Yahoo Messenger WScript.Shell ActiveX control command execution

Added: 07/29/2010 Background Yahoo! Messenger is an instant messaging application. It includes the WScript.Shell ActiveX control. Problem The Execute method of the WScript.Shell ActiveX control allows command execution when a malicious web page is loaded in Internet Explorer. Resolution Set the...

Hyleos ChemView ActiveX Control Stack Buffer Overflow

This module exploits a stack-based buffer overflow within version 1.9.5.1 of Hyleos ChemView HyleosChemView.ocx. By calling the 'SaveAsMolFile' or 'ReadMolFile' methods with an overly long first argument, an attacker can overrun a buffer and execute arbitrary code. This module requires Metasploit...

IE 7.0 - DoS Microsoft Clip Organizer Multiple Insecure ActiveX Control

No description provided by source. IE 7.0 - DoS Microsoft Clip Organizer Multiple Insecure ActiveX Control Date: 19th july 2010 Author: Dinesh Arora & Beenu Arora Affected / Tested Version of IE : 7.0 / WinXP SP3 / MS Office 2007 contact: [email protected], [email protected] Greetz to...

Microsoft Internet Explorer 7 - Microsoft Clip Organizer Multiple Insecure ActiveX Control Denial of Service Vulnerabilities

IE 7.0 - DoS Microsoft Clip Organizer Multiple Insecure ActiveX Control Date: 19th july 2010 Author: Dinesh Arora & Beenu Arora Affected / Tested Version of IE : 7.0 / WinXP SP3 / MS Office 2007 contact: [email protected], [email protected] Greetz to :b0nd, Fbih2s,r45c4l,Charles...

Microsoft Office Web Components (OWC) Spreadsheet - msDataSourceObject Memory Corruption (MS09-043) (Metasploit)

$Id: ms09043owcmsdso.rb 9893 2010-07-20 23:28:47Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

Secunia Research: GIGABYTE Dldrv2 ActiveX Control Array Indexing Vulnerability

====================================================================== Secunia Research 15/07/2010 - GIGABYTE Dldrv2 ActiveX Control Array Indexing Vulnerability - ====================================================================== Table of Contents Affected...

Viscom Software Movie Player Pro ActiveX Control DrawText Buffer Overflow

Added: 07/16/2010 CVE: CVE-2010-0356 BID: 40719 OSVDB: 61634 Background Viscom Movie Player Pro SDK ActiveX is a software development kit for Microsoft Windows environments to incorporate an advanced media player with overlay text and images. Problem The MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX...

Viscom Software Movie Player Pro ActiveX Control DrawText Buffer Overflow

Added: 07/16/2010 CVE: CVE-2010-0356 BID: 40719 OSVDB: 61634 Background Viscom Movie Player Pro SDK ActiveX is a software development kit for Microsoft Windows environments to incorporate an advanced media player with overlay text and images. Problem The MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX...

FathFTP ActiveX Control Multiple Buffer Overflow Vulnerabilities

This host is installed with FathFTP and is prone to multiple buffer overflow vulnerabilities. OpenVAS Vulnerability Test $Id: gbfathftpclientmultbofvuln.nasl 5306 2017-02-16 09:00:16Z teissa $ FathFTP ActiveX Control Multiple Buffer Overflow Vulnerabilities Authors: Antu Sanadi Copyright: Copyrig...

Viscom Software Movie Player Pro ActiveX Control DrawText Buffer Overflow

Added: 07/16/2010 CVE: CVE-2010-0356 BID: 40719 OSVDB: 61634 Background Viscom Movie Player Pro SDK ActiveX is a software development kit for Microsoft Windows environments to incorporate an advanced media player with overlay text and images. Problem The MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX...

Viscom Software Movie Player Pro ActiveX Control DrawText Buffer Overflow

Added: 07/16/2010 CVE: CVE-2010-0356 BID: 40719 OSVDB: 61634 Background Viscom Movie Player Pro SDK ActiveX is a software development kit for Microsoft Windows environments to incorporate an advanced media player with overlay text and images. Problem The MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX...

FathFTP ActiveX Control Multiple Buffer Overflow Vulnerabilities

FathFTP is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Internet Explorer - Daxctle.OCX KeyFrame Method Heap Buffer Overflow (MS06-067) (Metasploit)

$Id: ms06067keyframe.rb 9842 2010-07-16 02:33:25Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

Memory corruption

The FieldList ActiveX control in the Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 does not properly interact with the memory-access approach used by Internet Explorer and Office during instantiation, which allows remote attackers to execute arbitrary code or...

Microsoft Office Access FieldList ActiveX控件实例化内存破坏漏洞（MS10-044）

BUGTRAQ ID: 41444 CVE ID: CVE-2010-1881 Microsoft Access是微软Office套件中的关系数据库管理系统。 Microsoft Access实例化FieldList ActiveX控件的未初始化变量时存在内存破坏漏洞，成功利用此漏洞的攻击者可能以登录用户的身份运行任意代码。 Microsoft Access 2003 SP3 临时解决方法： 禁止在Internet Explorer中运行COM对象。要为值为53230327-172B-11D0-AD40-00A0C90DC8D9的CLSID设置 kill...

CVE-2010-0814

CVE-2010-0814 involves remote code execution in Microsoft Office Access ActiveX controls. The vulnerability arises in the ACCWIZ.dll-based Access Wizard Controls (including ImexGrid and FieldList) when Internet Explorer instantiates multiple Access ActiveX controls, interacting with memory alloca...

CVE-2010-1881

The FieldList ActiveX control in the Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 does not properly interact with the memory-access approach used by Internet Explorer and Office during instantiation, which allows remote attackers to execute arbitrary code or...

ZDI-10-117: Microsoft Office Access AccWizObjects ActiveX Control Uninitialized Imports Remote Code Execution Vulnerability

ZDI-10-117: Microsoft Office Access AccWizObjects ActiveX Control Uninitialized Imports Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-117 July 13, 2010 -- CVE ID: CVE-2010-0814 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Microsoft --...

Microsoft Office Access AccWizObjects ActiveX Control Uninitialized Imports Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office. User interaction is required in that a user must browse to a malicious website. The specific flaws exists in the instantiation of three specific ActiveX controls. The combination ...

Microsoft Access 'AccWizObjects' ActiveX Control Remote Code Execution Vulnerability

Description Microsoft Access is prone to a remote code-execution vulnerability that affects the 'AccWizObjects' ActiveX control. An attacker can exploit this issue by enticing an unsuspecting user to view a malicious webpage. Successful exploits will allow the attacker to execute arbitrary code...