CVE-2007-0827

The Alibaba Alipay PTA Module ActiveX control PTA.DLL allows remote attackers to execute arbitrary code via a JavaScript function that invokes the Remove method with an invalid index argument, which is used as an offset for a function call...

Alibaba Alipay (Remove ActiveX) Remote Code Execution Exploit

No description provided by source. html head OBJECT ID="com" CLASSID="CLSID:66F50F46-70A0-4A05-BD5E-FBCC0F9641EC"/OBJECT /head body SCRIPT language="javascript" function ClickForRunCalc var heapSprayToAddress = 0x0d0d0d0d; var payLoadCode =...

Alibaba Alipay ActiveX memory corruption

Memory free by controlled address in Remove function...

Integrity Clientless Security (ICS) Update 3.7.135.0

Check Point Integrity ™ Clientless Security ICS protects your Web site by detecting and disabling spyware processes and allowing you to enforce security policies before a user logs onto your network. Using ICS you can prevent users with potentially harmful software from accessing your Web site, a...

Alibaba Alipay (Remove ActiveX) Remote Code Execution Exploit

Exploit for unknown platform in category remote exploits ============================================================= Alibaba Alipay Remove ActiveX Remote Code Execution Exploit ============================================================= / Alipay ActiveX Remote Code Execute Exploit,enjoy it: b...

Alibaba Alipay - Remove ActiveX Remote Code Execution

/ Alipay ActiveX Remote Code Execute Exploit,enjoy it: by cocoruderfrankruderathotmail.com http://ruder.cdut.net / function ClickForRunCalc var heapSprayToAddress = 0x0d0d0d0d; var payLoadCode =...

Alibaba Alipay - Remove ActiveX Remote Code Execution

Alibaba Alipay - Remove ActiveX Remote Code Execution / Alipay ActiveX Remote Code Execute Exploit,enjoy it: by cocoruderfrankruderathotmail.com http://ruder.cdut.net / function ClickForRunCalc var heapSprayToAddress = 0x0d0d0d0d; var payLoadCode =...

Microsoft Windows XMLHTTP proxy problem

Because of insufficient request validation Msxml2.XMLHTTP ActiveX object can be used to proxy HTTML request via client browser...

CVE-2007-0675

A certain ActiveX control in sapi.dll aka the Speech API in Speech Components in Microsoft Windows Vista, when the Speech Recognition feature is enabled, allows user-assisted remote attackers to delete arbitrary files, and conduct other unauthorized activities, via a web page with an embedded sou...

Design/Logic Flaw

A certain ActiveX control in sapi.dll aka the Speech API in Speech Components in Microsoft Windows Vista, when the Speech Recognition feature is enabled, allows user-assisted remote attackers to delete arbitrary files, and conduct other unauthorized activities, via a web page with an embedded sou...

CVE-2007-0675

A certain ActiveX control in sapi.dll aka the Speech API in Speech Components in Microsoft Windows Vista, when the Speech Recognition feature is enabled, allows user-assisted remote attackers to delete arbitrary files, and conduct other unauthorized activities, via a web page with an embedded sou...

CVE-2007-0675

CVE-2007-0675 targets the sapi.dll ActiveX control in Microsoft Speech Components (Speech API) on Windows with Speech Recognition enabled. A remote attacker could exploit a specially crafted web page to achieve remote code execution; user interaction is required to view the page, and the vulnerab...

Microsoft Internet Explorer multiple ActiveX different paramters DoS

NULL pointer dereference...

Hewlett-Packard Network Node Manager 7.50 Remote Console weak files permissions

Vendor: Hewlett-Packard Application: Network Node Manager 7.50 Remote Console under Microsoft Windows XP SP2. Vulnerability: Local Vulnerability Level: High Author: 3APA3A , Impact: privilege escalation of any unprivileged user to Local System or another user's account. Intro: NNM Remote Console ...

Microsoft Internet Explorer多个ActiveX控件拒绝服务漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer包含的多个ActiveX控件存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 Determina Security Research发现当部分对象属性通过JavaScript访问时，多个控件会由于非法内存访问异常而导致应用程序崩溃。多数受影响ActiveX控件存在于MSHTML.dll中，这些ProgIDs包括如下： giffile htmlfile jpegfile mhtmlfile ODCfile pjpegfile pngfile...

Code injection

The SpamBlocker.dll ActiveX control in Earthlink TotalAccess is marked "safe for scripting," which allows remote attackers to add arbitrary e-mail addresses and domains to the spam blocker whitelist via the 1 AddSenderToWhitelist and 2 AddDomainToWhitelist functions...

CVE-2007-0612

Multiple ActiveX controls in Microsoft Windows 2000, XP, 2003, and Vista allows remote attackers to cause a denial of service Internet Explorer crash by accessing the bgColor, fgColor, linkColor, alinkColor, vlinkColor, or defaultCharset properties in the 1 giffile, 2 htmlfile, 3 jpegfile, 4...

Null pointer dereference

Multiple ActiveX controls in Microsoft Windows 2000, XP, 2003, and Vista allows remote attackers to cause a denial of service Internet Explorer crash by accessing the bgColor, fgColor, linkColor, alinkColor, vlinkColor, or defaultCharset properties in the 1 giffile, 2 htmlfile, 3 jpegfile, 4...

CVE-2007-0612

CVE-2007-0612 affects multiple Windows ActiveX controls via mshtml.dll (and TriEditDocument.triedit.dll) where accessing bgColor/fgColor/linkColor/alinkColor/vlinkColor/defaultCharset in various file objects triggers a NULL pointer dereference, causing Internet Explorer denial of service (crash)....

CVE-2007-0612

Multiple ActiveX controls in Microsoft Windows 2000, XP, 2003, and Vista allows remote attackers to cause a denial of service Internet Explorer crash by accessing the bgColor, fgColor, linkColor, alinkColor, vlinkColor, or defaultCharset properties in the 1 giffile, 2 htmlfile, 3 jpegfile, 4...