Stack overflow

Multiple stack-based buffer overflows in the Zoomify Viewer ActiveX control in ZActiveX.dll might allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-3162

Buffer overflow in the NotSafe function in the idaiehlp ActiveX control in idaiehlp.dll 1.9.1.74 in Internet Download Accelerator ida 5.2 allows remote attackers to cause a denial of service Internet Explorer crash via a long argument...

CVE-2007-3168

A certain ActiveX control in the EDraw Office Viewer Component edrawofficeviewer.ocx 4.0.5.20, and other versions before 5.0, allows remote attackers to delete arbitrary files via the DeleteLocalFile method...

CVE-2007-3169

Buffer overflow in a certain ActiveX control in the EDraw Office Viewer Component edrawofficeviewer.ocx 4.0.5.20, and other versions before 5.0, allows remote attackers to cause a denial of service Internet Explorer 7 crash or execute arbitrary code via a long first argument to the HttpDownloadFi...

CVE-2007-2920

Multiple stack-based buffer overflows in the Zoomify Viewer ActiveX control in ZActiveX.dll might allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-3167

CVE-2007-3167 describes a stack-based buffer overflow in the Vivotek Motion JPEG ActiveX control (MjpegControl) within MjpegDecoder.dll version 2.0.0.13. The vulnerability arises from handling a very long PtzUrl property value, which can overflow a stack buffer and allow a remote attacker to exec...

CVE-2007-3169

Buffer overflow in a certain ActiveX control in the EDraw Office Viewer Component edrawofficeviewer.ocx 4.0.5.20, and other versions before 5.0, allows remote attackers to cause a denial of service Internet Explorer 7 crash or execute arbitrary code via a long first argument to the HttpDownloadFi...

CVE-2007-3168

The Office Viewer Component ActiveX control (edrawofficeviewer.ocx) in EDraw Office Viewer Component versions 4.0.5.20 and earlier than 5.0 is affected. The CVE-2007-3168 entry describes a vulnerability where remote attackers can delete arbitrary files via the DeleteLocalFile method. The connecte...

CVE-2007-3167

Stack-based buffer overflow in the Vivotek Motion Jpeg ActiveX control aka MjpegControl in MjpegDecoder.dll 2.0.0.13 allows remote attackers to execute arbitrary code via a long PtzUrl property value...

CVE-2007-3168

A certain ActiveX control in the EDraw Office Viewer Component edrawofficeviewer.ocx 4.0.5.20, and other versions before 5.0, allows remote attackers to delete arbitrary files via the DeleteLocalFile method...

CVE-2007-3162

Buffer overflow in the NotSafe function in the idaiehlp ActiveX control in idaiehlp.dll 1.9.1.74 in Internet Download Accelerator ida 5.2 allows remote attackers to cause a denial of service Internet Explorer crash via a long argument...

CVE-2007-3162

CVE-2007-3162: Buffer overflow in the NotSafe function of idaiehlp.dll (ActiveX control idaiehlp.dll 1.9.1.74) in Internet Download Accelerator (ida) 5.2 allows remote attackers to crash Internet Explorer via a long argument. Root cause described as a buffer overflow in NotSafe; exploitation deta...

CVE-2007-3169

EDraw Office Viewer Component (officeviewer.ocx) ActiveX controls are affected across multiple CVEs (e.g., CVE-2007-3169, CVE-2007-4821, CVE-2007-5257). Affected versions include Office Viewer Component 5.0 and earlier for HttpDownloadFile/HttpDownloadFileToTempDir and 5.3.220.1 and earlier for F...

CVE-2007-2920

CVE-2007-2920 concerns multiple stack-based buffer overflows in the Zoomify Viewer ActiveX control (ZActiveX.dll). The Nessus/NASL entry and CERT briefing confirm that remote attackers could potentially execute arbitrary code by tempting a user to visit a crafted page, with exploitation tied to t...

Buffer overflow

Buffer overflow in the Yahoo! Webcam Viewer ActiveX control in ywcvwr.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the receive method...

CVE-2007-3148

Buffer overflow in the Yahoo! Webcam Viewer ActiveX control in ywcvwr.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the receive method...

CVE-2007-3147

CVE-2007-3147 describes a buffer overflow in Yahoo! Messenger 8.1.0.249’s Webcam ActiveX control (ywcupl.dll v2.0.1.4). The vulnerability occurs when a long value is sent via the Server() method to the Send() method, allowing remote arbitrary code execution. Connected sources also reference buffe...

CVE-2007-3148

Buffer overflow in the Yahoo! Webcam Viewer ActiveX control in ywcvwr.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the receive method...

CVE-2007-3147

Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the send method. NOTE: some of these details are obtained from third party information...

Zoomify Viewer ActiveX control multiple stack buffer overflows

Overview The Zoomify Viewer ActiveX control contains multiple stack buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Zoomify provides software to incorporate zoomable images into web sites. One of the Zoomify produc...