RealNetworks RealPlayer ActiveX控件远程拒绝服务漏洞

RealNetworks RealPlayer是一款流行的媒体播放软件。 RealNetworks RealPlayer ActiveX控件处理存在安全问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 构建如下的恶意页面，诱使用户使用RealPlayer 10.5访问，可导致rpau3260.dll出现问题，而使应用程序崩溃： html body object classid="clsid:405DE7C0-E7DD-11D2-92C5-00C0F01F77C1" id="RealPlayer" /object script...

CVE-2006-6659

The Microsoft Office Outlook Recipient ActiveX control ole32.dll in Windows XP SP2 allows remote attackers to cause a denial of service Internet Explorer 7 hang via crafted HTML...

CVE-2006-6659

CVE-2006-6659 affects the Microsoft Office Outlook Recipient ActiveX control (ole32.dll) in Windows XP SP2. The vulnerability allows remote attackers to cause a denial of service by presenting crafted HTML, resulting in an Internet Explorer 7 hang. The connected Red Hat and NVD records reiterate ...

CVE-2006-6659

The Microsoft Office Outlook Recipient ActiveX control ole32.dll in Windows XP SP2 allows remote attackers to cause a denial of service Internet Explorer 7 hang via crafted HTML...

RealPlayer 10.5 - ActiveX Control Denial of Service

RealPlayer 10.5 - ActiveX Control Denial of Service RealPlayer.Initialize"AA","defaultV" milw0rm.com 2006-12-20...

RealPlayer 10.5 - ActiveX Control Denial of Service

RealPlayer.Initialize"AA","defaultV" milw0rm.com 2006-12-20...

RealPlayer 10.5 (ActiveX Control) Denial of Service Exploit

Exploit for unknown platform in category dos / poc =========================================================== RealPlayer 10.5 ActiveX Control Denial of Service Exploit =========================================================== RealPlayer.Initialize"AA","defaultV" 0day.today 2018-01-05...

CVE-2006-3896

CVE-2006-3896 affects NeoScale Systems CryptoStor 700 series appliances prior to firmware 2.6. The vulnerability stems from client-side ActiveX-based smartcard authentication; disabling ActiveX bypasses the second-factor, allowing an attacker with valid username/password to gain admin access. Imp...

雅虎通YMailAttach ActiveX控件远程缓冲区溢出漏洞

BUGTRAQ ID: 21607 雅虎通是一款非常流行的即时通讯工具。 雅虎通的ymmapi.dll文件所提供的YMailAttach ActiveX控件中存在缓冲区溢出，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 如果用户受骗浏览了恶意的HTML文档的话，就会触发这个溢出，导致执行任意指令或导致Internet Explorer崩溃 Yahoo! Messenger = 8.0.0.863 sebug临时解决方法： 在IE中禁用YMailAttach ActiveX控件。将以下文本保存为.REG文件并导入： Windows Registry Editor Version 5....

Microsoft Outlook ActiveX控件远程Internet Explorer拒绝服务漏洞

Microsoft Outlook是Office套件所捆绑的邮件客户端。 Microsoft Outlook的Recipient控件（ole32.dll）存在拒绝服务漏洞。如果用户受骗打开了恶意的HTML邮件的话，就会导致Internet Explorer或其他使用该ActiveX控件的应用程序崩溃。 Microsoft Outlook XP Microsoft Outlook 98 Microsoft Outlook 97 Microsoft Outlook 2003 Microsoft Outlook 2002 Microsoft Outlook 2000...

Microsoft Outlook - ActiveX Control Remote Internet Explorer Denial of Service

source: https://www.securityfocus.com/bid/21649/info The Microsoft Office Outlook Recipient Control is prone to a denial-of-service vulnerability. An attacker can exploit this issue to trigger denial-of-service conditions in Internet Explorer or other applications that use the ActiveX control...

Microsoft Outlook - ActiveX Control Remote Internet Explorer Denial of Service

Microsoft Outlook - ActiveX Control Remote Internet Explorer Denial of Service source: https://www.securityfocus.com/bid/21649/info The Microsoft Office Outlook Recipient Control is prone to a denial-of-service vulnerability. An attacker can exploit this issue to trigger denial-of-service...

NeoScale Systems CryptoStor 700 series appliances fail to properly perform two-factor authentication

Overview NeoScale Systems CryptoStor 700 series appliances fail to properly perform two-factor authentication. This can make it easier to bypass the CryptoStor authentication process. Description NeoScale Systems CryptoStor Tape units are tape backup encryption appliances. CryptoStor 700 series...

MS06-057 Microsoft Internet Explorer WebViewFolderIcon setSlice() Overflow

This module exploits a flaw in the WebViewFolderIcon ActiveX control included with Windows 2000, Windows XP, and Windows 2003. This flaw was published during the Month of Browser Bugs project MoBB 18. This module requires Metasploit: https://metasploit.com/download Current source:...

CVE-2006-6603

Buffer overflow in the YMMAPI.YMailAttach ActiveX control ymmapi.dll before 2005.1.1.4 in Yahoo! Messenger allows remote attackers to execute arbitrary code via a crafted HTML document. NOTE: some details were obtained from third party information...

CVE-2006-6603

Buffer overflow in the YMMAPI.YMailAttach ActiveX control ymmapi.dll before 2005.1.1.4 in Yahoo! Messenger allows remote attackers to execute arbitrary code via a crafted HTML document. NOTE: some details were obtained from third party information...

CVE-2006-6603

CVE-2006-6603 is a buffer overflow in Yahoo! Messenger’s YMMAPI.YMailAttach ActiveX control (ymmapi.dll). A crafted HTML document could trigger code execution with the user’s privileges. The vulnerability affects Yahoo! Messenger prior to version 2005.1.1.4; Yahoo’s security update fixes versions...

AOL ICQ ActiveX DownloadAgent vulnerability

Added: 12/15/2006 CVE: CVE-2006-5650 BID: 20930 OSVDB: 30220 Background America Online AOL ICQ is a widely used program for communicating with other users on the Internet. Problem The ICQPhone.SipxPhoneManager ActiveX control, which is installed with ICQ, includes a function called DownloadAgent...

Yahoo! Messenger YMMAPI.YMailAttach ActiveX (ymmapi.dll) Overflow

The remote host contains a version of the 'YMailAttach' ActiveX control included with Yahoo! Messenger. The version of this ActiveX control on the remote host reportedly has an unspecified buffer overflow. If an attacker can trick a user on the affected host into visiting a specially crafted web...

Yahoo Messenger YMailAttach ActiveX control buffer overflow

Overview The Yahoo Messenger YMailAttach ActiveX control contains a buffer overflow, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Yahoo Messenger is an instant messaging application. Yahoo Messenger includes several ActiveX...