Design/Logic Flaw

A certain ActiveX control in LeadTools Raster Variant Object Library LTRVR14e.dll 14.5.0.44 allows remote attackers to overwrite arbitrary files via the WriteDataToFile method...

Stack overflow

Stack-based buffer overflow in the SetPath function in the shComboBox ActiveX control shcmb80.ocx in Sky Software Shell MegaPack ActiveX 8.0 allows remote attackers to execute arbitrary code via a long argument. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2007-2851

A certain ActiveX control in LeadTools Raster Variant Object Library LTRVR14e.dll 14.5.0.44 allows remote attackers to overwrite arbitrary files via the WriteDataToFile method...

CVE-2007-2848

Stack-based buffer overflow in the SetPath function in the shComboBox ActiveX control shcmb80.ocx in Sky Software Shell MegaPack ActiveX 8.0 allows remote attackers to execute arbitrary code via a long argument. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2007-2848

The CVE-2007-2848 entry describes a stack-based buffer overflow in the SetPath function of the shComboBox ActiveX control (shcmb80.ocx) within Sky Software Shell MegaPack ActiveX 8.0, allowing remote code execution via a long argument. Connected records confirm the affected component and vulnerab...

CVE-2007-2851

A certain ActiveX control in LeadTools Raster Variant Object Library LTRVR14e.dll 14.5.0.44 allows remote attackers to overwrite arbitrary files via the WriteDataToFile method...

CVE-2007-2848

Stack-based buffer overflow in the SetPath function in the shComboBox ActiveX control shcmb80.ocx in Sky Software Shell MegaPack ActiveX 8.0 allows remote attackers to execute arbitrary code via a long argument. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2007-2851

CVE-2007-2851 affects LeadTools Raster Variant Object Library (LTRVR14e.dll) 14.5.0.44. The vulnerability allows a remote attacker to overwrite arbitrary files through the WriteDataToFile method. The connected documents confirm the affected component and method, and indicate the impact is file ov...

LeadTools Raster Dialog File Object - ActiveX Remote Buffer Overflow (PoC)

LeadTools Raster Dialog File Object - ActiveX Remote Buffer Overflow PoC 2007/05/24 ------------------------------------------------------------------------------------------------ LeadTools Raster Dialog File Object LTRDF14e.DLL v. 14.5.0.44 Remote Buffer Overflow Exploit url:...

LeadTools Raster Dialog File Object - ActiveX Remote Buffer Overflow (PoC)

2007/05/24 ------------------------------------------------------------------------------------------------ LeadTools Raster Dialog File Object LTRDF14e.DLL v. 14.5.0.44 Remote Buffer Overflow Exploit url: http://www.leadtools.com/ price: eheheh, take a look at thier site : author: shinnai mail:...

Dart ZipLite Compression DartZipLite.DLL ActiveX控件缓冲区溢出漏洞

Dart ZipLite Compression是一款实现快速压缩行为的控件。 Dart ZipLite Compression DartZipLite.DLL ActiveX控件处理参数输入缺少正确边界检查，远程攻击者可以利用漏洞对应用程序进行缓冲区溢出攻击，可能以进程权限执行任意指令。 问题存在于DartZipLite.DLL由于不正确处理用户提交的参数，构建恶意WEB页，诱使用户访问，可导致应用程序崩溃。 Dart Dart ZipLite Compression ActiveX Control 1.8.5.3 目前没有解决方案提供：...

KSign KSignSWAT <= 2.0.3.3 ActiveX Control Remote BoF Exploit

No description provided by source. !-- /////////////////////////////////////////////////////////////////// // KSignSWAT SWATLogin PoC Code. // // // // URL : www.ksign.com // // Author : KIM Kee-hong [email protected] // // Date : 2007/05/13 &...

Heap overflow

Heap-based buffer overflow in LEAD Technologies LEADTOOLS ISIS ActiveX Control ltisi14E.ocx 14.5.0.44 and earlier allows remote attackers to execute arbitrary code via a long DriverName property...

CVE-2007-2827

Heap-based buffer overflow in LEAD Technologies LEADTOOLS ISIS ActiveX Control ltisi14E.ocx 14.5.0.44 and earlier allows remote attackers to execute arbitrary code via a long DriverName property...

Stack overflow

Multiple stack-based buffer overflows in the KSign KSignSWAT ActiveX Control AxKSignSWAT.dll 2.0.3.3 allow remote attackers to execute arbitrary code via long arguments to the 1 SWATInit, 2 SWATInitEx, 3 SWATInitEx2, 4 SWATInitEx3, and 5 SWATLogin functions...

CVE-2007-2827

The CVE-2007-2827 issue affects LEAD Technologies LEADTOOLS ISIS ActiveX Control (ltisi14E.ocx) up to version 14.5.0.44. It is a heap-based buffer overflow in the DriverName property that allows a remote attacker to execute arbitrary code. Exploitation details are not provided in the connected do...

CVE-2007-2827

Heap-based buffer overflow in LEAD Technologies LEADTOOLS ISIS ActiveX Control ltisi14E.ocx 14.5.0.44 and earlier allows remote attackers to execute arbitrary code via a long DriverName property...

CVE-2007-2820

The CVE-2007-2820 entry concerns the KSign KSignSWAT ActiveX Control (AxKSignSWAT.dll) version 2.0.3.3, where multiple stack-based buffer overflows in the component expose remote code execution. Specifically, long arguments to the functions SWAT_Init, SWAT_InitEx, SWAT_InitEx2, SWAT_InitEx3, and ...

CVE-2007-2814

Multiple stack-based buffer overflows in the Pegasus ImagN' ActiveX control IMW32O40.OCX 4.00.041 allow remote attackers to execute arbitrary code via 1 a long FileName parameter, or unspecified vectors involving the 2 BeginReport, 3 CreatePictureExA, 4 DefineImage, 5 DefineImageEx, 6...

Stack overflow

Multiple stack-based buffer overflows in the Pegasus ImagN' ActiveX control IMW32O40.OCX 4.00.041 allow remote attackers to execute arbitrary code via 1 a long FileName parameter, or unspecified vectors involving the 2 BeginReport, 3 CreatePictureExA, 4 DefineImage, 5 DefineImageEx, 6...