CVE-2007-4252

CVE-2007-4252 is tied to the Chilkat Zip ActiveX control (ChilkatZip2.dll 12.4.2.0). The vulnerability is an absolute path traversal through the SaveLastError and likely WriteExe methods, enabling remote attackers to create or overwrite arbitrary files when a full pathname is supplied. This align...

CVE-2007-4252

Absolute path traversal vulnerability in a certain ActiveX control in CkString.dll 1.1 and earlier in CHILKAT ASP String allows remote attackers to create or overwrite arbitrary files via a full pathname in the first argument to the SaveToFile method, a different vulnerability than CVE-2007-3633...

CVE-2007-4254

Stack-based buffer overflow in a certain ActiveX control in VDT70.DLL in Microsoft Visual Database Tools Database Designer 7.0 for Microsoft Visual Studio 6 allows remote attackers to execute arbitrary code via a long argument to the NotSafe method. NOTE: this may overlap CVE-2007-2885 or...

Xunlei Web Thunder ThunderServer.webThunder.1 ActiveX AddCategory文件下载漏洞

Xunlei Web Thunder是一款基于多资源超线程技术的下载工具。 Xunlei Web Thunder ThunderServer.webThunder.1 ActiveX控件存在输入验证错误，远程攻击者可以利用漏洞下载任意文件到目标用户系统，可导致任意命令执行。 攻击者必须构建恶意WEB页，诱使用户访问来触发。目前没有详细漏洞细节提供。 Xunlei Web Thunder ThunderServer.webThunder.1 1.8.4.130 目前没有详细解决方案提供： http://my.xunlei.com/setup.htm...

Path traversal

Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll in EMC VMware 6.0.0 allows remote attackers to execute arbitrary local programs via a full pathname in the first two arguments to the 1 CreateProcess or 2 CreateProcessEx method...

CVE-2007-4155

Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll in EMC VMware 6.0.0 allows remote attackers to execute arbitrary local programs via a full pathname in the first two arguments to the 1 CreateProcess or 2 CreateProcessEx method...

CVE-2007-4155

CVE-2007-4155 is a Windows-hosted vulnerability in VMware’s vielib.dll (ActiveX) that enables absolute path traversal to trigger CreateProcess/CreateProcessEx, allowing remote attackers to execute arbitrary local programs on VMware Workstation/Player 6.0.0 family. VMware advisories (VMSA-2007-000...

CVE-2007-4145

Heap-based buffer overflow in the BlueSkychat BlueSkyCat ActiveX control V2.V2Ctrl.1 in v2.ocx 8.1.2.0 and earlier allows remote attackers to execute arbitrary code via a long string in the second argument to the ConnecttoServer method...

Heap overflow

Heap-based buffer overflow in the BlueSkychat BlueSkyCat ActiveX control V2.V2Ctrl.1 in v2.ocx 8.1.2.0 and earlier allows remote attackers to execute arbitrary code via a long string in the second argument to the ConnecttoServer method...

CVE-2007-4145

Heap-based buffer overflow in the BlueSkychat BlueSkyCat ActiveX control V2.V2Ctrl.1 in v2.ocx 8.1.2.0 and earlier allows remote attackers to execute arbitrary code via a long string in the second argument to the ConnecttoServer method...

CVE-2007-4145

CVE-2007-4145 describes a heap-based buffer overflow in the BlueSkychat (BlueSkyCat) ActiveX control (V2.V2Ctrl.1) in v2.ocx

Baidu Soba ActiveX code execution

Unsafe function allows to download and execute executable file...

Yahoo! Widgets ActiveX control GetComponentVersion buffer overflow

Added: 08/03/2007 CVE: CVE-2007-4034 BID: 25086 OSVDB: 37705 Background Yahoo! Widgets is desktop software which runs any number of small, real-time, Internet applications called widgets. Problem A buffer overflow vulnerability in the YDPCTL ActiveX Control allows command execution when a user...

Yahoo! Widgets ActiveX control GetComponentVersion buffer overflow

Added: 08/03/2007 CVE: CVE-2007-4034 BID: 25086 OSVDB: 37705 Background Yahoo! Widgets is desktop software which runs any number of small, real-time, Internet applications called widgets. Problem A buffer overflow vulnerability in the YDPCTL ActiveX Control allows command execution when a user...

Baidu Soba Remote Code Execute Vulnerability(FGA-2007-10)

hi full-disclosure, Baidu Soba Remote Code Execute Vulnerability by cocoruder of Fortinet Security Research Team http://ruder.cdut.net Summary: Baidu Soba is a popular browser toolbar which developed by Baidu, a Chinese web search engine company, like Google, more informations can be found at:...

Yahoo! Widgets ActiveX control GetComponentVersion buffer overflow

Added: 08/03/2007 CVE: CVE-2007-4034 BID: 25086 OSVDB: 37705 Background Yahoo! Widgets is desktop software which runs any number of small, real-time, Internet applications called widgets. Problem A buffer overflow vulnerability in the YDPCTL ActiveX Control allows command execution when a user...

Yahoo! Widgets ActiveX control GetComponentVersion buffer overflow

Added: 08/03/2007 CVE: CVE-2007-4034 BID: 25086 OSVDB: 37705 Background Yahoo! Widgets is desktop software which runs any number of small, real-time, Internet applications called widgets. Problem A buffer overflow vulnerability in the YDPCTL ActiveX Control allows command execution when a user...

百度超级搜霸BaiduBar.dll ActiveX控件远程代码执行漏洞

BUGTRAQ ID: 25121 百度超级搜霸是一款免费的浏览器工具条，安装后无需登录百度网站即可体验百度搜索的强大功能。 百度超级搜霸所带的ActiveX控件实现上存在输入验证漏洞，远程攻击者可能利用此漏洞诱使用户下载执行恶意代码。 百度超级搜霸所安装的BaiduBar.dll控件没有正确地验证用户输入，如果用户受骗访问了恶意网页的话就可能导致以使用该控件的应用程序（通常为IE）的安全环境执行任意代码。 百度 超级搜霸 5.4 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.baidu.com/...

VMware vielib.dll ActiveX控件远程代码执行漏洞

BUGTRAQ ID: 25118 VMware Workstation是一款非常流行的虚拟PC机软件。 VMware intraprocesslogging.dll ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞在用户系统上执行任意指令。 VMware中所捆绑的vielib.dll库中的StartProcess方式没有验证是否被应用程序或恶意用户调用，如果用户受骗访问了恶意网页的话，调用了该库的应用程序就可能导致以登录用户的权限执行任意指令。 VMWare Workstation 6.0 临时解决方法：...

CVE-2007-4105

A certain ActiveX control in BaiduBar.dll in Baidu Soba Search Bar 5.4 allows remote attackers to execute arbitrary code via a request containing "a link to download and a file to execute," possibly involving remote file inclusion...