Microsoft Windows HTML Help Control Cross-Zone Scripting Vulnerability

Description The Microsoft Windows HTML Help ActiveX control hhctrl.ocx is prone to a vulnerability that may permit cross-zone scripting. The HTML Help control is a component that allows help functionality to be inserted in an HTML file. It is possible to exploit this vulnerability through Interne...

Microsoft MSN "Hrtbeat.ocx" ActiveX control contains unspecified vulnerability

Overview A vulnerability exists in the Microsoft MSN "Hrtbeat.ocx" ActiveX control. Description ActiveX is a technology that allows programmers to create reusable software components that can be incorporated into applications to extend their functionality. Microsoft Internet Explorer provides...

Microsoft Internet Explorer Heartbeat ActiveX Control Unspecified Vulnerability

Description An unspecified vulnerability exists in the Microsoft Internet Explorer Heartbeat MSN gaming ActiveX control Hrtbeat.ocx. Technologies Affected Avaya DefinityOne Media Servers Avaya IP600 Media Servers Avaya Modular Messaging MSS 1.1.0 Avaya Modular Messaging MSS 2.0.0 Avaya S3400...

Winamp ActiveX Control Remote Buffer Overflow

Binary data 2258.prm...

NullSoft Winamp 2.x3.x5.0.x - ActiveX Control Remote Buffer Overflow

NullSoft Winamp 2.x3.x5.0.x - ActiveX Control Remote Buffer Overflow source: https://www.securityfocus.com/bid/11107/info Nullsoft Winamp ActiveX Control is alleged to be prone to a remote buffer overflow vulnerability. This issue presents itself in an ActiveX control installed by the application...

Grokster 1.32.6 KaZaA Media Desktop 1.3.x1.6.12.0.x - ActiveX Control Remote Buffer Overflow

Grokster 1.32.6 KaZaA Media Desktop 1.3.x1.6.12.0.x - ActiveX Control Remote Buffer Overflow source: https://www.securityfocus.com/bid/11101/info Altnet is reported prone to a remote buffer overflow vulnerability. This issue presents itself in an ActiveX control installed by the application...

NullSoft Winamp 2.x/3.x/5.0.x - ActiveX Control Remote Buffer Overflow

source: https://www.securityfocus.com/bid/11107/info Nullsoft Winamp ActiveX Control is alleged to be prone to a remote buffer overflow vulnerability. This issue presents itself in an ActiveX control installed by the application. Reportedly, a malicious attacker can exploit this issue to execute...

Grokster 1.3/2.6 / KaZaA Media Desktop 1.3.x/1.6.1/2.0.x - ActiveX Control Remote Buffer Overflow

source: https://www.securityfocus.com/bid/11101/info Altnet is reported prone to a remote buffer overflow vulnerability. This issue presents itself in an ActiveX control installed by the application. Reportedly, a malicious attacker can exploit this issue to execute arbitrary code. This overrun...

CVE-2001-1103

CVE-2001-1103 concerns the FTP Voyager ActiveX control, prior to version 8.0. When flagged as safe for scripting (the default) or when permitted by the IObjectSafety interface, the control could allow remote attackers to execute arbitrary commands. The affected component is the FTP Voyager Active...

CVE-2004-0487

A certain ActiveX control in Symantec Norton AntiVirus 2004 allows remote attackers to cause a denial of service resource consumption and possibly execute arbitrary programs...

IBM ACPRunner 1.2.5 - ActiveX Control Dangerous Method

IBM ACPRunner 1.2.5 - ActiveX Control Dangerous Method source: https://www.securityfocus.com/bid/10561/info It is reported that the IBM acpRunner ActiveX control contains dangerous methods that may result in a remote compromise of a system on which the ActiveX control is installed. These methods...

IBM ACPRunner 1.2.5 - ActiveX Control Dangerous Method

source: https://www.securityfocus.com/bid/10561/info It is reported that the IBM acpRunner ActiveX control contains dangerous methods that may result in a remote compromise of a system on which the ActiveX control is installed. These methods may be accessed by a malicious website and may result i...

CVE-2004-0549

The CVE-2004-0549 vulnerability is a cross-domain navigation/redirect issue in the Internet Explorer rendering stack (WebBrowser ActiveX or MSHTML) used by IE6 and other IE-enabled components. A remote attacker could abuse navigation via delayed HTTP redirects (or manipulated Location headers) an...

CVE-2004-0549

The WebBrowser ActiveX control, or the Internet Explorer HTML rendering engine MSHTML, as used in Internet Explorer 6, allows remote attackers to execute arbitrary code in the Local Security context by using the showModalDialog method and modifying the location to execute code such as Javascript,...

CVE-2004-0487

A certain ActiveX control in Symantec Norton AntiVirus 2004 allows remote attackers to cause a denial of service resource consumption and possibly execute arbitrary programs...

IBM EGatherer 2.0 - ActiveX Control Dangerous Method

IBM EGatherer 2.0 - ActiveX Control Dangerous Method source: https://www.securityfocus.com/bid/10562/info It is reported that the IBM eGatherer ActiveX control contains dangerous methods that may result in a remote compromise of a system on which the ActiveX control is installed. These methods ma...

IBM EGatherer 2.0 - ActiveX Control Dangerous Method

source: https://www.securityfocus.com/bid/10562/info It is reported that the IBM eGatherer ActiveX control contains dangerous methods that may result in a remote compromise of a system on which the ActiveX control is installed. These methods may be accessed by a malicious website and may result i...

Symantec Norton AntiVirus 2004 ActiveX control fails to properly validate input

Overview There is a vulnerability in an ActiveX control provided by Norton AntiVirus 2004 that could allow an attacker to execute arbitrary programs, launch a browser window containing an unauthorized URL, or cause a denial of service on a vulnerable system. Description Norton AntiVirus 2004 is a...

CVE-2004-1947

The AVXSCANONLINE.AvxScanOnlineCtrl.1 ActiveX control in BitDefender Scan Online allows remote attackers to 1 obtain sensitive information such as system drives and contents or 2 use the RequestFile method to download and execute arbitrary code via an object codebase that uses bitdefender.cab...

Norton "WrapNISUM Class" (WrapUM.dll) ActiveX control allows remote arbitrary command execution

Overview Symantec's Norton Internet Security 2004 Professional is a software package that provides antivirus, antispam, and personal firewall applications. A vulnerability in an Symantec's Norton Internet Security 2004 suite may permit a remote attacker to execute arbitrary commands on the local...