CVE-2007-4466

CVE-2007-4466 affects Electronic Arts SnoopyCtrl ActiveX Control (NPSnpy.dll, version 1.1.0.36). The vulnerability is described as multiple stack-based buffer overflows that allow remote attackers to execute arbitrary code via unspecified methods/parameters. Public materials include Metasploit ex...

CVE-2007-5322

CVE-2007-5322 affects Microsoft Visual FoxPro 6.0 via the FPOLE.OCX 6.0.8450.0 ActiveX control. The vulnerability is an insecure method flaw that lets remote attackers run arbitrary programs by passing a command to the FoxDoCmd function. Public references indicate exploit availability (e.g., Expl...

CVE-2007-5322

Insecure method vulnerability in the FPOLE.OCX 6.0.8450.0 ActiveX control in Microsoft Visual FoxPro 6.0 allows remote attackers to execute arbitrary programs by specifying them as an argument to the FoxDoCmd function...

CVE-2007-5320

Multiple absolute path traversal vulnerabilities in Pegasus Imaging ImagXpress 8.0 allow remote attackers to 1 delete arbitrary files via the CacheFile attribute in the ThumbnailXpres.1 ActiveX control PegasusImaging.ActiveX.ThumnailXpress1.dll or 2 overwrite arbitrary files via the CompactFile...

Microsoft Visual FoxPro FPOLE.OCX ActiveX Control Arbitrary Command Execution Vulnerability

Description Microsoft Visual FoxPro ActiveX control is prone to a vulnerability that lets attackers execute arbitrary commands. Successfully exploiting this issue allows remote attackers to execute arbitrary commands in the context of the application using the ActiveX control typically Internet...

Electronic Arts SnoopyCtrl ActiveX control and plug-in stack buffer overflows

Overview The Electronic Arts SnoopyCtrl ActiveX control and plug-in contains multiple stack buffer overflows, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Electronic Arts EA.com provides an ActiveX control and Netscape-style...

CVE-2007-5257

Stack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in EDraw Office Viewer Component 5.3.220.1 and earlier allows remote attackers to execute arbitrary code via long strings in the first and second arguments to the FtpDownloadFile method, a different vector...

CVE-2007-5257

Stack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in EDraw Office Viewer Component 5.3.220.1 and earlier allows remote attackers to execute arbitrary code via long strings in the first and second arguments to the FtpDownloadFile method, a different vector...

CVE-2007-5257

CVE-2007-5257 affects the EDraw Office Viewer Component (officeviewer.ocx) in the EDraw.OfficeViewer ActiveX control. The vulnerability is a stack-based/buffer overflow in the FtpDownloadFile method that can be triggered by long values in the first and second arguments, affecting versions up to 5...

Pegasus Imaging ImagXpress 8.0 Remote Arbitrary File Overwrite

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"body bgcolor="E0E0E0"----------------------------------------------------------------------------- bPegasus Imaging ImagXpress 8.0 Remote Arbitrary File Overwrite/b url:...

pegasus-delete.txt

----------------------------------------------------------------------------- Pegasus Imaging ThumbnailXpress 1.0 Remote Arbitrary File Deletion url: http://www.pegasusimaging.com/ Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational...

Yahoo! Messenger ActiveX Control YVerInfo.dll Buffer Overflow (CVE-2007-4515)

Yahoo! Messenger is a popular advertisement-supported instant messaging client. A buffer overflow vulnerability exists in Yahoo! Messenger. The vulnerability is due to a boundary error within the Yahoo! Messenger YVerInfo.dll ActiveX control when handling certain methods. To trigger this issue, a...

CVE-2007-5217

Stack-based buffer overflow in the ADM4 ActiveX control in adm4.dll in Altnet Download Manager 4.0.0.6, as used in 1 Kazaa 3.2.7 and 2 Grokster, allows remote attackers to execute arbitrary code via a long argument to the Install method. NOTE: the provenance of this information is unknown; the...

Directory traversal

Directory traversal vulnerability in the CLAVSetting.CLSetting.1 ActiveX control in CLAVSetting.DLL 1.00.1829 in the CLAVSetting module in CyberLink PowerDVD 7.0 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the argument to the CreateNewFile method...

Stack overflow

Stack-based buffer overflow in the ADM4 ActiveX control in adm4.dll in Altnet Download Manager 4.0.0.6, as used in 1 Kazaa 3.2.7 and 2 Grokster, allows remote attackers to execute arbitrary code via a long argument to the Install method. NOTE: the provenance of this information is unknown; the...

CVE-2007-5219

The CVE-2007-5219 issue affects CyberLink PowerDVD 7.0 via the CLAVSetting.DLL 1.00.1829 CLAVSetting.CLSetting.1 ActiveX control. The vulnerability is a directory traversal in CreateNewFile that allows remote attackers to create or overwrite arbitrary files by supplying a .. sequence in the argum...

CVE-2007-5217

CVE-2007-5217 is a stack-based buffer overflow in the ADM4 ActiveX control (adm4.dll) used by Altnet Download Manager 4.0.0.6, and shipped with Kazaa Media Desktop 3.2.7 (and Grokster). The vulnerability allows remote attackers to execute arbitrary code by passing a long argument to the Install m...

CVE-2007-5217

Stack-based buffer overflow in the ADM4 ActiveX control in adm4.dll in Altnet Download Manager 4.0.0.6, as used in 1 Kazaa 3.2.7 and 2 Grokster, allows remote attackers to execute arbitrary code via a long argument to the Install method. NOTE: the provenance of this information is unknown; the...

Pegasus Imaging ThumbnailXpress 1.0 Remote Arbitrary File Deletion

Exploit for unknown platform in category remote exploits ================================================================== Pegasus Imaging ThumbnailXpress 1.0 Remote Arbitrary File Deletion ==================================================================...

Kazaa Altnet Download Manager ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in the Altnet Download Manager ActiveX Control amd4.dll bundled with Kazaa Media Desktop 3.2.7. By sending an overly long string to the "Install" method, an attacker may be able to execute arbitrary code. This module requires Metasploit:...