CVE-2008-6898

CVE-2008-6898 affects SasCam Webcam Server 2.6.5 via the ActiveX SaschArt SasCam control. The vulnerability is a buffer overflow in the XHTTP Module 4.1.0.0 that can be triggered by a long argument to the Get method (and other unspecified methods), allowing remote code execution or a crash. Publi...

Sun Java JRE Multiple Vulnerabilities (263408 / 263409 / 263428 ..)

The version of Sun Java Runtime Environment JRE installed on the remote host is earlier than 6 Update 15 / 5.0 Update 20 / 1.4.222 / 1.3.126. Such version are potentially affected by the following security issues : - A vulnerability in the JRE audio system may allow system properties to be...

Juniper SSL-VPN IVE JuniperSetupDLL.dll ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in the JuniperSetupDLL.dll library which is called by the JuniperSetup.ocx ActiveX control, as part of the Juniper SSL-VPN IVE appliance. By specifying an overly long string to the ProductName object parameter, the stack is overwritten. This module...

US-CERT Technical Cyber Security Alert TA09-209A -- Microsoft Windows, Internet Explorer, and Active Template Library (ATL) Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA09-209A Microsoft Windows, Internet Explorer, and Active Template Library ATL Vulnerabilities Original release date: July 28, 2009 Last revised: -- Source: US-CERT Systems Affected Microsoft...

Microsoft Visual Studio ATL 'VariantClear()' Remote Code Execution Vulnerability

Description Microsoft Visual Studio is prone to a remote code-execution vulnerability in the Active Template Library ATL. Remote attackers can exploit this issue to execute arbitrary code with the privileges of the user running an application built with the affected library. Technologies Affected...

ActiveX controls built with Microsoft ATL fail to properly handle initialization data

Overview ActiveX controls that are built using a Microsoft ATL template may fail to properly handle initialization data, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft Active Template Library ATL is a set of C++ classes...

Researcher Shows Killbit is No Defense on MsVidCtl Flaw

Ryan Smith, one of the researchers who found the bug in the Microsoft MsVidCtl DLL that the vendor is rushing to patch this week, has posted a short video demonstration of a technique that bypasses the stop-gap solution of preventing the vulnerable ActiveX control from loading. In the demo, Smith...

VMSA-2008-0014 : Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX, VMware VCB address information disclosure, privilege escalation and other security issues.

I Security Issues a. Setting ActiveX kill bit Starting from this release, VMware has set the kill bit on its ActiveX controls. Setting the kill bit ensures that ActiveX controls cannot run in Internet Explorer IE, and avoids security issues involving ActiveX controls in IE. See the Microsoft KB...

Akamai Download Manager ActiveX Control < 2.2.4.8 Buffer Overflow

The Windows remote host contains the Download Manager ActiveX control from Akamai, which helps users download content. The version of this ActiveX control on the remote host reportedly is affected by a buffer overflow vulnerability in 'manager.exe' when handling Redswoosh downloads. If an attacke...

Akamai Technologies Security Advisory 2009-0001 &#40;Download Manager&#41;

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------- Akamai Technologies Security Advisory 2009-0001 Akamai ID: 2009-0001 Date: 2009/23/20 Product Name: Download Manager Affected Versions: 2.2.4.8 Fixed Version: 2.2.4.8 CVE IDs: TBD CVSS Base Score:...

Akamai Download Manager ActiveX code execution

It's possible to download and execute code without user intervation...

Stack overflow

Stack-based buffer overflow in the Symantec.FaxViewerControl.1 ActiveX control in WinFax\DCCFAXVW.DLL in Symantec WinFax Pro 10.03 allows remote attackers to execute arbitrary code via a long argument to the AppendFax method...

CVE-2009-2570

CVE-2009-2570: A stack-based buffer overflow in the Symantec.FaxViewerControl.1 ActiveX control (WinFax\DCCFAXVW.DLL) in Symantec WinFax Pro 10.03 allows remote attackers to execute arbitrary code via a long argument to the AppendFax method. The connected Nessus/NASL entries confirm the affected ...

CVE-2009-2570

Stack-based buffer overflow in the Symantec.FaxViewerControl.1 ActiveX control in WinFax\DCCFAXVW.DLL in Symantec WinFax Pro 10.03 allows remote attackers to execute arbitrary code via a long argument to the AppendFax method...

Adobe Flash vulnerability affects Flash Player and other Adobe products

Overview Adobe Flash contains a vulnerability that may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Adobe Flash Player, Reader, Acrobat, and other products that include Flash support are affected. Description Adobe Flash is a widely deployed multimedi...

MS Office Web Components Spreadsheet ActiveX (OWC10/11) Exploit

No description provided by source. Author : Ahmed Obied [email protected] - Based on the code posted at http://www.milw0rm.com/exploits/9163 - Tested using: Internet Explorer 7.0.5730.13 on Windows XP SP3 with owc10.dll installed Internet Explorer 7.0.5730.13 on Windows XP SP3 with owc11.dll...

Microsoft Office Web Components Spreadsheet - ActiveX 'OWC10/11' Remote Overflow

Author : Ahmed Obied [email protected] - Based on the code posted at http://www.milw0rm.com/exploits/9163 - Tested using: Internet Explorer 7.0.5730.13 on Windows XP SP3 with owc10.dll installed Internet Explorer 7.0.5730.13 on Windows XP SP3 with owc11.dll installed Usage : python ieowc.py...

Microsoft Office Web Components Spreadsheet - ActiveX OWC1011 Remote Overflow

Microsoft Office Web Components Spreadsheet - ActiveX OWC1011 Remote Overflow Author : Ahmed Obied [email protected] - Based on the code posted at http://www.milw0rm.com/exploits/9163 - Tested using: Internet Explorer 7.0.5730.13 on Windows XP SP3 with owc10.dll installed Internet Explorer...

MS Office Web Components Spreadsheet ActiveX (OWC10/11) Exploit

Exploit for windows platform in category remote exploits =============================================================== MS Office Web Components Spreadsheet ActiveX OWC10/11 Exploit =============================================================== Author : Ahmed Obied - Tested using: Internet...

PPStream PowerPlayer.DLL ActiveX控件缓冲区溢出漏洞

BUGTRAQ ID: 25502 CVECAN ID: CVE-2007-4748 PPS网络电视（PPStream）是全球第一家集P2P直播点播于一身的网络电视软件。 PPStream所提供的PowerPlayer.dll ActiveX控件没有正确地验证用户所提供的Logo参数。如果用户受骗访问了恶意网页并传送了超长参数，就可以触发缓冲区溢出，导致执行任意指令。 PPS网络视频 PPStream 2.0.1.3829 临时解决方法： 为clsid：5EC7C511-CD0F-42E6-830C-1BD9882F3458设置kill bit。 厂商补丁： PPS网络视频...