SOL7593 - Command injection into F5 ActiveX control

A vulnerability exists in an F5 ActiveX control. The ActiveX control is downloaded to a Windows client system when you log in to a FirePass controller, which is configured for specific pre-logon sequence functionality. The ActiveX control could run executables that reside on the system if an...

NCTAudioStudio2 - ActiveX DLL 2.6.1.148 'CreateFile()'/ Insecure Method

-------------------------------------------------------------------------------------------------- NCTAudioStudio2 ActiveX DLL NCTWavChunksEditor2.dll v. 2.6.1.148 "CreateFile"Insecure Method url: http://www.nctsoft.com/products/NCTAudioEditor2/ author: shinnai mail: shinnaiatautisticidotorg site...

NCTAudioEditor2 ActiveX DLL (NCTWMAFile2.dll v. 2.6.2.157) Exploit

Exploit for unknown platform in category remote exploits ================================================================== NCTAudioEditor2 ActiveX DLL NCTWMAFile2.dll v. 2.6.2.157 Exploit ==================================================================...

NCTAudioEditor2 ActiveX DLL 'NCTWMAFile2.dll 2.6.2.157' - File Write

------------------------------------------------------------------------------------------ NCTAudioEditor2 ActiveX DLL NCTWMAFile2.dll v. 2.6.2.157 "CreateFile"Insecure Method url: http://www.nctsoft.com/products/NCTAudioEditor2/ author: shinnai mail: shinnaiatautisticidotorg site:...

BarcodeTools BarCodeAx ActiveX buffer overflow

Buffer overflow in BeginPrint method...

[Full-disclosure] [GOODFELLAS - VULN] BarCodeAx.dll v. 4.9 ActiveX Control Remote Stack Buffer Overflow

:. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: BarCodeAx.dll v. 4.9 ActiveX Control Remote Stack Buffer Overflow ================================================================= Internal ID: VULWAR200706223 Introduction ------------ BarCodeAx.dll is a library...

BarCode ActiveX Control BarCodeAx.dll 4.9 Remote Overflow Exploit

No description provided by source. :. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: BarCodeAx.dll v. 4.9 ActiveX Control Remote Stack Buffer Overflow ================================================================= Internal ID: VULWAR200706223 Introduction...

BarCode ActiveX Control BarCodeAx.dll 4.9 Remote Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================= BarCode ActiveX Control BarCodeAx.dll 4.9 Remote Overflow Exploit ================================================================= :. GOODFELLAS Security Research TEAM .: :...

RKD Software BarCode ActiveX Control 'BarCodeAx.dll' 4.9 - Remote Overflow

:. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: BarCodeAx.dll v. 4.9 ActiveX Control Remote Stack Buffer Overflow ================================================================= Internal ID: VULWAR200706223 Introduction ------------ BarCodeAx.dll is a library...

RKD Software BarCode ActiveX Control BarCodeAx.dll 4.9 - Remote Overflow

RKD Software BarCode ActiveX Control BarCodeAx.dll 4.9 - Remote Overflow :. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: BarCodeAx.dll v. 4.9 ActiveX Control Remote Stack Buffer Overflow ================================================================= Internal ID...

Xunlei Web Thunder ThunderServer.webThunder.1 ActiveX任意文件上传漏洞

Xunlei Web Thunder是一款在线加速下载程序。 Xunlei Web Thunder提供的ActiveX控件存在缓冲区溢出问题，远程攻击者可以利用漏洞下载任意程序在用户系统上以当前用户上下文权限运行。 问题存在于ThunderServer.webThunder.1,可以采用JS代码ActiveXObject"ThunderServer.webThunder.1";来激活讯雷的组件。 其中的关键函数包括: SetBrowserWindowData:新建浏览器窗口. SetConfig:设置WEB讯雷. HideBrowserWindow:隐藏浏览器...

CVE-2007-3296

The ThunderServer.webThunder.1 ActiveX control in xunlei Web Thunderbolt 1.7.3.109 allows remote attackers to download arbitrary files and conduct other unauthorized actions by invoking dangerous methods...

Design/Logic Flaw

The ThunderServer.webThunder.1 ActiveX control in xunlei Web Thunderbolt 1.7.3.109 allows remote attackers to download arbitrary files and conduct other unauthorized actions by invoking dangerous methods...

CVE-2007-3296

The CVE-2007-3296 entry concerns the ThunderServer.webThunder.1 ActiveX control in xunlei Web Thunderbolt 1.7.3.109. The vulnerability arises from the control’s ability to invoke dangerous methods, enabling remote attackers to download arbitrary files and perform other unauthorized actions. This ...

CVE-2007-3282

The CVE-2007-3282 entry concerns a buffer overflow in the Microsoft Office MSODataSourceControl ActiveX object. The vulnerability is triggered by a long argument to the DeleteRecordSourceIfUnused method, potentially allowing remote attackers to cause a denial of service and, in some cases, to exe...

CVE-2007-3282

Buffer overflow in the Microsoft Office MSODataSourceControl ActiveX object allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long argument to the DeleteRecordSourceIfUnused method...

CVE-2007-2924

Multiple buffer overflows in RealNetworks GameHouse dldisplay ActiveX control ghdlctl.dll allow remote attackers to execute arbitrary code via unknown vectors...

Buffer overflow

Multiple buffer overflows in RealNetworks GameHouse dldisplay ActiveX control ghdlctl.dll allow remote attackers to execute arbitrary code via unknown vectors...

CVE-2007-2924

Multiple buffer overflows in RealNetworks GameHouse dldisplay ActiveX control ghdlctl.dll allow remote attackers to execute arbitrary code via unknown vectors...

CVE-2007-2924

RealNetworks GameHouse dldisplay ActiveX control (ghdlctl.dll) contains multiple stack/buffer overflows that could allow a remote attacker to execute arbitrary code. Affected component is the GameHouse dldisplay ActiveX control; exploitation involves handling crafted HTML, with impact as describe...