CVE-2007-2919

Multiple stack-based buffer overflows in the FViewerLoading ActiveX control FlipViewerX.dll in E-Book Systems FlipViewer before 4.1 allow remote attackers to cause a denial of service crash or execute arbitrary code via long 1 UID, 2 Opf, 3 PAGENO, 4 LaunchMode, 5 SubID, 6 BookID, 7 LibraryID, 8...

CVE-2007-2919

The CVE-2007-2919 entry describes multiple stack-based buffer overflows in the FViewerLoading ActiveX control (FlipViewerX.dll) of E-Book Systems FlipViewer prior to version 4.1. The vulnerability occurs when processing long values for properties including UID, Opf, PAGENO, LaunchMode, SubID, Boo...

Buffer overflow

Multiple buffer overflows in an ActiveX control boisweb.dll in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allow remote attackers to execute arbitrary code via the 1 the second parameter to the DownloadAndExecute method and 2 third parameter to the AddFileEx method, a different...

CVE-2007-2419

Multiple buffer overflows in an ActiveX control boisweb.dll in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allow remote attackers to execute arbitrary code via the 1 the second parameter to the DownloadAndExecute method and 2 third parameter to the AddFileEx method, a different...

CVE-2007-3071

Buffer overflow in the GetWebStoreURL function in a certain ActiveX control in eSellerateControl365.dll 3.6.5.0 in eSellerate SDK allows user-assisted remote attackers to execute arbitrary code via a long first argument...

CVE-2007-3076

A certain ActiveX control in sasatl.dll in Zenturi ProgramChecker allows remote attackers to download arbitrary files to the client system via the DownloadFile function...

Design/Logic Flaw

A certain ActiveX control in sasatl.dll in Zenturi ProgramChecker allows remote attackers to download arbitrary files to the client system via the DownloadFile function...

CVE-2007-2419

CVE-2007-2419: A buffer overflow in the boisweb.dll ActiveX control used by Macrovision FLEXnet Connect 6.0 and Update Service 3.x–5.x allows remote code execution. The vulnerability is triggered by specific parameters to DownloadAndExecute (second parameter) and AddFileEx (third parameter). Tipp...

CVE-2007-3076

A certain ActiveX control in sasatl.dll in Zenturi ProgramChecker allows remote attackers to download arbitrary files to the client system via the DownloadFile function...

CVE-2007-2419

Multiple buffer overflows in an ActiveX control boisweb.dll in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allow remote attackers to execute arbitrary code via the 1 the second parameter to the DownloadAndExecute method and 2 third parameter to the AddFileEx method, a different...

CVE-2007-3076

The CVE-2007-3076 entry concerns the Zenturi ProgramChecker ActiveX control (sasatl.dll). The connected documents confirm that the ActiveX control contains a vulnerability in the DownloadFile function that allows remote attackers to download arbitrary files to a user’s system. Additional connecte...

CVE-2007-3071

Buffer overflow in the GetWebStoreURL function in a certain ActiveX control in eSellerateControl365.dll 3.6.5.0 in eSellerate SDK allows user-assisted remote attackers to execute arbitrary code via a long first argument...

CVE-2007-3071

CVE-2007-3071 affects eSellerateControl365.dll v3.6.5.0 in the eSellerate SDK. The vulnerability is a buffer overflow in the GetWebStoreURL function, leading to potential remote code execution via a long first argument. Exploitation details are not provided in the available documents. No remediat...

Yahoo! Messenger Webcam Viewer ActiveX Control Buffer Overflow Vulnerability

Description Yahoo! Messenger Webcam Viewer ActiveX control is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of applications th...

Yahoo! Messenger Webcam Upload ActiveX Control Buffer Overflow Vulnerability

Description Yahoo! Messenger Webcam Upload ActiveX control is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Successfully exploiting this issue allows remote attackers to crash applications that use the affected control typical...

TPTI-07-09: Macrovision FLEXnet boisweb.dll ActiveX Control Buffer Overflow Vulnerability

TPTI-07-09: Macrovision FLEXnet boisweb.dll ActiveX Control Buffer Overflow Vulnerability http://dvlabs.tippingpoint.com/advisory/TPTI-07-09 June 4, 2007 -- CVE ID: CVE-2007-2419 -- Affected Vendor: Macrovision -- Affected Products: Update Service 3.x Update Service 4.x Update Service 5.x FLEXnet...

E-Book Systems FlipViewer ActiveX control stack buffer overflows

Overview The E-Book Systems FlipViewer ActiveX control contains multiple stack buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description E-Book Systems FlipViewer is software for viewing "FlipBooks." FlipViewer includes an...

Macrovision FLEXnet ActiveX buffer overflow

Buffer overflow in boisweb.dll...

eSellerate SDK 3.6.5 - 'eSellerateControl365.dll' ActiveX Control Buffer Overflow

source: https://www.securityfocus.com/bid/24300/info eSellerate SDK ActiveX control is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. Successfully exploiting this issue allows remote...

Logitech VideoCall多个ActiveX控件缓冲区溢出漏洞

Logitech VideoCall是一款视频会议软件。 Logitech VideoCall多个ActiveX控件处理参数输入缺少正确边界检查，远程攻击者可以利用漏洞对应用程序进行缓冲区溢出攻击，可能以进程权限执行任意指令。 问题存在于多个包含的控件由于不正确处理用户提交的参数，构建恶意WEB页，诱使用户访问，可导致应用程序崩溃。这些控件包括： VibeC vibecontrol.dll CallManager StarClient.dll ViewerClient StarClient.dll ComLink uicomlink.dll WebCamXMP wcamxmp.dll...