CVE-2006-6236

Adobe Reader/AcroPDF ActiveX in Windows is affected by CVE-2006-6027 and CVE-2006-6236. CVE-2006-6027 describes a memory corruption flaw in the AcroPDF ActiveX control, exploitable via the LoadFile method path, or related argument handling, potentially allowing remote code execution. CVE-2006-623...

Adobe Reader/Acrobat AcroPDF.dll ActiveX控件远程代码执行漏洞

Adobe Reader和Acrobat都是非常流行的PDF文件阅读器。 Adobe Reader和Acrobat的AcroPDF ActiveX控件没有正确处理可能的畸形参数，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 AcroPDF ActiveX控件（AcroPDF.dll）没有正确地处理传送给src、setPageMode、setLayoutMode、setNamedDest和LoadFile方法的畸形参数。如果用户受骗访问了特制的web页面的话，就可能会触发内存破坏，导致执行任意指令。 Adobe Acrobat 7.0.0 - 7.0.8 Adobe Adobe...

Acer LunchApp.APlunch (ActiveX Control) Command Execution Exploit

No description provided by source. !-- Author: Tan Chew Keong Site: http://vuln.sg/ Acer Notebook LunchApp.APlunch ActiveX Control Command Execution Exploit -- html body object classid="clsid:D9998BD0-7957-11D2-8FED-00606730D3AA" id="hahaha" /object script hahaha.Run"c",...

Acer LunchApp.APlunch - ActiveX Control Command Execution

hahaha.Run"c", "\windows\system32\calc.exe", ""; milw0rm.com 2006-11-30...

Integrity Clientless Security (ICS) Update 3.7.116.0

Check Point Integrity ™ Clientless Security ICS protects your Web site by detecting and disabling spyware processes and allowing you to enforce security policies before a user logs onto your network. Using ICS you can prevent users with potentially harmful software from accessing your Web site, a...

Adobe Acrobat AcroPDF ActiveX control fails to properly handle malformed input

Overview The Adobe Acrobat AcroPDF ActiveX control fails to properly handle malformed input to its methods. This could allow an attacker to cause the application using the ActiveX control to crash. Description Adobe Acrobat and Adobe Reader provide an ActiveX control to allow applications such as...

Acer LunchApp.APlunch (ActiveX Control) Command Execution Exploit

Exploit for unknown platform in category remote exploits ================================================================= Acer LunchApp.APlunch ActiveX Control Command Execution Exploit ================================================================= hahaha.Run"c",...

Acer LunchApp.APlunch - ActiveX Control Command Execution

Acer LunchApp.APlunch - ActiveX Control Command Execution hahaha.Run"c", "\windows\system32\calc.exe", ""; milw0rm.com 2006-11-30...

Newtone ImageKit ActiveX buffer overflow vulnerabilities

Overview The Newtone ImageKit ActiveX controls contain several buffer overflow vulnerabilities, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Newtone ImageKit is a set of ActiveX controls that provide image processing, scanning, a...

WinZip FileView ActiveX control unsafe method

Added: 11/27/2006 CVE: CVE-2006-5198 BID: 21060 OSVDB: 30433 Background WinZip includes the FileView ActiveX control which provides a user interface similar to the file view pane in Windows Explorer. Problem The FileView ActiveX control is marked "safe for scripting" and exposes several unsafe...

WinZip FileView ActiveX control unsafe method

Added: 11/27/2006 CVE: CVE-2006-5198 BID: 21060 OSVDB: 30433 Background WinZip includes the FileView ActiveX control which provides a user interface similar to the file view pane in Windows Explorer. Problem The FileView ActiveX control is marked "safe for scripting" and exposes several unsafe...

WinZip FileView ActiveX control unsafe method

Added: 11/27/2006 CVE: CVE-2006-5198 BID: 21060 OSVDB: 30433 Background WinZip includes the FileView ActiveX control which provides a user interface similar to the file view pane in Windows Explorer. Problem The FileView ActiveX control is marked "safe for scripting" and exposes several unsafe...

WinZip FileView ActiveX control unsafe method

Added: 11/27/2006 CVE: CVE-2006-5198 BID: 21060 OSVDB: 30433 Background WinZip includes the FileView ActiveX control which provides a user interface similar to the file view pane in Windows Explorer. Problem The FileView ActiveX control is marked "safe for scripting" and exposes several unsafe...

CVE-2006-6121

Acer Notebook LunchApp.APlunch ActiveX control allows remote attackers to execute arbitrary commands by calling the Run method...

CVE-2006-6121

CVE-2006-6121 affects the Acer LunchApp.APlunch ActiveX control (LunchApp.ocx) shipped with notebooks. The Run() method allows an attacker to execute arbitrary commands on a vulnerable system when a page hosts the control, enabling remote code execution with the user’s privileges. Public document...

CVE-2006-6121

Acer Notebook LunchApp.APlunch ActiveX control allows remote attackers to execute arbitrary commands by calling the Run method...

CVE-2006-6027

Adobe Reader Adobe Acrobat Reader 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument string to the LoadFile method in an AcroPDF ActiveX control...

CVE-2006-6027

CVE-2006-6027 affects Adobe Reader (7.0–7.0.8) via the AcroPDF ActiveX control. The issue is a memory corruption vulnerability triggered by a long argument string passed to LoadFile, allowing remote denial of service and potentially arbitrary code execution. Connected sources corroborate the vuln...

CVE-2006-3890

Technical details for CVE-2006-3890 (affected component, impact, exploit information) are not provided in the connected documents. Monitor for updates for any concrete disclosures or fixes.

Acer LunchApp.APlunch ActiveX控件不安全Run方法漏洞

LunchApp.APlunch是Acer笔记本默认所捆绑的一个ActiveX控件。 LunchApp.APlunch控件在处理用户输入参数时存在漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意程序。 LunchApp.APlunch控件中有一个名为Run的方法，该方式支持Drive、FileName和CmdLine参数，如下所示： uuidD9998BCF-7957-11D2-8FED-00606730D3AA, version1.0, hidden, dual, nonextensible dispinterface APlunch properties: methods:...