5640 matches found
Yahoo! Messenger YMMAPI.YMailAttach ActiveX (ymmapi.dll) Overflow
The remote host contains a version of the 'YMailAttach' ActiveX control included with Yahoo! Messenger. The version of this ActiveX control on the remote host reportedly has an unspecified buffer overflow. If an attacker can trick a user on the affected host into visiting a specially crafted web...
CVE-2006-6510
An unspecified ActiveX control in SiteKiosk before 6.5.150 is installed "safe for scripting", which allows local users to bypass security protections and read arbitrary files via certain functions...
CVE-2006-6510
SiteKiosk pre-6.5.150 contains an unspecified ActiveX control labeled “safe for scripting” that can bypass protections and read arbitrary files via certain functions. This is documented across CVE-2006-6510 sources (NVD), and corroborated by the Nessus entry noting additional locally exploitable ...
CVE-2006-6510
An unspecified ActiveX control in SiteKiosk before 6.5.150 is installed "safe for scripting", which allows local users to bypass security protections and read arbitrary files via certain functions...
Microsoft Visual Studio “WMI Object Broker”控件代码执行漏洞（MS06-073）
Microsoft Visual Studio是微软公司的开发工具套件系列产品，是一个基本完整的开发工具集，包括了软件整个生命周期中所需要的大部分工具。 Visual Studio的"WMI Object Broker"控件在例程的创建和处理上存在漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意恶意代码。 Visual Studio所捆绑的WMI Object Broker ActiveX控件允许创建系统上已有的ActiveX控件例程。以这种方式创建的ActiveX对象会绕过ActiveX安全限制，如忽略kill bit和safe for...
ZDI-06-047: Microsoft Visual Studio WmiScriptUtils.dll Cross-Zone Scripting Vulnerability
ZDI-06-047: Microsoft Visual Studio WmiScriptUtils.dll Cross-Zone Scripting Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-047.html December 12, 2006 -- CVE ID: CVE-2006-4704 -- Affected Vendor: Microsoft -- Affected Products: Visual Studio 2005 Standard Edition Visual Studio 20...
Microsoft Visual Studio WmiScriptUtils.dll Cross-Zone Scripting Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. Successful exploitation requires that the target user browse to a malicious web page. The specific flaw exists in the Microsoft WMIScriptUtils.WMIObjectBroker2 ActiveX...
CVE-2006-6442
Stack-based buffer overflow in the SetClientInfo function in the CDDBControlAOL.CDDBAOLControl ActiveX control cddbcontrol.dll, as used in America Online AOL 7.0 4114.563, 8.0 4129.230, and 9.0 Security Edition 4156.910, and possibly other products, allows remote attackers to execute arbitrary co...
CVE-2006-6442
Stack-based buffer overflow in the SetClientInfo function in the CDDBControlAOL.CDDBAOLControl ActiveX control cddbcontrol.dll, as used in America Online AOL 7.0 4114.563, 8.0 4129.230, and 9.0 Security Edition 4156.910, and possibly other products, allows remote attackers to execute arbitrary co...
CVE-2006-6410
Buffer overflow in an ActiveX control in VMWare 5.5.1 allows local users to execute arbitrary code via a long VmdbDb parameter to the Initialize function...
CVE-2006-6410
Buffer overflow in an ActiveX control in VMWare 5.5.1 allows local users to execute arbitrary code via a long VmdbDb parameter to the Initialize function...
CVE-2006-6410
The CVE-2006-6410 entry describes a buffer overflow in an ActiveX control in VMware 5.5.1 that allows local users to execute arbitrary code by passing a long VmdbDb parameter to the Initialize function. The NVD entry corroborates this description and lists a CVSSv2 base score of 4.6 (Medium) with...
Microsoft Internet Explorer CHTSKDIC.DLL拒绝服务漏洞
Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer实例化CHTSKDIC.DLL COM对象存在问题，远程攻击者可以利用漏洞进行内存破坏攻击，可能以进程权限执行任意指令。 当Microsoft Internet Explorer尝试以ActiveX控件实例化CHTSKDIC.DLLMicrosoft IME COM对象，可能破坏系统内存造成拒绝服务，可能导致任意代码执行。 Microsoft Internet Explorer 6.0 SP2 Microsoft Internet Explorer 6....
Microsoft Internet Explorer IMSKDIC.DLL拒绝服务漏洞
Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer实例化IMSKDIC.DLL COM对象存在问题，远程攻击者可以利用漏洞进行内存破坏攻击，可能以进程权限执行任意指令。 当Microsoft Internet Explorer尝试以ActiveX控件实例化IMSKDIC.DLLMicrosoft IME COM对象，可能破坏系统内存造成拒绝服务，可能导致任意代码执行。 Microsoft Internet Explorer 6.0 SP2 Microsoft Internet Explorer 6.0...
[SA23043] AOL CDDBControl ActiveX Control "SetClientInfo()" Buffer Overflow
TITLE: AOL CDDBControl ActiveX Control "SetClientInfo" Buffer Overflow SECUNIA ADVISORY ID: SA23043 VERIFY ADVISORY: http://secunia.com/advisories/23043/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: AOL 9.x http://secunia.com/product/6840/ AOL 8.x...
AOL ActiveX element buffer overflow
Buffer overflow in CDDBControlAOL.CDDBAOLControl ActiveX control...
Adobe Reader < 8.0 AcroPDF ActiveX Control Multiple Vulnerabilities
The remote host contains a version of the 'AcroPDF' ActiveX control included with Adobe Reader and Acrobat. The version of this ActiveX control on the remote host reportedly exposes several methods that fail to handle malformed arguments. If an attacker can trick a user on the affected host into...
CVE-2006-6236
Adobe Reader Adobe Acrobat Reader 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument string to the 1 src, 2 setPageMode, 3 setLayoutMode, and 4 setNamedDest methods in an AcroPDF ActiveX control, a different set of vector...
CVE-2006-6236
Adobe Reader/AcroPDF ActiveX in Windows is affected by CVE-2006-6027 and CVE-2006-6236. CVE-2006-6027 describes a memory corruption flaw in the AcroPDF ActiveX control, exploitable via the LoadFile method path, or related argument handling, potentially allowing remote code execution. CVE-2006-623...
