CVE-2006-3925

Stack-based buffer overflow in ITIRecorder.MicRecorder ActiveX control in iarecord.dll in InterActual Player before 2.6 allows remote attackers to execute arbitrary code via a long argument to the Files method. NOTE: the provenance of this information is unknown; the details are obtained from thi...

Trend Micro OfficeScan 7.3 Multiple Vulnerabilities

The remote host appears to be running Trend Micro OfficeScan Server. This version of OfficeScan is vulnerable to multiple stack overflows in CGI programs that could allow a remote attacker to execute code in the context of the remote server. Note that OfficeScan server under Windows runs with...

WebEx Downloader ActiveX Control Command Injection

The Windows remote host contains the WebEx Downloader ActiveX control, which is used when attending or hosting a meeting using WebEx, a sharing and conferencing application for Windows. The version of this ActiveX control on the remote host reportedly allows an attacker to deliver arbitrary...

[SA20969] eBay Enhanced Picture Services ActiveX Control Buffer Overflow

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Reversing must be a passion as your skills will be challenged on a daily basis and you will be working several hours everyday in IDA, Ollydbg, and with BinDiff. Often, it is also requir...

Microsoft Internet Explorer 6 - RDS.DataControl Denial of Service

Microsoft Internet Explorer 6 - RDS.DataControl Denial of Service source: https://www.securityfocus.com/bid/18900/info Microsoft Internet Explorer 6 is reportedly prone to a denial-of-service vulnerability because the application fails to perform boundary checks before copying user-supplied data...

Microsoft Internet Explorer 6 RDS.DataControl Denial of Service Vulnerability

Description Microsoft Internet Explorer 6 is reportedly prone to a denial-of-service vulnerability because the application fails to perform boundary checks before copying user-supplied data into sensitive process buffers. This issue is triggered when an attacker convinces a victim to activate a...

CVE-2006-3423

CVE-2006-3423 affects WebEx Downloader ActiveX/Java controls prior to version 2.1.0.0. The vulnerability stems from lack of validation of downloaded components and control parameters (notably GpcUrlRoot and GpcIniFileName), allowing an attacker to supply a configuration file that can lead to DLL ...

CVE-2006-3424

Multiple buffer overflows in WebEx Downloader ActiveX Control, possibly in versions before November 2005, allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2006-3424

CVE-2006-3424 concerns multiple buffer overflows in the WebEx Downloader ActiveX Control, potentially affecting versions prior to November 2005. The vulnerability could allow remote code execution by an attacker via unspecified attack vectors. The connected documents confirm the affected componen...

CVE-2006-3391

The Execute function in iMBCContents ActiveX Control before 2.0.0.59 allows remote attackers to execute arbitrary files via the file URI handler...

CVE-2006-3357

Heap-based buffer overflow in HTML Help ActiveX control hhctrl.ocx in Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code by repeatedly setting the Image field of an Internet.HHCtrl.1 object to certain values,...

CVE-2006-3391

This CVE affects the iMBCContents ActiveX Control prior to 2.0.0.59. The vulnerability resides in the Execute function, which allows remote attackers to run arbitrary files via the file URI handler. Impact is remote code execution with partial confidentiality, integrity, and availability implicat...

CVE-2006-3391

The Execute function in iMBCContents ActiveX Control before 2.0.0.59 allows remote attackers to execute arbitrary files via the file URI handler...

Microsoft Internet Explorer 5.0.16.0 - Structured Graphics Control Denial of Service

Microsoft Internet Explorer 5.0.16.0 - Structured Graphics Control Denial of Service source: https://www.securityfocus.com/bid/18855/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability because it fails to handle ActiveX controls properly. This issue is triggered when an...

Touch ActiveX control code execution

Execute method allows execution of arbitrary files...

Gracenote CDDBControl ActiveX Control Option String Overflow

The Windows remote host contains the Gracenote CDDBControl ActiveX control, which is used by various products, including AOL's software, to lookup CD information in the Gracenote CDDB and is commonly marked as safe for scripting. The version of this ActiveX control on the remote host reportedly...

CVE-2006-3134

Buffer overflow in GraceNote CDDBControl ActiveX Control, as used by multiple products that use Gracenote CDDB, allows remote attackers to execute arbitrary code via a long option string...

CVE-2006-3134

Buffer overflow in GraceNote CDDBControl ActiveX Control, as used by multiple products that use Gracenote CDDB, allows remote attackers to execute arbitrary code via a long option string...

CVE-2006-3134

CVE-2006-3134 concerns the GraceNote CDDBControl ActiveX control. The vulnerability is a buffer overflow in the CDDB ActiveX object triggered by a long option string, allowing a remote attacker to execute arbitrary code on systems where the control is present. Affected vendors include AOL, Gracen...

CVE-2006-3217

The provided records identify CVE-2006-3217 as affecting JaguarEditControl (JEdit) ActiveX Control, version 1.1.0.20 and earlier. The vulnerability arises from a processing flaw involving a test field whose values (e.g., 2404 or 2790) can trigger leakage of sensitive information read from the .JT...