BrowseDialog ActiveX控件CCRPBDS6.DLL远程拒绝服务漏洞

BrowseDialog ActiveX是一款浏览器对话框ActiveX控件。 BrowseDialog ActiveX处理参数存在缓冲区溢出问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 问题是对于此控件输入参数缺少充分的边界条件检查，构建恶意页面，诱使用户访问，可导致触发溢出，并以应用程序进程权限执行任意指令。 Microsoft Internet Explorer 7.0 目前没有解决方案提供 html object classid='clsid:19E6E148-BAEC-11D2-B03A-EAFC20524153' id='CCRPBDc' /object...

MOAB-03-01-2007: Apple Quicktime HREFTrack Cross-Zone Scripting vulnerability

Summary A month ago, a vulnerability in QuickTime was exploited to spread a worm in MySpace. The vulnerability was first published by pdp. In his article, pdp describes how HREFTrack attribute in .mov files can be used for malicious scripting. The MySpace worm abused this vulnerability in a...

CVE-2007-0371

A certain ActiveX control in the Common Controls Replacement Project CCRP CCRP BrowseDialog Server ccrpbds6.dll allows remote attackers to cause a denial of service Internet Explorer 7 crash via a long CCRPBDc.SelectedFolder property value...

CVE-2007-0371

CVE-2007-0371 affects the CCRP BrowseDialog Server ActiveX control (ccrpbds6.dll) within the Common Controls Replacement Project. The vulnerability enables a denial of service resulting in an Internet Explorer 7 crash when a long value is provided to the CCRP_BDc.SelectedFolder property. The conn...

CVE-2007-0356

The Common Controls Replacement Project CCRP FolderTreeview FTV ActiveX control ccrpftv6.ocx allows remote attackers to cause a denial of service Internet Explorer 7 crash via a long CCRP.RootFolder property value...

Code injection

The Common Controls Replacement Project CCRP FolderTreeview FTV ActiveX control ccrpftv6.ocx allows remote attackers to cause a denial of service Internet Explorer 7 crash via a long CCRP.RootFolder property value...

CVE-2007-0356

The CVE-2007-0356 entry concerns the Common Controls Replacement Project (CCRP) FolderTreeview (FTV) ActiveX control (ccrpftv6.ocx). Affected component and condition: remote attacker can trigger a denial of service by supplying an excessively long CCRP.RootFolder property value, causing Internet ...

CVE-2007-0356

The Common Controls Replacement Project CCRP FolderTreeview FTV ActiveX control ccrpftv6.ocx allows remote attackers to cause a denial of service Internet Explorer 7 crash via a long CCRP.RootFolder property value...

Oracle ORADC ActiveX控件远程代码执行漏洞

Oracle ORADC是一款用于VB的Oracle ActiveX控件。 Oracle ORADC存在缓冲区溢出，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击，可能执行任意指令。 构建如下页面，诱使用户访问，可导致任意代码执行： !-- // CLSID: EC4CF635-D196-11CE-9027-02608C4BF3B5 // Info: ORADC Control // ProgID: ORADC.ORADCCtrl.1 // InprocServer32: C:\Oracle\Ora81\bin\oradc.ocx --! html body OBJECT...

ICONICS Dialog Wrapper模块ActiveX控件远程栈溢出漏洞

ICONICS是一家专业提供基于OPC可视化软件的公司，ICONICS Dialog Wrapper模块ActiveX控件是捆绑于启用了OPC的可视化工具中的控件。 ICONICS Gauge ActiveX、ICONICS Switch ActiveX和ICONICS Vessel ActiveX中所使用的Dialog Wrapper模块ActiveX控件（DlgWrapper.dll）在处理DoModal方式时存在栈溢出漏洞。如果远程攻击者能够通过FileName或Filter参数传送超长字符串的话，就会触发这个漏洞，导致执行任意代码。 ICONICS Dialog Wrapper...

Microsoft Visual Studio 2005 WMI Object Broker vulnerability

Added: 01/15/2007 CVE: CVE-2006-4704 BID: 20843 OSVDB: 30155 Background Microsoft Visual Studio is a product to assist with software development in the Windows operating system. Problem A flaw in the WMI Object Broker ActiveX control allows attackers to bypass security zone restrictions, leading ...

Citrix Presentation Server Client wfica.ocx Buffer Overflow (CVE-2006-6334)

Citrix Presentation Server, a remote access application publishing product, is prone to a buffer overflow vulnerability. By convincing a user to visit a malicious Web page or open a malicious HTML, a remote attacker could cause the victim's system to execute arbitrary commands and take complete...

GraceNote CDDBControl ActiveX Control Buffer Overflow (CVE-2006-3134; CVE-2006-6442)

A vulnerability has been discovered in America Online AOL CDDB ActiveX Control. Gracenote CDDB ActiveX control contains a buffer overflow error that allows remote attackers to execute arbitrary code via a long option string. A remote attacker could exploit this flaw to execute arbitrary code and...

Oracle ORADC - ActiveX Control Remote Code Execution

Oracle ORADC - ActiveX Control Remote Code Execution source: https://www.securityfocus.com/bid/22026/info Oracle ORADC ActiveX control is prone to a remote code-execution vulnerability. Exploiting this issue allows remote attackers to execute arbitrary machine code in the context of applications...

Oracle ORADC - ActiveX Control Remote Code Execution

source: https://www.securityfocus.com/bid/22026/info Oracle ORADC ActiveX control is prone to a remote code-execution vulnerability. Exploiting this issue allows remote attackers to execute arbitrary machine code in the context of applications using the affected ActiveX control and possibly to...

Acer LunchApp.APlunch ActiveX Arbitrary Command Execution

The remote host contains an ActiveX control from Acer called LunchApp.APlunch that is reportedly shipped with notebook computers from that manufacturer and is marked as 'safe for scripting' and 'safe for initializing from persistent data'. By tricking a user on the affected host into visiting a...

Acer LunchApp ActiveX Control fails to properly restrict access to methods

Overview The Acer LunchApp ActiveX control contains methods that can allow a remote, unauthenticated attacker to run arbitrary commands on a vulnerable system. Description The Acer LunchApp ActiveX control is provided by LunchApp.ocx. It contains a method called Run, which takes three parameters:...

Apple Quicktime HREFTrack Cross-Zone Scripting vulnerability

Overview Web browsers running the Apple QuickTime plugin may allow remote web sites to reference content on the local filesystem. This may allow an attacker to execute script within the security context of the local machine. Description Web browser plugins that allow remote web sites to reference...

Stack overflow

Multiple stack-based multiple buffer overflows in the BRWOSSRE2UC.dll ActiveX Control in Sina UC2006 and earlier allow remote attackers to execute arbitrary code via a long string in the 1 astrVerion parameter to the SendChatRoomOpt function or 2 the astrDownDir parameter to the SendDownLoadFile...

CVE-2007-0174

Multiple stack-based multiple buffer overflows in the BRWOSSRE2UC.dll ActiveX Control in Sina UC2006 and earlier allow remote attackers to execute arbitrary code via a long string in the 1 astrVerion parameter to the SendChatRoomOpt function or 2 the astrDownDir parameter to the SendDownLoadFile...