Design/Logic Flaw

The WordOCX ActiveX control in WordViewer.ocx 3.2.0.5 allows remote attackers to cause a denial of service Internet Explorer 7 crash via a long 1 DoOleCommand, 2 FTPDownloadFile, 3 FTPUploadFile, 4 HttpUploadFile, 5 GotoPage, 6 Save, 7 SaveWebFile, 8 HttpDownloadFile, 9 Open, 10 OpenWebFile, 11...

Stack overflow

Multiple stack-based buffer overflows in the PowerPointOCX ActiveX control in PowerPointViewer.ocx 3.1.0.3 allow remote attackers to cause a denial of service Internet Explorer 7 crash via a long 1 DoOleCommand, 2 FTPDownloadFile, 3 FTPUploadFile, 4 HttpUploadFile, 5 Save, 6 SaveWebFile, 7...

CVE-2007-2495

Multiple stack-based buffer overflows in the ExcelOCX ActiveX control in ExcelViewer.ocx 3.1.0.6 allow remote attackers to cause a denial of service Internet Explorer 7 crash via a long 1 DoOleCommand, 2 FTPDownloadFile, 3 FTPUploadFile, 4 HttpUploadFile, 5 Save, 6 SaveWebFile, 7 HttpDownloadFile...

PowerPoint Viewer OCX 3.2 (ActiveX Control) Denial of Service Exploit

No description provided by source. span style="font: 10pt Courier New;"span class="general1-symbol"----------------------------------------------------------------------------- bPowerPointViewer.ocx v. 3.1.0.3 multiple methods Denial of Service/b url: urlhttp://www.officeocx.com//url price: from...

Axis Communications CamImage ActiveX control stack buffer overflow

Overview The Axis Communications CamImage ActiveX control contains a stack buffer overflow, which can allow a remote, unauthenticated attacker to run arbitrary code on a vulnerable system. Description Axis Communications provides an ActiveX control for viewing motion JPEG streams in Microsoft...

ActSoft DVD-Tools - dvdtools.ocx 3.8.5.0 Remote Stack Overflow

ActSoft DVD-Tools - dvdtools.ocx 3.8.5.0 Remote Stack Overflow '---------------------------------------------------------------------------------- ' ActSoft DVD-Tools dvdtools.ocx v. 3.8.5.0 Stack Overflow Exploit MoAxB bonus ' url: http://www.activex-soft.com ' ' original advisory:...

CVE-2007-2496

The WordOCX ActiveX control in WordViewer.ocx 3.2.0.5 allows remote attackers to cause a denial of service Internet Explorer 7 crash via a long 1 DoOleCommand, 2 FTPDownloadFile, 3 FTPUploadFile, 4 HttpUploadFile, 5 GotoPage, 6 Save, 7 SaveWebFile, 8 HttpDownloadFile, 9 Open, 10 OpenWebFile, 11...

CVE-2007-2496

CVE-2007-2496 affects the WordOCX ActiveX control in WordViewer.ocx 3.2.0.5, allowing remote DoS in Internet Explorer 7 via overly long values for various properties (e.g., DoOleCommand, FTPDownloadFile, HttpUploadFile, Open, Save, etc.). Connected sources corroborate a buffer-overflow/long-input...

CVE-2007-2495

CVE-2007-2495 affects the ExcelViewer.ocx 3.1.0.6 ExcelOCX ActiveX control. The vulnerability is described as multiple stack-based buffer overflows that allow remote attackers to cause a denial of service, specifically an Internet Explorer 7 crash, by supplying long values for any of these proper...

CVE-2007-2494

CVE-2007-2494 concerns the PowerPointOCX ActiveX control in PowerPointViewer.ocx 3.1.0.3, where multiple stack-based buffer overflows can be triggered by long property values (DoOleCommand, FTPDownloadFile, FTPUploadFile, HttpUploadFile, Save, SaveWebFile, HttpDownloadFile, Open, OpenWebFile). Th...

ienct-overflow.txt

Sub tryMe '------------------------------------------------------------------ 'PoC2 IE NCTAudioFile2.AudioFile ActiveX Remote Stack Overfl0w 'original advisory: http://secunia.com/advisories/23475/ 'author: shinnai 'mail: shinnaiatautisticidotorg 'site: http://shinnai.altervista.org 'based on:...

ipix-overflow.txt

targetFile = "C:\test\iPIX-ImageWell-ipix\iPIX-ImageWell-ipix.dll" prototype = "Function CreateMediaGroup ByVal bUserID As String , ByVal bPassword As String , ByVal bGroupHandle As String , ByVal NumElements As Integer , ByVal bServiceType As String , ByVal bIPAddr As String As Integer" memberNa...

McAfee ePolicy Orchestrator SiteManager ActiveX Multiple Buffer Overflows (CVE-2007-1498)

Multiple vulnerabilities exist in the McAfee ePolicy Orchestrator ePO, and the Protection Pilot products. McAfee ePolicy Orchestrator is a central management system to enforce and monitor system security. A remote attacker could exploit this issue by convincing a user to visit a specially crafted...

Symantec Products SupportSoft ActiveX Control Multiple Buffer Overflows (CVE-2006-6490)

Multiple vulnerabilities have been reported in Symantec SupportSoft ActiveX controls. SupportSoft provides third party ActiveX controls used for remote assistance and other technical support functions. A remote attacker could cause the browser to crash allowing execution of arbitrary commands.The...

PowerPoint Viewer OCX 3.2 - ActiveX Control Denial of Service

PowerPoint Viewer OCX 3.2 - ActiveX Control Denial of Service 2007/05/01 ----------------------------------------------------------------------------- PowerPointViewer.ocx v. 3.1.0.3 multiple methods Denial of Service url: http://www.officeocx.com/ price: from €63.95 update to last version to...

PowerPoint Viewer OCX 3.2 (ActiveX Control) Denial of Service Exploit

Exploit for unknown platform in category dos / poc ===================================================================== PowerPoint Viewer OCX 3.2 ActiveX Control Denial of Service Exploit ===================================================================== 2007/05/01...

PowerPoint Viewer OCX 3.2 - ActiveX Control Denial of Service

2007/05/01 ----------------------------------------------------------------------------- PowerPointViewer.ocx v. 3.1.0.3 multiple methods Denial of Service url: http://www.officeocx.com/ price: from €63.95 update to last version to €1,585.95 Royalty author: shinnai mail:...

ActiveGS ActiveX multiple buffer overflows

Buffer overflows in different components...

IncrediMail IMMenuShellExt ActiveX控件远程栈溢出漏洞

IncrediMail是一款极富个性的电子邮件客户端软件。 IncrediMail实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户机器。 IncrediMail所捆绑的IMMenuShellExt ActiveX控件（ImShExt.dll）中的DoWebMenuAction函数存在栈溢出漏洞。如果用户受骗打开了恶意的HTML文档（如HTML邮件消息或附件）的话，就可能触发这个溢出，导致执行任意指令，或导致浏览器崩溃。 IncrediMail Ltd IncrediMail 临时解决方法： 在Internet Explorer中为以下CLSID设置kill bit：...

IE NCTAudioFile2.AudioFile ActiveX Remote Stack Overflow Exploit 2

No description provided by source. html object classid='clsid:77829F14-D911-40FF-A2F0-D11DB8D6D0BC' id='NCTAudioFile2'/object input language=VBScript onclick=tryMe type=button value="Click here to start the test" script language = 'vbscript' Sub tryMe...