CVE-2007-1955

Multiple stack-based buffer overflows in the SignKorea SKCrypAX ActiveX control module 5.4.1.2 allow remote attackers to execute arbitrary code via a long string in unspecified arguments to the 1 DownloadCert, 2 DecryptFileByKey, and 3 EncryptFileByKey functions, a different module and vectors th...

Roxio CinePlayer 3.2 - SonicDVDDashVRNav.dll ActiveX Control Remote Buffer Overflow

Roxio CinePlayer 3.2 - SonicDVDDashVRNav.dll ActiveX Control Remote Buffer Overflow source: https://www.securityfocus.com/bid/23412/info Roxio CinePlayer is prone to a stack-based buffer-overflow vulnerability because it fails to sufficiently check boundaries of user-supplied input before copying...

Roxio CinePlayer 3.2 - 'SonicDVDDashVRNav.dll' ActiveX Control Remote Buffer Overflow

source: https://www.securityfocus.com/bid/23412/info Roxio CinePlayer is prone to a stack-based buffer-overflow vulnerability because it fails to sufficiently check boundaries of user-supplied input before copying it to an insufficiently sized memory buffer. A remote attacker may exploit this iss...

CVE-2007-1687

Multiple buffer overflows in the Internet Pictures Corporation iPIX Image Well ActiveX control iPIX-ImageWell-ipix.dll allow remote attackers to execute arbitrary code via unspecified vectors...

Buffer overflow

Multiple buffer overflows in the Internet Pictures Corporation iPIX Image Well ActiveX control iPIX-ImageWell-ipix.dll allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-1687

CVE-2007-1687 : The vulnerability affects the Internet Pictures Corporation’s iPIX Image Well ActiveX control, specifically the library iPIX-ImageWell-ipix.dll . Multiple buffer overflows in this control could allow a remote attacker to execute arbitrary code on a vulnerable system. The issue is ...

CVE-2007-1687

Multiple buffer overflows in the Internet Pictures Corporation iPIX Image Well ActiveX control iPIX-ImageWell-ipix.dll allow remote attackers to execute arbitrary code via unspecified vectors...

Microsoft Agent ActiveX memory corruption

Buffer overflow on URL parsing...

Microsoft Windows Agent fails to properly process crafted URLs

Overview Microsoft Agent fails to properly handle specially crafted URLs, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft Agent is software that provides animated characters to enhance interaction with computer systems...

Yahoo! Messenger AudioConf ActiveX Control buffer overflow vulnerability

Overview The Yahoo! Messenger AudioConf ActiveX control contains a buffer overflow, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Yahoo! Messenger is an instant messaging application. Yahoo! Messenger includes several ActiveX...

Internet Pictures Corporation iPIX Image Well ActiveX controls contain buffer overflows

Overview The Internet Pictures Corporation iPIX Image Well ActiveX controls contain buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Internet Pictures Corporation has produced equipment and software to create 360...

SolidWorks ActiveX buffer overflow

Run methods allows to execute external application...

AOL SuperBuddy ActiveX Control Remote Code Execution Exploit (meta)

No description provided by source. require 'msf/core' module Msf class Exploits::Windows::Browser::AOLSuperBuddyLinkSBIcons 'AOL Sb.Superbuddy vulnerability', 'Description' = %q This module exploits a flaw in AOL Sb.SuperBuddy. We stole this code from a pre-existing metasploit module. ,...

HP Mercury Quality Center ActiveX Control ProgColor Buffer Overflow

This module exploits a stack-based buffer overflow in SPIDERLib.Loader ActiveX control Spider90.ocx 9.1.0.4353 installed by TestDirector TD for Hewlett-Packard Mercury Quality Center 9.0 before Patch 12.1, and 8.2 SP1 before Patch 32. By setting an overly long value to 'ProgColor', an attacker ca...

CVE-2007-1684

The Run function in SolidWorks sldimdownload ActiveX control in sldimdownload.dll before 16.0.0.6 allows remote attackers to execute arbitrary commands via the 1 installerpath and 2 applicationarguments arguments...

Code injection

The Run function in SolidWorks sldimdownload ActiveX control in sldimdownload.dll before 16.0.0.6 allows remote attackers to execute arbitrary commands via the 1 installerpath and 2 applicationarguments arguments...

CVE-2007-1680

Stack-based buffer overflow in the createAndJoinConference function in the AudioConf ActiveX control yacscom.dll in Yahoo! Messenger before 20070313 allows remote attackers to execute arbitrary code via long 1 socksHostname and 2 hostname properties...

Stack overflow

Stack-based buffer overflow in the createAndJoinConference function in the AudioConf ActiveX control yacscom.dll in Yahoo! Messenger before 20070313 allows remote attackers to execute arbitrary code via long 1 socksHostname and 2 hostname properties...

CVE-2007-1680

CVE-2007-1680 is a stack-based buffer overflow in Yahoo! Messenger’s AudioConf ActiveX control (yacscom.dll). The vulnerability occurs when the createAndJoinConference method is called with excessively long socksHostname or hostname parameters, enabling remote code execution under the current use...

CVE-2007-1684

The Run function in SolidWorks sldimdownload ActiveX control in sldimdownload.dll before 16.0.0.6 allows remote attackers to execute arbitrary commands via the 1 installerpath and 2 applicationarguments arguments...