CVE-2006-5501

Buffer overflow in the AOL.PicDownloadCtrl.1 ActiveX control YGPPicDownload.dll 9.2.3.0 in America Online AOL 9.0 Security Edition allows remote attackers to execute arbitrary code via the downloadFileDirectory property, a different vulnerability than CVE-2006-5502...

CVE-2006-5502

CVE-2006-5502 refers to a heap-based buffer overflow in the AOL.PicDownloadCtrl.1 ActiveX control (YGPPicDownload.dll) 9.2.3.0 included with AOL 9.0 Security Edition. The vulnerability allows remote attackers to execute arbitrary code via the AddPictureNoAlbum method. Root cause described as a he...

Microsoft IE WebViewFolderIcon远程整数溢出漏洞(MS06-057)

Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer在处理畸形的ActiveX对象调用方式时存在整数溢出漏洞，远程攻击者可能利用此漏洞导致浏览器崩溃或执行任意指令。 如果攻击者能够向WebViewFolderIcon控件的setSlice方法传送0x7fffffff参数的话，可能导致浏览器崩溃或执行任意指令。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁：...

Retro64 CR64Loader ActiveX远程缓冲区溢出漏洞

CR64Loader对象是Retro64提供的一个ActiveX控件，用于提供在线游戏。 CR64Loader的实现上存在缓冲区溢出漏洞，如果用户受骗访问了恶意的WEB页面的话，就会触发这个漏洞，导致执行任意指令。 Retro64 CR64Loader 临时解决方法： 为以下CLSID设置kill bit： 288C5F13-7E52-4ADA-A32E-F5BF9D125F99 厂商补丁： Retro64 ------- 我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://retro64.com/...

Microsoft XML核心服务信息泄露漏洞（MS06-061）

Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft XML核心服务中的XMLHTTP ActiveX控件没有正确地解析HTTP服务器端重定向，远程攻击者可能利用此漏洞非授权访问用户信息。 攻击者可以通过构建特制网页来利用此漏洞，如果用户访问该网页或单击特制电子邮件中的链接，就可能导致信息泄露。成功利用这个漏洞的攻击者可能以在客户端浏览Web用户的权限访问其他域的内容。不过，要利用此漏洞，需要进行用户交互。 Microsoft Office 2003 Service Pack 2 Microsoft Office 2003 Service Pack 1...

MS Internet Explorer WebViewFolderIcon setSlice() Overflow E

No description provided by source. This module is part of the metasploit framework3 svn co http://metasploit.com/svn/framework3/trunk/ require 'msf/core' module Msf class Exploits::Windows::Browser::WebViewSetSlice Msf::Exploit::Remote include Exploit::Remote::HttpServer::Html def initializeinfo ...

CVE-2006-5448

The drmstor.dll ActiveX object in Microsoft Windows Digital Rights Management System DRM allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long parameter to the StoreLicense function, which triggers "memory corruption" and possibly a buffer...

CVE-2006-5403

Stack-based buffer overflow in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via...

CVE-2006-5404

Unspecified vulnerability in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, allows user-assisted remote attackers to obtain sensitive information via unspecified vectors...

CVE-2006-5404

Unspecified vulnerability in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, allows user-assisted remote attackers to obtain sensitive information via unspecified vectors...

CVE-2006-5404

CVE-2006-5404 involves an unspecified vulnerability in an ActiveX control used by the Symantec Automated Support Assistant, deployed in Norton AntiVirus, Internet Security, and System Works 2005/2006. The vulnerability allows user‑assisted remote attackers to obtain sensitive information via unsp...

CVE-2006-5403

Stack-based buffer overflow in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via...

CVE-2006-5403

The CVE-2006-5403 issue is a stack-based buffer overflow in the Symantec Automated Support Assistant ActiveX control (used in Norton Antivirus/Internet Security/System Works). The CERT entry notes the vulnerable ActiveX control is locked to the symantec.com domain, requiring a user to view a craf...

Internet Explorer SetSlice Method Buffer Overflow (MS06-057; CVE-2006-3730)

Microsoft Internet Explorer is the most widely used Internet browser. The WebViewFolderIcon object is an ActiveX control that comes with Microsoft Windows. Provided by the file webvw.dll, this control provides support functionality for icons in the Windows Explorer Web view. A vulnerability in...

Internet Explorer SetSlice Method Buffer Overflow (MS06-057; CVE-2006-3730)

Microsoft Internet Explorer is the most widely used Internet browser. The WebViewFolderIcon object is an ActiveX control that comes with Microsoft Windows. Provided by the file webvw.dll, this control provides support functionality for icons in the Windows Explorer Web view. A vulnerability in...

AOL YGPPDownload ActiveX buffer overflow

Buffer overflow in SetAlbumName method of YGPPicDownload.dll AOL.PicDownloadCtrl.1...

Update Protection against Microsoft Internet Explorer DirectAnimation Path (daxctle.ocx) Vulnerabilities (MS06-067)

Microsoft Internet Explorer IE contains heap overflow vulnerabilities. The vulnerabilities exist in Microsoft DirectAnimation Path ActiveX Control DirectAnimation.PathControl that is included in the COM object daxctle.ocx. DirectAnimation is a component of the DirectX family of APIs that provide...

Microsoft XML Core Services XMLHTTP ActiveX control fails to properly interpret certain HTTP operations

Overview The Microsoft XML Core Services XMLHTTP ActiveX control fails to properly interpret certain HTTP operations. An attacker who exploits this vulnerability may be able to read cookies or view other sensitive data from a vulnerable system. Description Microsoft XML Core Services MSXML allow...

Microsoft Windows WebViewFolderIcon ActiveX (integer overflow)

Integer overflow can be used for hidden malware installation...

Trend Micro OfficeScan Management Console ActiveX control format string vulnerability

Overview The Trend Micro OfficeScan Management Console ActiveX control, AtxConsole, contains a format string vulnerability. This vulnerability may be exploited by an attacker to execute arbitrary code, or create a denial-of-service condition. Description Trend Micro's OfficeScan product includes ...