CVE-2007-5807

CVE-2007-5807 involves a buffer overflow in the register function of the Ultra Star Reader ActiveX control used by SSReader. Remote code execution is possible via unspecified vectors, and the issue is described as being exploited in the wild. The affected component is the Ultra Star Reader Active...

VulnCheck KEV: CVE-2007-5807

Buffer overflow in the register function in Ultra Star Reader ActiveX control in SSReader allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Sun Java Web Start dnsResolve ActiveX Buffer Overflow (CVE-2007-5019)

Microsoft SQL Server is a Relational Database Management System RDBMS that can be managed through Distributed Management Objects DMO. A remote attacker can exploit this issue to execute arbitrary code on vulnerable server...

SonicWALL SSL-VPN NetExtender NELaunchCtrl ActiveX Control Multiple Overflows

The remote host contains the 'NELaunchCtrl' ActiveX control included with the SonicWALL NetExtender VPN client software. The version of this control installed on the remote host fails to validate arguments to several methods, such as 'AddRouteEntry', 'serverAddress', 'sessionId', 'clientIPLower',...

Immunity Canvas: INSTALLSHIELD

Name| installshield ---|--- CVE| CVE-2007-5660 Exploit Pack| CANVAS Description| Macrovision InstallShield 2008 ActiveX Buffer Overflow Notes| CVE Name: CVE-2007-5660 VENDOR: Macrovision Repeatability: Infinite client side - no crash CVS URL:...

CVE-2007-5660

CVE-2007-5660 affects Macrovision InstallShield Update Service ActiveX (Isusweb.dll). The connected sources describe a stack/remote buffer overflow in Isusweb.dll (Isusweb.dll 6.0.100.54472) exploited by passing an overly long ProductCode string to the DownloadAndExecute method, enabling arbitrar...

EDraw Flowchart ActiveX Control 2.0 Insecure Method Exploit

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"body bgcolor="E0E0E0"----------------------------------------------------------------------------------------------------- bEDraw Flowchart ActiveX Control EDImage.ocx v. 2.0.2005.1104...

SEC Consult SA-20071101-0 :: Multiple Vulnerabilities in SonicWALL SSL-VPN Client

SEC Consult Security Advisory 20071101-0 ===================================================================================== title: Multiple vulnerabilities in SonicWALL SSL-VPN Client Deletion of arbitrary files on the client Arbitrary code execution thru various buffer overflows program:...

SonicWall SSL VPN client multiple security vulnerabilities

Multiple vulnerabilities with different ActiveX elements...

sonicwall-remote.txt

var shellcode =...

Macrovision InstallShield升级服务ActiveX控件不安全方式漏洞

BUGTRAQ ID: 26280 CVECAN ID: CVE-2007-5660 MacroVision InstallShield是很多软件厂商都在使用的安装程序解决方案。 Macrovision InstallShield所安装的升级服务（Update Service）可选组件中存在多个不安全的方式，远程攻击者可能利用此漏洞通过诱使用户访问恶意网页控制用户系统。 该组件以以下ActiveX控件的形式实现： CLSID：E9880553-B8A7-4960-A668-95C68BED571E 文件：C:\Windows\Downloaded Files\isusweb.dll...

EDraw Flowchart ActiveX Control 2.0 - Insecure Method

EDraw Flowchart ActiveX Control 2.0 - Insecure Method ----------------------------------------------------------------------------------------------------- EDraw Flowchart ActiveX Control EDImage.ocx v. 2.0.2005.1104 "HttpDownloadFile" Insecure Method url: http://www.anydraw.com Author: shinnai...

iDefense Security Advisory 10.31.07: Macrovision InstallShield Update Service ActiveX Unsafe Method Vulnerability

Macrovision InstallShield Update Service ActiveX Unsafe Method Vulnerability iDefense Security Advisory 10.31.07 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 31, 2007 I. BACKGROUND MacroVision InstallShield is an installer solution utilized by many software vendors in order to ensur...

EDraw Flowchart ActiveX Control 2.0 Insecure Method Exploit

Exploit for unknown platform in category remote exploits =========================================================== EDraw Flowchart ActiveX Control 2.0 Insecure Method Exploit ===========================================================...

SonicWall NetExtender NELaunchCtrl ActiveX control stack buffer overflow

Overview The SonicWall NetExtender NELaunchCtrl ActiveX control contains a stack buffer overflow, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description SonicWall NetExtender is an SSL VPN client that is implemented by using an ActiveX...

EDraw Flowchart ActiveX Control 2.0 - Insecure Method

----------------------------------------------------------------------------------------------------- EDraw Flowchart ActiveX Control EDImage.ocx v. 2.0.2005.1104 "HttpDownloadFile" Insecure Method url: http://www.anydraw.com Author: shinnai mail: shinnaiatautisticidotorg site:...

Real Player multiple buffer overflows

ActiveX vulnerability is used in-the-wild for silent trojan code installation via Internet Explorer. In addition, there is a buffer overflow on .mov files parsing and .mp3 ID3 tags...

edrawflow-insecure.txt

----------------------------------------------------------------------------------------------------- EDraw Flowchart ActiveX Control EDImage.ocx v. 2.0.2005.1104 "HttpDownloadFile" Insecure Method url: http://www.anydraw.com Author: shinnai mail: shinnaiatautisticidotorg site:...

RealNetworks RealPlayer SWF Processing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of the RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

SonicWall SSL-VPN NetExtender ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in SonicWall SSL-VPN NetExtender. By sending an overly long string to the "AddRouteEntry" method located in the NELaunchX.dll 1.0.0.26 Control, an attacker may be able to execute arbitrary code. This module requires Metasploit:...