front is a vulnerability issue,! Microsoft seems to have disabled this control, The test can be delete...

CVE-2006-6884

CVE-2006-6884 reports a Buffer Overflow in the WinZip FileView ActiveX control (WZFILEVIEW.FileViewCtrl.61) used by WinZip 10.0 Build 6667. The flaw allows remote code execution when a long argument is passed to CreateNewFolderFromName, a distinct issue from CVE-2006-5198. Public sources in the c...

CVE-2006-6885

The CVE describes a vulnerability in Macromedia Shockwave 10 where an ActiveX control in SwDir.dll (SwDir ActiveX) can be abused by sending a long string in the swURL attribute to cause a denial of service (IE7 crash). Affected component: SwDir.dll ActiveX control within Shockwave 10. Root cause:...

CVE-2006-6885

An ActiveX control in SwDir.dll in Macromedia Shockwave 10 allows remote attackers to cause a denial of service Internet Explorer 7 crash via a long string in the swURL attribute...

CVE-2006-6884

Buffer overflow in the WZFILEVIEW.FileViewCtrl.61 ActiveX control aka Sky Software "FileView" ActiveX control for WinZip 10.0 Build 6667 allows remote attackers to execute arbitrary code via a long argument to the CreateNewFolderFromName method, a different vulnerability than CVE-2006-5198...

Citrix ICA Client ActiveX control buffer overflow

Overview A vulnerability in an ActiveX control provided with the Citrix Presentation Server Client could allow a remote attacker to execute arbitrary code on an affected system. Description The Citrix Presentation Server Client software provides an ActiveX control that can be used to integrate th...

CVE-2006-6488

Stack-based buffer overflow in the DoModal function in the Dialog Wrapper Module ActiveX control DlgWrapper.dll before 8.4.166.0, as used by ICONICS OPC Enabled Gauge, Switch, and Vessel ActiveX, allows remote attackers to execute arbitrary code via a long 1 FileName or 2 Filter argument...

CVE-2006-6838

Rediff Bol Downloader ActiveX OCX control allows remote attackers to execute arbitrary files, and obtain sensitive information usernames and pathnames, via a URL in the url vbscript parameter...

CVE-2006-6847

An ActiveX control in ierpplug.dll for RealNetworks RealPlayer 10.5 allows remote attackers to cause a denial of service Internet Explorer 7 crash by invoking the RealPlayer.OpenURLInPlayerBrowser method with a long second argument...

ICONICS Dialog Wrapper Module ActiveX control buffer overflow

Buffer overflow in DoModal method...

WinZip FileView ActiveX controls CreateNewFolderFromName Method Buffer Overflow Vulnerability

WinZip FileView ActiveX controls CreateNewFolderFromName Method Buffer Overflow Vulnerability ------------------------------------------------------------------ SUMMARY: A vulnerability has been identified in Winzip 10.0 Build 6667,May be other version, which could be exploited by remote or local...

SiteKiosk < 6.5.150 Multiple Vulnerabilities

According to its version number, the installation of SiteKiosk on the remote host contains an unspecified ActiveX control that is marked as 'safe for scripting' yet exposes two dangerous methods that reading and downloading of any file from the kiosk. In addition, it fails to completely sanitize...

rediffbol.txt

Rediff Bol Downloader Allows Downloading and Spawning Arbitary Files Affected Program : Rediff Bol Download ActiveX ActiveX OCX Control that downloads the Rediff Bol Messenger setup and spawns it. Related URL : http://messenger.rediff.com/newbol/ Discovered by : Gregory R. Panakkal Vulnerability...

Rediff Bol Downloader (ActiveX Control) Execute Local File Exploit

No description provided by source. !-- Rediff Bol Downloader ActiveX Allows Downloading and Spawning Arbitary Files Affected Program : Rediff Bol Download ActiveX ActiveX OCX Control that downloads the Rediff Bol Messenger setup and spawns it. Related URL : http://messenger.rediff.com/newbol/...