CVE-2006-2511

The ActiveX version of FrontRange iHEAT allows remote authenticated users to run arbitrary programs or access arbitrary files on the host machine by uploading a file with an extension that is not associated with an application, and selecting a file from the "Open With..." dialog...

CVE-2004-0978

Heap-based buffer overflow in the Hrtbeat.ocx Heartbeat ActiveX control for Internet Explorer 5.01 through 6, when users who visit online gaming sites that are associated with MSN, allows remote attackers to execute arbitrary code via the SetupData parameter...

IE6 + XP SP2 Vulnerability

Background information ====================== Windows XP Service Pack 2 has introduced new features that improve browsing security in Internet Explorer. Most of them are additional messages that force the user to validate everything that is done by the browser. Most of these messages are displaye...

CVE-2004-1686

Internet Explorer 6.0 in Windows XP SP2 allows remote attackers to bypass the Information Bar prompt for ActiveX and Javascript via an XHTML page that contains an Internet Explorer formatted comment between the DOCTYPE tag and the HTML tag, as demonstrated using the DesignScience MathPlayer Activ...

CVE-2004-0586

acpRunner ActiveX 1.2.5.0 allows remote attackers to execute arbitrary code via the 1 DownLoadURL, 2 SaveFilePath, and 3 Download ActiveX methods...

CVE-2004-0586

acpRunner ActiveX 1.2.5.0 allows remote attackers to execute arbitrary code via the 1 DownLoadURL, 2 SaveFilePath, and 3 Download ActiveX methods...

McAfee Freescan ActiveX Information Disclosure [Additional Details & PoC]

McAfee Freescan ActiveX Information Disclosure Additional Details & PoC ------------------------------------------------------------------------- I. ABSTRACT: McAfee Freescan is an online ActiveX based Antivirus utility. II. DESCRIPTION: I've been working on an information disclosure vulnerabilit...

Buffer Overflow in Tshoot.ocx Windows Troubleshooter ActiveX

No description provided...

RAV ActiveX Buffer overflow in ravupdt.dll file

RAV Online Scanning ActiveX Buffer Overflow in RAVUPDT.DLL ================================================= PROGRAM: RAV ONLINE SCANNING ACTIVEX HOMEPAGE: www.ravantivirus.com VULNERABLE VERSIONS: Online Version Only DESCRIPTION ================================================= RAV Online Scanni...

[Full-Disclosure] RAV Antivirus : Buffer Overflow in Online Scanning ActiveX

RAV Online Scanning ActiveX Buffer Overflow ================================================= PROGRAM: RAV ONLINE SCANNING ACTIVEX HOMEPAGE: www.ravantivirus.com VULNERABLE VERSIONS: Online Version Only DESCRIPTION ================================================= RAV Online Scanning is a free...

Microsoft Terminal Server Client Buffer Overrun (A082802-1)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Microsoft Terminal Server Client Buffer Overrun Release Date: 08/28/2002 Application: Microsoft Terminal Server ActiveX Client v5.02221.1 Platform: Windows 95/98/NT 4.0/2000/XP Severity:...

ADVISORY: MSN Messenger OCX Buffer Overflow

MSN Messenger OCX Buffer Overflow Release Date: 5/8/2002 Severity: High Remote code execution Systems Affected: Microsoft MSN Chat Control Microsoft MSN Messenger 4.5 and 4.6, which includes the MSN Chat control Microsoft Exchange Instant Messenger 4.5 and 4.6, which includes the MSN Chat control...

Macromedia Flash Activex Buffer overflow

Macromedia Flash Activex Buffer overflow Release Date: 05/02/2002 Severity: High Remote code execution Systems Affected: Flash Activex Ocx Version 6, revision 23 Possibly older versions Forward: This is an unusual advisory in a number of ways. One, it was found while investigating an access error...

Уязвимость ActiveX в Microsoft Outlook (code execution)

ActiveX компонент управляющий всей работой Outlook помечен как безопасный, что позволяет использовать его в Internet-страницах и письмах...

Дырка в Internet Explorer (Media Player ActiveX)

ActiveX-элемент Media Player позволяет выполнение Javascript В контексте локальной машины...

Security Bulletin (MS00-085)

Microsoft Security Bulletin MS00-085 - -------------------------------------- Patch Available for "ActiveX Parameter Validation" Vulnerability Originally posted: November 2, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windows 2000. Th...

Очередная уязвимость между фреймами в IE через Web Browser Control ActiveX

Метод navigate позволяет выполнение Javascript в контексте локальной машины...

CVE-2000-0464

Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the ActiveX parameter parsing capability, aka the "Malformed Component Attribute" vulnerability...

CVE-2000-0464

Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the ActiveX parameter parsing capability, aka the "Malformed Component Attribute" vulnerability...

Уязвимость в Microsoft Office

Элемент ActiveX Microsoft Office UA позволяет полностью управлять работой программ семейства Office через Internet без ведома пользователя. Кроме того, позволяет выполнять макросы без предупреждения пользователя...