Yahoo! Installer Plugin for Widgets ActiveX control stack buffer overflow

Overview The Yahoo! Installer Plugin for Widgets ActiveX control contains a stack buffer overflow, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Yahoo! Widgets is a program for Windows that allows the user to run applications call...

EDraw Office Viewer Component 5.1 HttpDownloadFile() Insecure Method

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"--------------------------------------------------------------------------------------------------------------...

Microsoft IE tblinf32.dll ActiveX控件远程代码执行漏洞（MS07-045）

BUGTRAQ ID: 25289 CVECAN ID: CVE-2007-2216 Internet Explorer是微软发布的非常流行的WEB浏览器。 IE的tblinf32.dll ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 IE中tblinf32.dll或vstlbinf.dll ActiveX控件没有正确地实现IObjectsafety，如果用户受骗访问了恶意站点的话就可能导致执行任意指令。成功利用此漏洞的攻击者可以获得与本地用户相同的用户权限，那些帐户被配置为拥有较少系统用户权限的用户比具有管理用户权限的用户受到的影响要小。 Microsoft...

Internet Explorer tblinf32.dll ActiveX IObjectsafety vulnerability

Added: 08/17/2007 CVE: CVE-2007-2216 BID: 25289 OSVDB: 36396 Background The IObjectsafety interface provides methods to get and set safety options for objects which support untrusted clients. Problem The tblinf32.dll ActiveX control implements IObjectsafety incorrectly, allowing execution of code...

Internet Explorer tblinf32.dll ActiveX IObjectsafety vulnerability

Added: 08/17/2007 CVE: CVE-2007-2216 BID: 25289 OSVDB: 36396 Background The IObjectsafety interface provides methods to get and set safety options for objects which support untrusted clients. Problem The tblinf32.dll ActiveX control implements IObjectsafety incorrectly, allowing execution of code...

EDraw Office Viewer Component 5.1 - HttpDownloadFile() Insecure Method

-------------------------------------------------------------------------------------------------------------- 0-day EDraw Office Viewer Component 5.1 officeviewer.ocx v. 5.1.199.1 "HttpDownloadFile" Insecure Method url: http://www.ocxt.com/officeviewer.php author: shinnai mail:...

EDraw Office Viewer Component 5.1 - HttpDownloadFile() Insecure Method

EDraw Office Viewer Component 5.1 - HttpDownloadFile Insecure Method -------------------------------------------------------------------------------------------------------------- 0-day EDraw Office Viewer Component 5.1 officeviewer.ocx v. 5.1.199.1 "HttpDownloadFile" Insecure Method url:...

EDraw Office Viewer Component 5.1 HttpDownloadFile() Insecure Method

Exploit for unknown platform in category remote exploits ==================================================================== EDraw Office Viewer Component 5.1 HttpDownloadFile Insecure Method ====================================================================...

EDraw Office Viewer Component 5.1 HttpDownloadFile() Insecure Method

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"-------------------------------------------------------------------------------------------------------------- b0-day EDraw Office Viewer Component 5.1 officeviewer.ocx v. 5.1.199.1...

Code injection

The IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibly acpir.dll before 1.0.0.9 Automated Solutions 1.0 before fix pack 1, does not properly validate digital signatures of downloaded software, which makes it easier for remote...

CVE-2007-2928

Format string vulnerability in the IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibly acpir.dll before 1.0.0.9 Automated Solutions 1.0 before fix pack 1, allows remote attackers to execute arbitrary code via format string specifier...

CVE-2007-2929

The IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibly acpir.dll before 1.0.0.9 Automated Solutions 1.0 before fix pack 1, exposes unsafe methods to arbitrary web domains, which allows remote attackers to download arbitrary code on...

Code injection

The IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibly acpir.dll before 1.0.0.9 Automated Solutions 1.0 before fix pack 1, exposes unsafe methods to arbitrary web domains, which allows remote attackers to download arbitrary code on...

CVE-2007-2240

The IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibly acpir.dll before 1.0.0.9 Automated Solutions 1.0 before fix pack 1, does not properly validate digital signatures of downloaded software, which makes it easier for remote...

Format string

Format string vulnerability in the IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibly acpir.dll before 1.0.0.9 Automated Solutions 1.0 before fix pack 1, allows remote attackers to execute arbitrary code via format string specifier...

Stack overflow

Multiple stack-based buffer overflows in the Motive ActiveEmailTest.EmailData ActiveUtils EmailData ActiveX control in ActiveUtils.dll in Motive Service Activation Manager 5.1 and Self Service Manager 5.1 and earlier allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-0319

Multiple stack-based buffer overflows in the Motive ActiveEmailTest.EmailData ActiveUtils EmailData ActiveX control in ActiveUtils.dll in Motive Service Activation Manager 5.1 and Self Service Manager 5.1 and earlier allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-2928

The CVE-2007-2928 vulnerability affects the IBM/Lenovo Automated Solutions acpRunner ActiveX control (AcpController.dll) prior to v1.2.8.0 and possibly acpir.dll prior to v1.0.0.9. It exposes a format-string vulnerability that may let a remote attacker execute arbitrary code by convincing a user ...

CVE-2007-2929

The IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibly acpir.dll before 1.0.0.9 Automated Solutions 1.0 before fix pack 1, exposes unsafe methods to arbitrary web domains, which allows remote attackers to download arbitrary code on...

CVE-2007-2928

Format string vulnerability in the IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibly acpir.dll before 1.0.0.9 Automated Solutions 1.0 before fix pack 1, allows remote attackers to execute arbitrary code via format string specifier...