RealNetworks GameHouse dldisplay ActiveX control stack buffer overflows

Overview The RealNetworks GameHouse dldisplay ActiveX control contains multiple stack buffer overflows, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description RealNetworks GameHouse is a web site that provides games. GameHouse has an...

Command injection

The launch method in the LocalExec ActiveX control LocalExec.ocx in Novell exteNd Director 4.1 and Portal Services allows remote attackers to execute arbitrary commands...

CVE-2007-2923

The launch method in the LocalExec ActiveX control LocalExec.ocx in Novell exteNd Director 4.1 and Portal Services allows remote attackers to execute arbitrary commands...

CVE-2007-2923

The launch method in the LocalExec ActiveX control LocalExec.ocx in Novell exteNd Director 4.1 and Portal Services allows remote attackers to execute arbitrary commands...

CVE-2007-2923

The CVE-2007-2923 issue concerns the LocalExec ActiveX control (LocalExec.ocx) in Novell exteNd Director 4.1 and Portal Services. The launch() method can be abused to execute arbitrary commands on the affected host. A remote attacker could exploit this by enticing a user to visit a crafted page, ...

Microsoft Office MSODataSourceControl ActiveX Control Denial of Service (CVE-2007-3282)

ActiveX controls are reusable software components based on Microsoft Component Object Model COM. A denial of service vulnerability has been reported in Microsoft Office MSODataSourceControl ActiveX Control.A remote attacker can exploit this vulnerability via a specially crafted web page. Successf...

Novell exteNd Director LocalExec ActiveX (LocalExec.ocx) launch() Method Arbitrary Command Execution

The remote host contains the LocalExec ActiveX control from Novell exteND Director, a set of development tools for creating enterprise web applications. The version of this control on the remote host reportedly contains a method named 'launch' that can be used to execute arbitrary commands. If an...

Security feature bypass

The TEC-IT TBarCode OCX ActiveX control TBarCode7.ocx 7.0.2.3524 allows remote attackers to overwrite arbitrary files via the SaveImage method...

CVE-2007-3233

The TEC-IT TBarCode OCX ActiveX control TBarCode7.ocx 7.0.2.3524 allows remote attackers to overwrite arbitrary files via the SaveImage method...

CVE-2007-3233

The TEC-IT TBarCode OCX ActiveX control TBarCode7.ocx 7.0.2.3524 allows remote attackers to overwrite arbitrary files via the SaveImage method...

CVE-2007-3233

CVE-2007-3233 concerns the TEC-IT TBarCode OCX ActiveX control, version 7.0.2.3524 (TBarCode7.ocx). The vulnerability allows remote attackers to overwrite arbitrary files via the SaveImage method. The NVD entry lists a network impact with low attack complexity and no authentication required, resu...

Novell exteNd Director 4.1 LocalExec ActiveX control fails to restrict access to dangerous methods

Overview The Novell exteNd Director 4.1 LocalExec ActiveX control fails to restrict access to dangerous methods, which can allow a remote, unauthenticated attacker to execute arbitrary commands on a vulnerable system. Description Novell exteNd Director is a set of software development tools and...

Buffer overflow

Multiple buffer overflows in acgm.dll in the Corel / Micrografx ActiveCGM Browser ActiveX control before 7.1.4.19 allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-2921

The CVE-2007-2921 entry concerns the Corel/Micrografx ActiveCGM Browser ActiveX control (acgm.dll) that contains multiple buffer overflows prior to version 7.1.4.19. The vulnerabilities allow remote code execution when a user visits a crafted page or document, with the impact described as arbitra...

Microsoft IE Speech API 4 COM对象实例化缓冲区溢出漏洞（MS07-033）

Internet Explorer是一款非常流行的WEB浏览器。 IE中使用的Speech API的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户机器。 IE中使用了Microsoft Speech API软件包提供文本-语音和语音识别功能。Microsoft Speech...

Microsoft IE原型变量未初始化内存访问漏洞（MS07-033）

Internet Explorer是一款非常流行的WEB浏览器。 Internet Explorer访问尚未正确初始化或已被删除的对象的方式中存在一个远程执行指令漏洞，成功利用此漏洞的攻击者可能完全控制受影响的系统。 如果原型变量指向了表格的单元格但删除了该单元格，就可能会触发无效的指针引用。攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行指令。 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0...

Corel ActiveCGM Browser ActiveX (acqm.dll) Multiple Overflows

The remote host contains the ActiveCGM ActiveX control, which supports viewing of CGM files in a web browser. The version of this control on the remote host is reportedly affected by multiple buffer overflows. If an attacker can trick a user on the affected host into visiting a specially crafted...

ms-activex.txt

REM metasploit, add a user 'su' with pass 'tzu' scode =...

Microsoft IE URLMON.DLL COM对象实例化无效内存访问漏洞（MS07-033）

Internet Explorer是一款非常流行的WEB浏览器。 Internet Explorer在创建某些COM对象时存在内存破坏漏洞，成功利用此漏洞的攻击者可能完全控制受影响的系统。 如果调用了IObjectSafety函数的话，可能会访问未初始化的内存，导致执行任意代码。 攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 Microsoft Internet Explorer 5.0.1 SP4 临时解决方...

tecit-activex.txt

----------------------------------------------------------------------------------------------------------------- TEC-IT TBarCode OCX ActiveX Control TBarCode7.ocx v. 7.0.2.3524 "SaveImage" Remote Arbitrary File Overwrite url: http://www.tec-it.com/asp/main/startfr.asp?LN=1 author: shinnai mail:...