5640 matches found
Microsoft Windows daxctle.ocx and HTML parsing buffer overflows
DirectAnimation.PathControl ActiveX control KeyFrame method heap overflow. Buffer overflow in CSS Floatproperty. May be used for hidden malware installation...
CVE-2006-5198
The WZFILEVIEW.FileViewCtrl.61 ActiveX control aka Sky Software "FileView" ActiveX control for WinZip 10.0 before build 7245 allows remote attackers to execute arbitrary code via unspecified "unsafe methods."...
CVE-2006-5198
The WZFILEVIEW.FileViewCtrl.61 ActiveX control aka Sky Software "FileView" ActiveX control for WinZip 10.0 before build 7245 allows remote attackers to execute arbitrary code via unspecified "unsafe methods."...
CVE-2006-5198
CVE-2006-5198 affects WinZip 10.0 via the WZFILEVIEW.FileViewCtrl.61 ActiveX control; builds before 7245 are vulnerable to remote code execution by unsafe methods (notably via long arguments to CreateNewFolderFromName). Exploitation details have been observed in public advisories and Metasploit-r...
Microsoft Agent ActiveX Control Remote Code Execution Vulnerability
Description The Microsoft Agent ActiveX control is prone to remote code execution. An attacker could exploit this issue to execute code in the context of the user visiting a malicious web page. Technologies Affected Avaya S8100 Media Servers Avaya S8100 Media Servers R10 Avaya S8100 Media Servers...
WinZip FileView ActiveX Control Unsafe Method Exposure Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of WinZip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists within the ActiveX control...
WinZip 10.0.7245 - FileView ActiveX Control Stack Overflow (PoC)
WinZip 10.0.7245 - FileView ActiveX Control Stack Overflow PoC !-- Sub WZFILEVIEWOnAfterItemAddItem WZFILEVIEW.FilePattern =...
WinZIP <= 10.0.7245 (FileView ActiveX Control) Stack Overflow PoC
Exploit for unknown platform in category dos / poc ================================================================= WinZIP !-- Sub WZFILEVIEWOnAfterItemAddItem WZFILEVIEW.FilePattern =...
Microsoft XML核心服务XMLHTTP控件代码执行漏洞
Microsoft XML核心服务（MSXML）允许使用JScript、VBScript和Microsoft Visual Studio 6.0的用户构建可与其他符合XML 1.0标准的应用程序相互操作的XML应用。 在Microsoft XML Core Services 4.0的XMLHTTP 4.0 ActiveX控件中，setRequestHeader函数没有正确地处理HTTP请求，允许攻击者诱骗用户访问恶意的站点导致执行任意指令。 Microsoft XML Core Services 4.0 - Microsoft Windows XP SP2 - Microsoft...
Microsoft XML Core Service XMLHTTP ActiveX Control 中允许远程执行代码漏洞
Microsoft XML Core Service 这个问题属于为一种远程执行代码漏洞。 An attacker 黑客可以利用这个漏洞通过受攻击的程序执行任意代码，进一步造成更多的危害。失败的攻击尝试也可导致拒绝服务。 Microsoft XML Core Services 4.0 Microsoft Windows XP Tablet PC Edition SP2 Microsoft Windows XP Tablet PC Edition SP1 Microsoft Windows XP Tablet PC Edition Microsoft Windows XP...
America Online ICQ ActiveX控件远程代码执行漏洞
ICQ是一款非常流行的即时通讯聊天工具。 ICQ安装的ICQPhone.SipxPhoneManager ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 ICQ中CLSID为54BDE6EC-F42F-4500-AC46-905177444300的ICQPhone.SipxPhoneManager ActiveX控件的DownloadAgent函数中存在安全漏洞。这个函数取了文件的单个URI参数下载文件并以当前用户的权限执行，因此攻击者可以通过向目标ICQ用户发送消息导致执行任意代码。 AOL ICQ 5.1...
CVE-2006-5745
CVE-2006-5745 describes a memory-corruption vulnerability in the XMLHTTP ActiveX Control (MSXML4) used by Internet Explorer on Windows, enabling remote code execution when an attacker crafts arguments to setRequestHeader in the XMLHTTP 4.0 control. The issue affects Microsoft XML Core Services 4....
ICQ code execution
Unsafe function of ICQPhone.SipxPhoneManager ActiveX control allows to download and execute malware code from ICQ message or Web page...
America Online ICQ 5.1 - ActiveX Control Remote Code Execution
America Online ICQ 5.1 - ActiveX Control Remote Code Execution source: https://www.securityfocus.com/bid/20930/info The America Online ICQ ActiveX Control is prone to a remote code-execution vulnerability. An attacker could exploit this issue simply by sending a message to a victim ICQ user...
[Full-disclosure] ZDI-06-037: America Online ICQ ActiveX Control Code Execution Vulnerability
ZDI-06-037: America Online ICQ ActiveX Control Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-037.html November 6, 2006 -- CVE ID: CVE-2006-5650 -- Affected Vendor: America Online -- Affected Products: America Online ICQ 5.1 -- TippingPointTM IPS Customer...
America Online ICQ 5.1 - ActiveX Control Remote Code Execution
source: https://www.securityfocus.com/bid/20930/info The America Online ICQ ActiveX Control is prone to a remote code-execution vulnerability. An attacker could exploit this issue simply by sending a message to a victim ICQ user. Successful exploits could allow the attacker to execute arbitrary...
IBM eGatherer ActiveX控件代码执行漏洞
IBM eGatherer控件是IBM用于自动维护PC的解决方案。 eGatherer控件的RunEgatherer函数实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 这个函数会接受eGatherer日志输出的指定文件名。即使已经为输出设置了合法的路径参数，ActiveX仍会向SystemDrive写入日志文件。如果攻击者能够发送超长的参数的话，就会触发栈溢出漏洞，导致执行任意代码。 IBM eGatherer 3.20.0284.0 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Microsoft Security Advisory (927892) Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution
Microsoft Security Advisory 927892 Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution Published: November 3, 2006 Microsoft is investigating public reports of a vulnerability in the XMLHTTP 4.0 ActiveX Control, part of Microsoft XML Core Services 4.0 on Windows. We are...
Microsoft XML Core Services XMLHTTP ActiveX control vulnerability
Overview The Microsoft XML Core Services XMLHTTP ActiveX control contains an unspecified vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft XML Core Services MSXML allow developers who use applications such as...
CVE-2006-5658
BlooMooWeb ActiveX control AidemATL.dll allows remote attackers to 1 download arbitrary files via a URL in the bstrUrl parameter to the BWDownloadFile method, 2 execute arbitrary local files via a file path in the bstrParams parameter to the BWLaunchGame method, and 3 delete arbitrary files via a...