CVE-2006-4627

System Information ActiveX control msinfo.dll, when accessed via Microsoft Internet Explorer, allows remote attackers to cause a denial of service crash via a SaveFile function with a long 1 computer and possibly 2 filename and 3 category argument...

CVE-2006-4627

CVE-2006-4627 affects the System Information ActiveX control (msinfo.dll) when accessed via Internet Explorer. The issue allows a remote attacker to cause a denial of service (crash) by calling SaveFile with an excessively long computer and possibly long filename and category arguments. The avail...

CVE-2006-4555

Buffer overflow in the Retro64 / Miniclip CR64Loader ActiveX control allows remote attackers to execute arbitrary code via unspecified vectors involving an HTML document that references the CLSID of the control...

CVE-2006-4555

Summary (CVE-2006-4555) A buffer overflow in the Retro64 / Miniclip CR64Loader ActiveX control can allow a remote attacker to execute arbitrary code by enticing a user to view a crafted HTML document that references the control’s CLSID. The vulnerability affects the CR64Loader ActiveX control use...

CVE-2006-4555

Buffer overflow in the Retro64 / Miniclip CR64Loader ActiveX control allows remote attackers to execute arbitrary code via unspecified vectors involving an HTML document that references the CLSID of the control...

Retro64 / Miniclip CR64Loader ActiveX control buffer overflow

Overview The Retro64 / Miniclip CR64Loader ActiveX control contains a buffer overflow vulnerability. This may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The CR64Loader Object is an ActiveX control developed by Retro64. The web sites...

McAfee Subscription Manager ActiveX buffer overflow

Added: 08/25/2006 CVE: CVE-2006-3961 BID: 19265 OSVDB: 27698 Background McAfee Antivirus products access the McAfee Security Center product which allows users to set preferences and settings for numerous installed McAfee components and services. The Security Center includes a Subscription Manager...

CVE-2006-4221

Stack-based buffer overflow in the IBM Access Support eGatherer ActiveX control before 3.20.0284.0 allows remote attackers to execute arbitrary code via a long filename parameter to the RunEgatherer method...

CVE-2004-2663

The CVE-2004-2663 entry concerns IBM Access Support eGatherer ActiveX control 2.0.0.16. The two methods, SetDebugging and RunEgatherer, allow remote attackers to write arbitrary files, demonstrated by creating an .hta file in a Startup folder. This is a remote code/content-creation vulnerability ...

CVE-2006-4221

Summary: CVE-2006-4221 is an IBM Access Support eGatherer ActiveX control vulnerability (RunEgatherer) causing a stack-based buffer overflow via a long filename, enabling remote code execution. Affected: IBM eGatherer ActiveX before version 3.20.0284.0; impact is code execution with the caller's ...

CVE-2004-2663

The 1 SetDebugging and 2 RunEgatherer methods in IBM Access Support eGatherer ActiveX control 2.0.0.16 allow remote attackers to create files with arbitrary content, as demonstrated by creating a .hta file in a Startup folder...

CVE-2006-4221

Stack-based buffer overflow in the IBM Access Support eGatherer ActiveX control before 3.20.0284.0 allows remote attackers to execute arbitrary code via a long filename parameter to the RunEgatherer method...

Microsoft Internet Explorer 6 - TSUserEX.dll ActiveX Control Memory Corruption

Microsoft Internet Explorer 6 - TSUserEX.dll ActiveX Control Memory Corruption source: https://www.securityfocus.com/bid/19570/info Microsoft Internet Explorer is prone to a memory-corruption vulnerability. This is related to the handling of the 'tsuserex.dll' COM object ActiveX control. Attacker...

Microsoft Internet Explorer 6 - 'TSUserEX.dll' ActiveX Control Memory Corruption

source: https://www.securityfocus.com/bid/19570/info Microsoft Internet Explorer is prone to a memory-corruption vulnerability. This is related to the handling of the 'tsuserex.dll' COM object ActiveX control. Attackers may exploit this issue via a malicious web page to execute arbitrary code in...

Microsoft Internet Explorer 6 - MSOE.dll Denial of Service

Microsoft Internet Explorer 6 - MSOE.dll Denial of Service source: https://www.securityfocus.com/bid/19530/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability. This issue occurs because the application fails to load a DLL library when instantiated as an ActiveX control...

Microsoft Internet Explorer 6 - 'MSOE.dll' Denial of Service

source: https://www.securityfocus.com/bid/19530/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability. This issue occurs because the application fails to load a DLL library when instantiated as an ActiveX control. An attacker may exploit this issue to crash Internet...

Panda ActiveScan 5.53 - Ascan_6.asp ActiveX Control Cross-Site Scripting

Panda ActiveScan 5.53 - Ascan6.asp ActiveX Control Cross-Site Scripting source: https://www.securityfocus.com/bid/19471/info Panda ActiveScan is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have...

CAID 34509 - CA eTrust Antivirus WebScan vulnerabilities

Title: CA eTrust Antivirus WebScan vulnerabilities CA Vulnerability ID CAID: 34509 CA Advisory Date: 2006-08-03 Discovered By: Matt Murphy of the TippingPoint Security Research Team Impact: Remote attacker can execute arbitrary code. Summary: Ca eTrust Antivirus WebScan is a free, web-based virus...

CVE-2006-3961

Buffer overflow in McSubMgr ActiveX control mcsubmgr.dll in McAfee Security Center 6.0.23 for Internet Security Suite 2006, Wireless Home Network Security, Personal Firewall Plus, VirusScan, Privacy Service, SpamKiller, AntiSpyware, and QuickClean allows remote user-assisted attackers to execute...

CVE-2006-3961

The CVE-2006-3961 vulnerability is a stack buffer overflow in the McAfee Subscription Manager ActiveX control (mcsubmgr.dll) used by McAfee Security Center and related products. A long/ crafted input passed to versus printf-family code (vsprintf) can overflow the stack, potentially allowing remot...