10868 matches found
Microsoft Agent fails to properly handle specially crafted URLs
Overview Microsoft Agent fails to properly handle specially crafted URLs, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system Description Microsoft Agent is software that provides animated characters to enhance interaction with computer systems...
Microsoft Agent - 'agentdpv.dll' ActiveX Control Malformed URL Stack Buffer Overflow
source: https://www.securityfocus.com/bid/25566/info Microsoft Agent agentsvr.exe is prone to a stack-based buffer-overflow vulnerability because the application fails to adequately bounds-check user-supplied data. Successfully exploiting this issue allows remote attackers to execute arbitrary co...
Microsoft Agent crafted URL vulnerability
Added: 09/11/2007 CVE: CVE-2007-3040 BID: 25566 OSVDB: 36934 Background Microsoft Agent is a component of the Windows operating system designed to make using a computer easier through enriched user interaction. Problem A vulnerability in Microsoft Agent allows command execution when a user loads ...
联众世界游戏大厅GLItemCom.DLL ActiveX控件堆溢出漏洞
BUGTRAQ ID: 25565 联众世界游戏大厅是联众世界自主开发的一款集棋牌、休闲、对战于一体的游戏客户端。 联众世界游戏大厅所安装的GLItemCom.DLL ActiveX控件中SetClientInfo函数存在堆溢出漏洞。 如果用户受骗使用IE访问了恶意网页的话，就可以触发这个溢出，导致在用户系统上执行任意指令。以下是已公开的PoC代码： -----Cut Below------------------------------------------------------------------ OBJECT id=target...
Microsoft SQL Server Distributed Management Objects (sqldmo.dll) BoF
No description provided by source. !-- 18.48 01/09/2007 Microsoft SQL Server Distributed Management Objects OLE DLL for SQL Enterprise Manager sqldmo.dll remote buffer overflow poc file version: 2000.085.2004.00 product version: 8.05.2004 passing some fuzzy chars to Start method: EAX 00000000 ECX...
Microsoft Agent crafted URL vulnerability
Added: 09/11/2007 CVE: CVE-2007-3040 BID: 25566 OSVDB: 36934 Background Microsoft Agent is a component of the Windows operating system designed to make using a computer easier through enriched user interaction. Problem A vulnerability in Microsoft Agent allows command execution when a user loads ...
Stack overflow
Stack-based buffer overflow in certain ActiveX controls in 1 FPOLE.OCX 6.0.8450.0 and 2 Foxtlib.ocx, as used in the Microsoft Visual FoxPro 6.0 fpole 1.0 Type Library; and Internet Explorer 5.01, 6 SP1 and SP2, and 7; allows remote attackers to execute arbitrary code via a long first argument to...
CVE-2007-4790
Stack-based buffer overflow in certain ActiveX controls in 1 FPOLE.OCX 6.0.8450.0 and 2 Foxtlib.ocx, as used in the Microsoft Visual FoxPro 6.0 fpole 1.0 Type Library; and Internet Explorer 5.01, 6 SP1 and SP2, and 7; allows remote attackers to execute arbitrary code via a long first argument to...
CVE-2007-4790
CVE-2007-4790 describes a remote code execution via a stack-based buffer overflow in two Visual FoxPro ActiveX controls (FPOLE.OCX 6.0.8450.0 and Foxtlib.ocx) used by the FoxPro FPole 1.0 type library, affecting Internet Explorer 5.01, 6 SP1/SP2, and 7. The flaw is triggered by a long first argum...
Stack overflow
Multiple stack-based buffer overflows in the Earth Resource Mapping NCSView ActiveX control before 3.4.0.242 in NCSView.dll, as distributed in ER Mapper ECW JPEG 2000 Plug-in before 8.1, allow remote attackers to execute arbitrary code via unspecified vectors...
CVE-2007-4470
Multiple stack-based buffer overflows in the Earth Resource Mapping NCSView ActiveX control before 3.4.0.242 in NCSView.dll, as distributed in ER Mapper ECW JPEG 2000 Plug-in before 8.1, allow remote attackers to execute arbitrary code via unspecified vectors...
CVE-2007-4470
Multiple stack-based buffer overflows in the Earth Resource Mapping NCSView ActiveX control before 3.4.0.242 in NCSView.dll, as distributed in ER Mapper ECW JPEG 2000 Plug-in before 8.1, allow remote attackers to execute arbitrary code via unspecified vectors...
CVE-2007-4470
The CVE-2007-4470 entry describes multiple stack-based buffer overflows in the Earth Resource Mapping NCSView ActiveX control (NCSView.dll) shipped with ER Mapper ECW JPEG 2000 Plug-in before version 8.1, affecting the NCSView ActiveX control prior to 3.4.0.242. This allows remote attackers to ex...
Yahoo! Widgets YDP ActiveX Control Buffer Overflow (CVE-2007-4034)
A buffer overflow vulnerability has been reported in Yahoo! Widgets YDPCTL.dll. Yahoo! Widgets is a free application platform for Mac OS X and Microsoft Windows.It offers a large set of desktop Widgets that perform a variety of functions. To trigger this issue, an attacker may create a malicious...
Storm 2 mps. the dll component multiple buffer overflow vulnerabilities-vulnerability warning-the black bar safety net
Online burst a storm of the activex vulnerability, the call is rawParse this method, so simple to see, found the problem quite a bit. These issues are able to control eip or seh, that is each vulnerability can lead to arbitrary code execution. Affected versions: storm 2other not tested Unaffected...
ER Mapper NCSView ActiveX Multiple Buffer Overflows
The remote host contains the 'NCSView' ActiveX control, distributed as part of the ER Mapper package and used to view maps in Internet Explorer. The version of this control installed on the remote host reportedly contains multiple stack-based buffer overflows. If an attacker can trick a user on t...
Office Viewer Component < 5.0 Multiple Vulnerabilities
The remote host contains the Office Viewer Component, an ActiveX control for working with Microsoft Office documents. The version of this control installed on the remote host contains a buffer overflow in its 'HttpDownloadFile' method that could be exploited to execute arbitrary code remotely if ...
Office Viewer Component ActiveX (officeviewer.ocx) HttpDownloadFile Method Traversal Arbitrary File Overwrite
The remote host contains the Office Viewer Component, an ActiveX control for working with Microsoft Office documents. The version of this control installed on the remote host reportedly contains an insecure method, 'HttpDownloadFile'. If an attacker can trick a user on the affected host into...
BaoFeng2 Mps.dll Activex Multiple Remote Buffer Overflow PoCs
No description provided by source. BaoFeng2 Mps.dll Activex Multiple Remote Buffer Overflow PoC http://www.milw0rm.com/sploits/09082007-storm.zip http://sebug.net/paper/poc/09082007-storm.zip sebug.net...
