CVE-2007-0617

The SpamBlocker.dll ActiveX control in Earthlink TotalAccess is marked "safe for scripting," which allows remote attackers to add arbitrary e-mail addresses and domains to the spam blocker whitelist via the 1 AddSenderToWhitelist and 2 AddDomainToWhitelist functions...

CVE-2007-0617

The CVE-2007-0617 entry involves Earthlink TotalAccess’s SpamBlocker.dll ActiveX control, which is labeled “safe for scripting.” This misclassification enables a remote attacker to modify the spam‑blocker whitelist by invoking AddSenderToWhitelist or AddDomainToWhitelist, allowing arbitrary addre...

Microsoft Internet Explorer 5.0.1 - Multiple ActiveX Controls Denial of Service Vulnerabilities

Microsoft Internet Explorer 5.0.1 - Multiple ActiveX Controls Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/22288/info Microsoft Internet Explorer is prone to multiple denial-of-service vulnerabilities because the application fails to handle exceptional conditions...

Microsoft Internet Explorer 5.0.1 - Multiple ActiveX Controls Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/22288/info Microsoft Internet Explorer is prone to multiple denial-of-service vulnerabilities because the application fails to handle exceptional conditions. These issues are triggered when an attacker entices a victim user to visit a malicious website...

Earthlink TotalAccess AtciveX protection bypass

It's possible to manage sender and domain whitelists...

[Full-disclosure] Earthlink TotalAccess ActiveX Unsafe Methods Vulnerability

Title: ------------------- Earthlink TotalAccess ActiveX Unsafe Methods Vulnerability Vendor Contacted: ------------------- now-ish. Background Info: ------------------- Earthlink TotalAccess Download Site: http://www.earthlink.net/software/free/totalaccess/highspeed/ Description:...

Integrity Clientless Security (ICS) Update 3.7.131.0

Check Point Integrity ™ Clientless Security ICS protects your Web site by detecting and disabling spyware processes and allowing you to enforce security policies before a user logs onto your network. Using ICS you can prevent users with potentially harmful software from accessing your Web site, a...

Stack overflow

Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control NCTAudioFile2.dll, as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include 1 NCTsoft NCTAudioStudio, NCTAudioEdito...

CVE-2007-0018

Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control NCTAudioFile2.dll, as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include 1 NCTsoft NCTAudioStudio, NCTAudioEdito...

CVE-2007-0018

Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control NCTAudioFile2.dll, as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include 1 NCTsoft NCTAudioStudio, NCTAudioEdito...

CVE-2007-0018

CVE-2007-0018 describes a stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll) that allows remote code execution via a long argument to the SetFormatLikeSample function. Affected products include numerous NCTAudioFile2-based apps (AudioStudio/Editor/Voice...

KLA10252 ACE vulnerability in multiple software

A buffer overflow was found in multiple products, exploiting NCTAudioFile2.AudioFile. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed call. Original advisories - Related products...

DivX Web Player NPDIVX32.DLL ActiveX控件远程拒绝服务漏洞

DivX Web Player是一款适用于多浏览器的插件。 DivX Web Player NPDIVX32.DLL ActiveX控件不正确处理参数数据，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 由于NPDIVX32.DLL ActiveX控件对用户提交的参数缺少过滤，构建恶意WEB页，诱使用户访问，可导致应用程序崩溃： html OBJECT id=DivXBrowserPlugin style="LEFT: 0px; WIDTH: 1px; TOP: 0px; HEIGHT: 1px" height=1 width=1...

NCTsoft NCTAudioFile2 ActiveX Control Remote Buffer Overflow Vulnerability

Description NCTsoft NCTAudioFile2 ActiveX control is prone to a buffer-overflow vulnerability. The software fails to perform sufficient bounds-checking of user-supplied input before copying it to an insufficiently sized memory buffer. NCTAudioEditor is a collection of ActiveX controls for...

Online Media Technologies NCTsoft NCTAudioFile2 ActiveX buffer overflow

Overview The Online Media Technologies NCTsoft NCTAudioFile2 ActiveX control contains a buffer overflow vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Online Media Technologies NCTsoft provides an ActiveX control...

Sienzo Digital Music Mentor ActiveX buffer overflow

Buffer overflow in NCTAudioFile2.AudioFile SetFormatLikeSample method...

[Full-disclosure] Secunia Research: Sienzo Digital Music Mentor NCTAudioFile2 ActiveX Control Buffer Overflow

====================================================================== Secunia Research 24/01/2007 - Sienzo Digital Music Mentor - - NCTAudioFile2 ActiveX Control Buffer Overflow - ====================================================================== Table of Contents Affected...

[Full-disclosure] Secunia Research: NCTsoft Products NCTAudioFile2 ActiveX Control Buffer Overflow

====================================================================== Secunia Research 24/01/2007 - NCTsoft Products NCTAudioFile2 ActiveX Control Buffer Overflow - ====================================================================== Table of Contents Affected...

Design/Logic Flaw

DivXBrowserPlugin aka DivX Web Player npdivx32.dll, as distributed with DivX Player 6.4.1, allows remote attackers to cause a denial of service Internet Explorer 7 crash by invoking the GoWindowed method for a certain instance of the ActiveX object...

CVE-2007-0429

Affected software: DivX Player 6.4.1 includes DivXBrowserPlugin (npdivx32.dll) used as an ActiveX control in Internet Explorer. Vulnerability: invoking the GoWindowed method on a certain ActiveX instance can trigger a denial-of-service condition, leading to IE7 crash. Root cause: improper handlin...