Code injection

Microsoft Internet Explorer 5.01, 6, and 7 uses certain COM objects from 1 Msb1fren.dll, 2 Htmlmm.ocx, and 3 Blnmgrps.dll as ActiveX controls, which allows remote attackers to execute arbitrary code via unspecified vectors, a different issue than CVE-2006-4697...

CVE-2007-0219

Microsoft Internet Explorer 5.01, 6, and 7 uses certain COM objects from 1 Msb1fren.dll, 2 Htmlmm.ocx, and 3 Blnmgrps.dll as ActiveX controls, which allows remote attackers to execute arbitrary code via unspecified vectors, a different issue than CVE-2006-4697...

CVE-2007-0219

CVE-2007-0219 affects Microsoft Internet Explorer 5.01/6/7 via COM objects instantiated as ActiveX controls. The vulnerability arises when IE tries to instantiate COM objects (not intended for IE) such as those in Imjpcksid.dll, Htmlmm.ocx, and Blnmgrps.dll, leading to remote code execution. Open...

CVE-2006-4697

Microsoft Internet Explorer 5.01, 6, and 7 uses certain COM objects from Imjpcksid.dll as ActiveX controls, which allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: this issue might be related to CVE-2006-4193...

CVE-2006-4697

CVE-2006-4697 is an IE remote-code-execution vulnerability tied to COM objects instantiated as ActiveX controls (Imjpcksid.dll). Affected IE versions (5.01, 6, 7) could be exploited via specially crafted Web content; the attacker could gain full control of the host. OpenVAS/SECURITYVULNS referenc...

CVE-2006-4697

Microsoft Internet Explorer 5.01, 6, and 7 uses certain COM objects from Imjpcksid.dll as ActiveX controls, which allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: this issue might be related to CVE-2006-4193...

CVE-2007-0214

CVE-2007-0214 affects the HTML Help ActiveX control (hhctrl.ocx) in Microsoft Windows 2000 SP3, XP SP2/Professional, and Windows Server 2003 SP1. The vulnerability arises from improper input validation in HTML Help ActiveX methods, leading to a remote code execution flaw if a user visits a specia...

Microsoft HTML Help ActiveX Control Remote Code Execution Vulnerability

Description The Microsoft HTML Help ActiveX control is prone to a remote code-execution vulnerability. An attacker could exploit this issue to execute code in the context of the user visiting a malicious web page. Technologies Affected Avaya Agent Access Avaya Basic Call Management System Reporti...

MS07-009: Vulnerability in Microsoft Data Access Components Could Allow Remote Code Execution (927779)

The remote host contains a version of the ADODB.Connection ActiveX control that is vulnerable to a security flaw that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and entice a victim to visit this web page. Tenable Network Security, Inc...

Microsoft Security Bulletin MS07-008 Vulnerability in HTML Help ActiveX Control Could Allow Remote Code Execution (928843)

Microsoft Security Bulletin MS07-008 Vulnerability in HTML Help ActiveX Control Could Allow Remote Code Execution 928843 Published: February 13, 2007 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum...

MS07-008: Vulnerability in HTML Help ActiveX Control Could Allow Remote Code Execution (928843)

The remote host contains a version of the HTML Help ActiveX control that is vulnerable to a security flaw that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and entice a victim to visit this web page. Tenable Network Security, Inc...

Microsoft Windows HTML Help ActiveX code execution

It's possible to access unsafe functions from web page. Vulnerability can be used for hidden malware installation...

Microsoft HTML Help ActiveX control fails to properly validate input

Overview The Microsoft HTML Help ActiveX control fails to properly validate input, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The HTML Help Control HHCtrl Object is a Windows ActiveX control that provides the ability to view...

Alibaba Alipay remote code execute vulnerability-0DAY-vulnerability warning-the black bar safety net

Alibaba Alipay remote code execution vulnerability by cocoruderfrankruderathotmail.com http://ruder.cdut.net Summary: Alipay by Alibaba company produced the online payment solution in China, which has many users, more information please refer to: https://www.alipay.com In Alipay password input...

Design/Logic Flaw

HP Network Node Manager NNM Remote Console 7.50, 7.51, and 7.53 assigns Everyone Full Control permission for the %PROGRAMFILES%\HP OpenView directory tree, which allows local users to gain privileges via a Trojan horse executable file or ActiveX component, or a modified bin\ovtrcsvc.exe for the H...

CVE-2007-0819

CVE-2007-0819 affects HP Network Node Manager (NNM) Remote Console on Windows, specifically versions 7.50, 7.51, and 7.53. The root cause is that the Remote Console assigns Everyone Full Control permissions to the %PROGRAMFILES%\HP OpenView directory tree, enabling local users to escalate privile...

CVE-2007-0819

HP Network Node Manager NNM Remote Console 7.50, 7.51, and 7.53 assigns Everyone Full Control permission for the %PROGRAMFILES%\HP OpenView directory tree, which allows local users to gain privileges via a Trojan horse executable file or ActiveX component, or a modified bin\ovtrcsvc.exe for the H...

CVE-2007-0827

The Alibaba Alipay PTA Module ActiveX control PTA.DLL allows remote attackers to execute arbitrary code via a JavaScript function that invokes the Remove method with an invalid index argument, which is used as an offset for a function call...

Design/Logic Flaw

The Alibaba Alipay PTA Module ActiveX control PTA.DLL allows remote attackers to execute arbitrary code via a JavaScript function that invokes the Remove method with an invalid index argument, which is used as an offset for a function call...

CVE-2007-0827

The CVE-2007-0827 issue concerns the Alibaba Alipay PTA Module ActiveX control (PTA.DLL). Connected sources describe a memory-corruption condition in Remove() where an invalid index argument is used as an offset for a function call, enabling remote attackers to execute arbitrary code via a crafte...