PT-2005-1945 · Adobe · Svg Viewer

Name of the Vulnerable Software and Affected Versions: Adobe SVG Viewer versions 3.02 and earlier Description: The issue allows remote attackers to determine the existence of arbitrary files by setting the src property to the target filename and using Javascript to determine if the web page...

Adobe SVG Viewer 3.0 - ActiveX Control SRC Information Disclosure

source: https://www.securityfocus.com/bid/13490/info The Adobe SVG Viewer ActiveX control is prone to an information disclosure vulnerability. Reports indicate that the Adobe SVG Viewer ActiveX control may be employed to disclose the existence of a target file. Information that is harvested by...

[SNS Advisory No.80] nProtect:Netizen Arbitrary File Download Vulnerability

------------------------------------------------------------------ SNS Advisory No.80 nProtect:Netizen Arbitrary File Download Vulnerability Problem first discovered on: Wed, 13 Apr 2005 Published on: Mon, 25 Apr 2005 ------------------------------------------------------------------ Severity...

Local file detection found through Adobe Reader ActiveX control

Hyperdose Security Advisory Name: Local file detection found through Adobe Reader ActiveX control Systems Affected: Adobe Reader 7.0 and earlier Severity: Low Author: Robert Fly - [email protected] Advisory URL: http://www.hyperdose.com/advisories/H2005-06.txt --Adobe Description-- From...

CVE-1999-1576

Buffer overflow in Adobe Acrobat ActiveX control pdf.ocx, PDF.PdfCtrl.1 1.3.188 for Acrobat Reader 4.0 allows remote attackers to execute arbitrary code via the pdf.setview method...

CVE-1999-1578

CVE-1999-1578 involves a buffer overflow in the Registration Wizard ActiveX control (regwizc.dll, InvokeRegWizard) version 3.0.0.0, used by Internet Explorer 4.01 and 5. The root cause is a buffer overflow in the ActiveX control, which allows remote attackers to execute arbitrary commands. The vu...

CVE-1999-1579

CVE-1999-1579 affects the Cenroll ActiveX control (xenroll.dll) used in Terminal Server Editions of Windows NT 4.0 and Windows NT Server 4.0 prior to SP6. The vulnerability enables remote attackers to cause a denial of service via resource consumption by creating a large number of arbitrary files...

CVE-1999-1577

Buffer overflow in HHOpen ActiveX control hhopen.ocx 1.0.0.1 for Internet Explorer 4.01 and 5 allows remote attackers to execute arbitrary commands via long arguments to the OpenHelp method...

CVE-1999-1578

Buffer overflow in Registration Wizard ActiveX control regwizc.dll, InvokeRegWizard 3.0.0.0 for Internet Explorer 4.01 and 5 allows remote attackers to execute arbitrary commands...

CVE-2003-1129

Vulnerability: Yahoo! Audio Conferencing (Voice Chat) ActiveX control prior to 1.0.0.45 is affected by a buffer overflow when processing a URL with a long hostname to Yahoo! Messenger/Chat. Impact: remote DoS and possible arbitrary code execution. Affected component: Yahoo! Audio Conferencing Act...

uofpConfig.txt

University of Phoenix Outlook Express Unauthorized Configuration Manipulation Vendor Homepage: http://www.phoenix.edu Discovered by: Adam Baldwin [email protected] www.evilpacket.net\advisories\EP-000-0002.html Discovery Date: 1.17.2005 File Name: PhxStudent15.ocx Vulnerable Version:...

US-CERT Technical Cyber Security Alert TA05-012B -- Microsoft Windows HTML Help ActiveX Contol Cross-Domain Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Technical Cyber Security Alert TA05-012B Microsoft Windows HTML Help ActiveX Contol Cross-Domain Vulnerability Original release date: January 12, 2005 Last revised: -- Source: US-CERT Systems Affected Windows 98, Me, 2000, XP, and Server 2003 Internet...

Microsoft Windows HTML Help ActiveX control does not adequately validate window source

Overview The Microsoft Windows HTML Help ActiveX control contains a cross-domain vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary commands or code with the privileges of the user running the control. The HTML Help control can be instantiated by an HTML...

VulnCheck KEV: CVE-2004-1043

Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to execute arbitrary code by using the "Related Topics" command in the Help ActiveX Control hhctrl.ocx to open a Help popup window containing the PCHealth tools.htm file in the local zone and injecting Javascript to be executed, as...

CVE-2004-1324

The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the 1 artist or 2 song fields of a music file, if the file is processed using Internet Explorer...

CVE-2004-1325

The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and the size of the file if the file exists, which allows remote attackers to determine the existence of files on the local system...

CVE-2004-1325

The CVE-2004-1325 entry concerns the ActiveX control used by Windows Media Player 9.0. The getItemInfoByAtom function returns 0 if a target file does not exist, or the file size if it exists, enabling remote attackers to determine whether files exist on the local system. The description focuses o...

Microsoft Internet Explorer DHTML Editing ActiveX control contains a cross-domain vulnerability

Overview A cross-domain vulnerability exists in the DHTML Editing ActiveX control. An attacker may be able to execute arbitrary script in the Local Machine Zone or read or modify data in other domains. For example, the attacker could execute arbitrary commands with parameters, download and execut...

[Full-Disclosure] Remote code execution with parameters without user interaction, even with XP SP2

PoC called CMDExe: http://www.freewebs.com/shreddersub7/htm.htm Discussion: http://www.freewebs.com/shreddersub7/expl-discuss.htm ------------------Which systems are vulnerable?-------- Any system running any Microsoft Windows XP edition with Internet Explorer 6 or higher, even with SP2 applied...

CVE-2004-2663

The 1 SetDebugging and 2 RunEgatherer methods in IBM Access Support eGatherer ActiveX control 2.0.0.16 allow remote attackers to create files with arbitrary content, as demonstrated by creating a .hta file in a Startup folder...