Quiksoft EasyMail SMTP ActiveX control stack buffer overflow vulnerabilities

Overview The Quiksoft EasyMail SMTP ActiveX control contains multiple stack buffer overflow vulnerabilities, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Quiksoft EasyMail Objects is a set of ActiveX controls that provides emai...

Oracle JInitiator ActiveX control stack buffer overflows

Overview The Oracle JInitiator ActiveX control contains multiple stack buffer overflows, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Oracle JInitiator allows users to run Oracle Developer Server applications within a web...

NVR SP2 2.0 nvUnifiedControl.dll 1.1.45.0 - SetText() Command Execution

NVR SP2 2.0 nvUnifiedControl.dll 1.1.45.0 - SetText Command Execution ------------------------------------------------------------------------------------------ PoC2 NVR SP2 2.0 nvUnifiedControl.AUnifiedControl.1 nvUnifiedControl.dll v. 1.1.45.0 "SetText" Remote BoF Heap Spray Technique url:...

NVR SP2 2.0 nvUtility.dll 1.0.14.0 - SaveXMLFile() Insecure Method

NVR SP2 2.0 nvUtility.dll 1.0.14.0 - SaveXMLFile Insecure Method -------------------------------------------------------------------------------------------- NVR SP2 2.0 nvUtility.Utility.1 nvUtility.dll v. 1.0.14.0 "SaveXMLFile" Inscure Method url: http://www.acti.com/index.asp author: shinnai...

eCentrex VOIP Client UACOMX.OCX ActiveX控件栈溢出漏洞

BUGTRAQ ID: 25383 eCentrex VOIP Client是一款网络电话客户端软件。 eCentrex VOIP Client的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 eCentrex SIP UA Com模块（euacom.dll）在处理传送给eCentrex VOIP Client组件ActiveX控件（uacomx.ocx）的ReInit方式的超长参数时存在栈溢出漏洞，如果用户受骗访问了恶意网页，就可能触发这个溢出，导致执行任意指令。 eCentrex VOIP Client ActiveX 2.0.1...

Buffer overflow

Buffer overflow in the IUAComFormX ActiveX control in uacomx.ocx 2.0.1 in the eCentrex VOIP Client module allows remote attackers to execute arbitrary code via a long Username argument to the ReInit method...

CVE-2007-4489

Buffer overflow in the IUAComFormX ActiveX control in uacomx.ocx 2.0.1 in the eCentrex VOIP Client module allows remote attackers to execute arbitrary code via a long Username argument to the ReInit method...

CVE-2007-4489

Buffer overflow in the IUAComFormX ActiveX control in uacomx.ocx 2.0.1 in the eCentrex VOIP Client module allows remote attackers to execute arbitrary code via a long Username argument to the ReInit method...

CVE-2007-4489

The CVE-2007-4489 issue affects the IUAComFormX ActiveX control in uacomx.ocx 2.0.1, used by the eCentrex VOIP Client module. The root cause is a buffer overflow triggered by a long Username argument to the ReInit method, which can allow remote code execution. The available connected documents co...

联想Automated Solutions ActiveX控件多个安全漏洞

BUGTRAQ ID: 25311 CVECAN ID: CVE-2007-2928,CVE-2007-2929,CVE-2007-2240 Automated Solutions是联想和IBM电脑中所安装的ActiveX工具软件包。 Automated Solutions的ActiveX控件实现上存在格式串处理漏洞，远程攻击者可能利用此漏洞控制用户系统。 Automated...

CVE-2007-4420

Absolute path traversal vulnerability in a certain ActiveX control in officeviewer.ocx 5.1.199.1 in EDraw Office Viewer Component 5.1 allows remote attackers to create or overwrite arbitrary files via a full pathname in the second argument to the HttpDownloadFile method, a different vulnerability...

Path traversal

Absolute path traversal vulnerability in a certain ActiveX control in officeviewer.ocx 5.1.199.1 in EDraw Office Viewer Component 5.1 allows remote attackers to create or overwrite arbitrary files via a full pathname in the second argument to the HttpDownloadFile method, a different vulnerability...

CVE-2007-4420

Absolute path traversal vulnerability in a certain ActiveX control in officeviewer.ocx 5.1.199.1 in EDraw Office Viewer Component 5.1 allows remote attackers to create or overwrite arbitrary files via a full pathname in the second argument to the HttpDownloadFile method, a different vulnerability...

CVE-2007-4420

Technical details for CVE-2007-4420 are not publicly available in the provided documents. Monitor for updates.

Microsoft OLE自动化SubstringData函数堆溢出漏洞（MS07-043）

Microsoft Windows是微软发布的非常流行的操作系统。 Windows OLE机制的实现上存在整数溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 对象链接和嵌入（OLE）自动化是一个Windows协议，允许应用程序共享数据或控制其他应用程序。在使用OLE自动化时如果向TextNode JavaScript对象的substringData 方式传送了特制参数的话，就可能触发整数溢出，导致错误的内存分配。如果在实例化了不同的ActiveX对象后出现上述情况的话，则在解除分配ActiveX对象时就会触发堆溢出，导致执行任意代码。 Microsoft Office 2004 for...

Internet Explorer tblinf32.dll ActiveX IObjectsafety vulnerability

Added: 08/17/2007 CVE: CVE-2007-2216 BID: 25289 OSVDB: 36396 Background The IObjectsafety interface provides methods to get and set safety options for objects which support untrusted clients. Problem The tblinf32.dll ActiveX control implements IObjectsafety incorrectly, allowing execution of code...

TlbInf32 ActiveX Command Execution

======================================================================== = TlbInf32 ActiveX Command Execution = = MS Bulletin posted: = http://www.microsoft.com/technet/security/Bulletin/MS07-045.mspx = = Affected Software: = Internet Explorer = tlbInf32.dll = vstlbinf.dll = = Public disclosure o...

Internet Explorer tblinf32.dll ActiveX IObjectsafety vulnerability

Added: 08/17/2007 CVE: CVE-2007-2216 BID: 25289 OSVDB: 36396 Background The IObjectsafety interface provides methods to get and set safety options for objects which support untrusted clients. Problem The tblinf32.dll ActiveX control implements IObjectsafety incorrectly, allowing execution of code...

Microsoft Internet Explorer multiple security vulnerabilities

Memory corruption on ActiveX parsing, unsafe Visual Basic ActiveX execution, Visual Basic ActiveX memory corruption...

Microsoft IE向量标记语言VGX.DLL远程堆溢出漏洞（MS07-050）

BUGTRAQ ID: 25310 CVECAN ID: CVE-2007-1749 Internet Explorer是微软发布的非常流行的WEB浏览器。 IE的VML在处理压缩的数据时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 VGX.DLL是IE中负责渲染VML的组件，该组件中的CDownloadSink类实现处理从VML中内嵌URL所下载的数据。例如，以下VML会下载由VGX.DLL!CDownloadSink::OnDataAvailable处理的额外内容： v:rect v:imagedata src="http://malice/compressed.emz...