Code injection

The JNILoader ActiveX control STJNILoader.ocx 3.1.0.26 in IBM Lotus Notes Sametime before 7.5 allows remote attackers to load arbitrary DLL libraries and execute arbitrary code via arbitrary arguments to the loadLibrary function...

CVE-2007-1784

The CVE-2007-1784 entry affects IBM Lotus Notes Sametime (JNILoader ActiveX: STJNILoader.ocx, version 3.1.0.26) where remote attackers can cause arbitrary code execution by passing arbitrary arguments to the loadLibrary function, enabling loading of arbitrary DLLs. Impact is described as remote c...

CVE-2007-1784

The JNILoader ActiveX control STJNILoader.ocx 3.1.0.26 in IBM Lotus Notes Sametime before 7.5 allows remote attackers to load arbitrary DLL libraries and execute arbitrary code via arbitrary arguments to the loadLibrary function...

America Online SuperBuddy ActiveX memory corruption

One of methods allows execute some actions under controllable address...

TSRT-07-03: America Online SuperBuddy ActiveX Control Code Execution Vulnerability

TSRT-07-03: America Online SuperBuddy ActiveX Control Code Execution http://www.tippingpoint.com/security/advisories/TSRT-07-03.html March 30, 2007 -- CVE ID: CVE-2006-5820 -- Affected Vendor: America Online -- Affected Products: America Online 9.0 Security Edition -- TippingPointTM IPS Customer...

iDefense Security Advisory 03.29.07: IBM Lotus Sametime JNILoader Arbitrary DLL Load Vulnerability

IBM Lotus Sametime JNILoader Arbitrary DLL Load Vulnerability iDefense Security Advisory 03.29.07 http://labs.idefense.com/intelligence/vulnerabilities/ Mar 29, 2007 I. BACKGROUND IBM Corp.'s Lotus Sametime product provides a real-time online conferencing solution. More information on the product...

IBM Lotus Sametime code execution

LoadLibrary function is available through ActiveX element...

Integrity Clientless Security (ICS) Update 3.7.147.0

Check Point Integrity ™ Clientless Security ICS protects your Web site by detecting and disabling spyware processes and allowing you to enforce security policies before a user logs onto your network. Using ICS you can prevent users with potentially harmful software from accessing your Web site, a...

Buffer overflow

Buffer overflow in the DownloadCertificateExt function in SignKorea SKCommAX ActiveX control module 7.2.0.2 and 3280 6.6.0.1 allows remote attackers to execute arbitrary code via a long pszUserID argument...

CVE-2007-1722

Buffer overflow in the DownloadCertificateExt function in SignKorea SKCommAX ActiveX control module 7.2.0.2 and 3280 6.6.0.1 allows remote attackers to execute arbitrary code via a long pszUserID argument...

CVE-2007-1722

CVE-2007-1722 describes a buffer overflow in the DownloadCertificateExt function of SignKorea SKCommAX ActiveX control module versions 7.2.0.2 and 3280 6.6.0.1. An attacker can remotely trigger execution of arbitrary code by passing a long pszUserID argument, enabling full compromise of the host ...

SingKorea ActiveX buffer overflow

Buffer overflow in DownloadCertificateExt method...

IASystemInfo.DLL ActiveX控件缓冲区溢出漏洞

InterActual Player用于播放DVD等视频的媒体播放程序，CinePlayer也是功能强大的媒体播放程序。 InterActual Player/CinePlayer包含的ActiveX控件存在缓冲区溢出问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 问题存在于IASystemInfo.dll ActiveX控件处理"ApplicationType"属性存在边界错误，超长的超过260字节的字符串可触发漏洞，可导致以应用程序进程权限执行任意指令。 Roxio CinePlayer 3.2 InterActual Technologies InterActual...

CVE-2007-1637

Multiple buffer overflows in the IMAILAPILib ActiveX control IMailAPI.dll in Ipswitch IMail Server before 2006.2 allow remote attackers to execute arbitrary code via the 1 WebConnect and 2 Connect members in the a IMailServer control; 3 Sync3 and 4 Init3 members in the b IMailLDAPService control;...

Buffer overflow

Multiple buffer overflows in the IMAILAPILib ActiveX control IMailAPI.dll in Ipswitch IMail Server before 2006.2 allow remote attackers to execute arbitrary code via the 1 WebConnect and 2 Connect members in the a IMailServer control; 3 Sync3 and 4 Init3 members in the b IMailLDAPService control;...

CVE-2007-1637

CVE-2007-1637 affects Ipswitch IMail Server prior to 2006.2. Multiple buffer overflows in the IMAILAPILib ActiveX control (IMailAPI.dll) allow remote code execution via the IMailServer, IMailLDAPService, and IMailUserCollection components (WebConnect/Connect, Sync3/Init3, and SetReplyTo members)....

InterActual Player / CinePlayer ActiveX buffer overflow

Buffer overflow in IASystemInfo.dll ActiveX element...

McAfee ePolicy Orchestrator SiteManager ActiveX buffer overflow

Added: 03/22/2007 CVE: CVE-2007-1498 BID: 22952 OSVDB: 33796 Background ePolicy Orchestrator is a centralized security configuration and monitoring application. It includes the SiteManager ActiveX control which is implemented by sitemanager.dll. Problem A buffer overflow vulnerability in the...

McAfee ePolicy Orchestrator SiteManager ActiveX buffer overflow

Added: 03/22/2007 CVE: CVE-2007-1498 BID: 22952 OSVDB: 33796 Background ePolicy Orchestrator is a centralized security configuration and monitoring application. It includes the SiteManager ActiveX control which is implemented by sitemanager.dll. Problem A buffer overflow vulnerability in the...

Secunia Research: InterActual Player / CinePlayer IASystemInfo.dll ActiveX Control Buffer Overflow

====================================================================== Secunia Research 21/03/2007 - InterActual Player / CinePlayer - - IASystemInfo.dll ActiveX Control Buffer Overflow - ====================================================================== Table of Contents Affected...