Microsoft Windows drmstor.dll buffer overflow

Buffer overflow in ActiveX element...

Integrity Clientless Security (ICS) Update 3.7.104.0

Check Point Integrity ™ Clientless Security ICS protects your Web site by detecting and disabling spyware processes and allowing you to enforce security policies before a user logs onto your network. Using ICS you can prevent users with potentially harmful software from accessing your Web site, a...

CVE-2006-3888

Buffer overflow in AOL You've Got Pictures YGP Pic Downloader YGPPDownload ActiveX control AOL.PicDownloadCtrl.1, YGPPicDownload.dll, as used in America Online 9.0 Security Edition, allows remote attackers to execute arbitrary code via a long argument to the SetAlbumName method...

CVE-2006-3887

Buffer overflow in AOL You've Got Pictures YGP Screensaver ActiveX control allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2006-3887

Buffer overflow in AOL You've Got Pictures YGP Screensaver ActiveX control allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2006-3887

The CVE-2006-3887 issue affects AOL’s You’ve Got Pictures (YGP) Screensaver ActiveX control. A buffer overflow in the ActiveX control may allow a remote attacker to execute arbitrary code on a vulnerable system when a user is convinced to view a crafted HTML document. This is associated with the ...

CVE-2006-3888

The CVE-2006-3888 issue affects AOL You’ve Got Pictures (YGP) Pic Downloader ActiveX control (AOL.PicDownloadCtrl.1, YGPPicDownload.dll) used in AOL 9.0 Security Edition. A buffer overflow allows remote attackers to execute arbitrary code via a long argument to SetAlbumName. The vulnerability is ...

CVE-2006-4685

The XMLHTTP ActiveX control in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 does not properly handle HTTP server-side redirects, which allows remote user-assisted attackers to access content from other domains...

CVE-2006-4685

The XMLHTTP ActiveX control in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 does not properly handle HTTP server-side redirects, which allows remote user-assisted attackers to access content from other domains...

CVE-2006-4685

Summary (CVE-2006-4685) The XMLHTTP ActiveX control in MSXML/MSXML Core Services (versions 2.6, 3.0–6.0) incorrectly handles server-side redirects, enabling remote, user-assisted access to content from other domains. This information-disclosure vulnerability can let an attacker read cookies or da...

VulnCheck KEV: CVE-2006-3730

Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service crash and execute arbitrary code via a 0x7fffffff argument to the setSlice method on a WebViewFolderIcon ActiveX object, which leads to an invalid memory copy...

MS06-057: Vulnerability in Windows Explorer Could Allow Remote Execution (923191)

The remote host is running a version of Windows that contains a flaw in the Windows Explorer WebViewFolderIcon ActiveX control Web View. An attacker may be able to execute arbitrary code on the remote host by constructing a malicious script and enticing a victim to visit a website or view a...

Microsoft Windows Media Digital Rights Management - ActiveX Control Buffer Overflow (PoC)

Microsoft Windows Media Digital Rights Management - ActiveX Control Buffer Overflow PoC source: https://www.securityfocus.com/bid/26630/info Microsoft Windows Digital Rights Management DRM ActiveX control is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary...

AOL YGP Screensaver ActiveX control buffer overflow

Overview The AOL YGP Screensaver ActiveX control contains a buffer overflow vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The AOL YGP You've Got Pictures Screensaver ActiveX control is a component that comes with AO...

Microsoft Windows Media Digital Rights Management - ActiveX Control Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/26630/info Microsoft Windows Digital Rights Management DRM ActiveX control is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Successfully exploiting this issue allows remote attackers t...

CVE-2006-5157

Format string vulnerability in the ActiveX control ATXCONSOLE.OCX in TrendMicro OfficeScan Corporate Edition OSCE before 7.3 Patch 1 allows remote attackers to execute arbitrary code via format string identifiers in the "Management Console's Remote Client Install name search"...

TrendMicro OfficeScan ActiveX format string

Format string vulnerability in ATXCONSOLE.OCX control library...

[Full-disclosure] Layered Defense Advisory: TrendMicro OfficesScan Corporate Edition Format String Vulnerability

================================================== Layered Defense Research Advisory 1 October 2006 ================================================== 1 Affected Software TrendMicro OfficeScan Corporate Edition 7.3 ================================================== 2 Severity Rating: Medium risk...

[Full-disclosure] Determina zero-day fix for CVE-2006-3730 (WebViewFolderIcon setSlice Integer Overflow)

Determina has released a free, downloadable fix for the WebFolderIcon setSlice vulnerability. This standalone fix for Internet Explorer will prevent this critical vulnerabilty from being exploited until Microsoft is able to issue a patch. Desktop users without proactive protection against...

Internet Explorer WebViewFolderIcon setSlice integer overflow

Added: 09/29/2006 CVE: CVE-2006-3730 BID: 19030 OSVDB: 27110 Background The WebViewFolderIcon ActiveX control provides support for icons in the Windows Explorer Web view. Problem An integer overflow vulnerability in the setSlice method in the WebViewFolderIcon ActiveX control allows remote comman...