Heap overflow

Heap-based buffer overflow in a certain ActiveX control in LEADTOOLS LEAD Raster ISIS Object LTRIS14e.DLL 14.5.0.44 allows remote attackers to cause a denial of service Internet Explorer crash or execute arbitrary code via a long DriverName property, a different ActiveX control than CVE-2007-2827...

CVE-2007-2918

CVE-2007-2918 involves multiple stack-based buffer overflows in Logitech VideoCall ActiveX controls (vibecontrol.dll, StarClient.dll, uicomlink.dll, wcamxmp.dll). The flaws enable a remote attacker to cause a browser crash (DoS) and potentially execute arbitrary code via unspecified vectors. Affe...

CVE-2007-2982

CVE-2007-2982 concerns buffer overflow vulnerabilities in the British Telecommunications Business Connect webhelper ActiveX control (btbconnectwebcontrol.dll) prior to version 1.0.0.7. The publicly documented impact states that multiple buffer overflows allow remote attackers to execute arbitrary...

CVE-2007-2917

CVE-2007-2917 involves multiple buffer overflows in the odapi.dll ActiveX control used by Authentium Command Antivirus (pre-4.93.8). The vulnerability could allow remote arbitrary code execution via unspecified vectors on Windows hosts with the ActiveX control enabled. The issue is documented acr...

CVE-2007-2981

Buffer overflow in a certain ActiveX control in LEAD Technologies LEADTOOLS Raster OCR Document Object Library ltrdc14e.dll 14.5.0.44 allows remote attackers to execute arbitrary code via a long DictionaryFileName property...

CVE-2007-2918

Multiple stack-based buffer overflows in ActiveX controls 1 VibeC in a vibecontrol.dll, 2 CallManager and 3 ViewerClient in b StarClient.dll, 4 ComLink in c uicomlink.dll, and 5 WebCamXMP in d wcamxmp.dll in Logitech VideoCall allow remote attackers to cause a denial of service browser crash and...

CVE-2007-2980

Heap-based buffer overflow in a certain ActiveX control in LEADTOOLS LEAD Raster ISIS Object LTRIS14e.DLL 14.5.0.44 allows remote attackers to cause a denial of service Internet Explorer crash or execute arbitrary code via a long DriverName property, a different ActiveX control than CVE-2007-2827...

CVE-2007-2982

Multiple buffer overflows in the British Telecommunications Business Connect webhelper ActiveX control before 1.0.0.7 in btbconnectwebcontrol.dll allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-2981

CVE-2007-2981 concerns LEAD Technologies LEADTOOLS Raster OCR Document Object Library (ltrdc14e.dll, version 14.5.0.44). The vulnerability is a buffer overflow in a specific ActiveX control triggered by a long DictionaryFileName property, enabling remote code execution according to the NVD/NVD-de...

CVE-2007-2980

LEADTOOLS LEAD Raster ISIS Object (LTRIS14e.DLL) 14.5.0.44 contains a heap-based buffer overflow in its ActiveX control, enabling remote attackers to crash Internet Explorer or execute arbitrary code via a long DriverName property (distinct from CVE-2007-2827).

CVE-2007-2917

Multiple buffer overflows in a certain ActiveX control in odapi.dll in Authentium Command Antivirus before 4.93.8 allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-0328

The DWUpdateService ActiveX control in the agent agent.exe in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allows remote attackers to execute arbitrary commands via 1 the Execute method, and obtain the exit status using 2 the GetExitCode method...

CVE-2007-0328

The CVE-2007-0328 issue concerns the DWUpdateService ActiveX control (in Macrovision FLEXnet Connect 6.0 and Update Service 3.x–5.x) exposed by agent.exe. The vulnerability allows remote command execution through the Execute() method and retrieval of the exit status via GetExitCode(), enabling ar...

Zenturi ProgramChecker ActiveX (sasatl.dll) Remote BoF Exploit

Exploit for unknown platform in category remote exploits ============================================================== Zenturi ProgramChecker ActiveX sasatl.dll Remote BoF Exploit ==============================================================...

Zenturi ProgramChecker ActiveX File Download/Overwrite Exploit

No description provided by source. pre span style="font: 14pt Courier New;"p align="center"b2007/05/30/b/p/span codespan style="font: 10pt Courier New;"span class="general1-symbol"------------------------------------------------------------------------------------------- bZenturi ProgramChecker...

EDraw Office Viewer Component EDrawOfficeViewer.OCX ActiveX控件缓冲区溢出漏洞

EDraw Office Viewer是一款文字处理组件。 EDraw Office Viewer提供的edrawofficeviewer.ocx ActiveX控件处理参数输入缺少正确边界检查，远程攻击者可以利用漏洞对应用程序进行缓冲区溢出攻击，可能以进程权限执行任意指令。 问题存在于edrawofficeviewer.ocx包含的控件由于不正确处理用户提交的参数，构建恶意WEB页，诱使用户访问，可导致应用程序崩溃。 EDraw Office Viewer Component 4.0.5.20 目前没有解决方案提供： http://www.ocxt.com/...

British Telecommunications webhelper ActiveX控件多个缓冲区溢出漏洞

British Telecommunications webhelper ActiveX是英国电信所提供的帮助工具。 webhelper ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户机器。 Consumer webhelper ActiveX控件（btwebcontrol.dll）和Connect webhelper ActiveX控件（btbconnectwebcontrol.dll）没有正确验证用户输入，如果用户受骗访问了恶意站点的话，就可能触发缓冲区溢出，导致执行任意指令。 British Telecommunications Consumer...

LeadTools Raster Dialog File_D对象ActiveX控件远程溢出漏洞

LEAD Raster对话FileD对象ActiveX控件（LTRDFD14e.DLL）是LEADTOOLS图形组件中的一个工具。 LTRDFD14e.DLL ActiveX控件在处理DestinationPath属性时存在缓冲区溢出，如果用户受骗访问了恶意站点并向该属性传送了超长字符串的话，就可能触发内存破坏，导致执行任意代码。 LeadTools Raster Dialog FileD Object 14.5.0.44 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Zenturi ProgramChecker - ActiveX sasatl.dll Remote Buffer Overflow

Zenturi ProgramChecker - ActiveX sasatl.dll Remote Buffer Overflow ------------------------------------------------------------------------ Zenturi ProgramChecker ActiveX sasatl.dll Remote Buffer Overflow PoC url: http://www.programchecker.com/activeintro.aspx original advisory:...

EDraw Office Viewer Component Unsafe Method Exploit

No description provided by source. pre span style="font: 14pt Courier New;"p align="center"b2007/05/28/b/p/span codespan style="font: 10pt Courier New;"span class="general1-symbol"----------------------------------------------------------------------------------------------- bEDraw Office Viewer...