Memory corruption

The FieldList ActiveX control in the Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 does not properly interact with the memory-access approach used by Internet Explorer and Office during instantiation, which allows remote attackers to execute arbitrary code or...

Microsoft Office Access FieldList ActiveX控件实例化内存破坏漏洞（MS10-044）

BUGTRAQ ID: 41444 CVE ID: CVE-2010-1881 Microsoft Access是微软Office套件中的关系数据库管理系统。 Microsoft Access实例化FieldList ActiveX控件的未初始化变量时存在内存破坏漏洞，成功利用此漏洞的攻击者可能以登录用户的身份运行任意代码。 Microsoft Access 2003 SP3 临时解决方法： 禁止在Internet Explorer中运行COM对象。要为值为53230327-172B-11D0-AD40-00A0C90DC8D9的CLSID设置 kill...

CVE-2010-0814

CVE-2010-0814 involves remote code execution in Microsoft Office Access ActiveX controls. The vulnerability arises in the ACCWIZ.dll-based Access Wizard Controls (including ImexGrid and FieldList) when Internet Explorer instantiates multiple Access ActiveX controls, interacting with memory alloca...

CVE-2010-1881

The FieldList ActiveX control in the Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 does not properly interact with the memory-access approach used by Internet Explorer and Office during instantiation, which allows remote attackers to execute arbitrary code or...

CVE-2010-1881: Improper Control of Generation of Code

The FieldList ActiveX control in the Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 does not properly interact with the memory-access approach used by Internet Explorer and Office during instantiation, which allows remote attackers to execute arbitrary code or...

ZDI-10-117: Microsoft Office Access AccWizObjects ActiveX Control Uninitialized Imports Remote Code Execution Vulnerability

ZDI-10-117: Microsoft Office Access AccWizObjects ActiveX Control Uninitialized Imports Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-117 July 13, 2010 -- CVE ID: CVE-2010-0814 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Microsoft --...

Microsoft Access 'AccWizObjects' ActiveX Control Remote Code Execution Vulnerability

Description Microsoft Access is prone to a remote code-execution vulnerability that affects the 'AccWizObjects' ActiveX control. An attacker can exploit this issue by enticing an unsuspecting user to view a malicious webpage. Successful exploits will allow the attacker to execute arbitrary code...

Microsoft Office Access AccWizObjects ActiveX Control Uninitialized Imports Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office. User interaction is required in that a user must browse to a malicious website. The specific flaws exists in the instantiation of three specific ActiveX controls. The combination ...

Buffer overflow

Multiple buffer overflows in the FathFTP ActiveX control 1.7 allow remote attackers to execute arbitrary code via 1 the GetFromURL member or 2 a long argument to the RasIsConnected method...

CVE-2010-2701

CVE-2010-2701 affects FathFTP ActiveX Control 1.7. Multiple buffer overflows in GetFromURL and RasIsConnected allow remote code execution. Public sources show exploits and references (e.g., xforce/Exploit-DB). OpenVAS entries note Prone to multiple buffer overflows; no vendor patch is provided in...

CVE-2010-2701: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in the FathFTP ActiveX control 1.7 allow remote attackers to execute arbitrary code via 1 the GetFromURL member or 2 a long argument to the RasIsConnected method...

McAfee Subscription Manager - Remote Stack Buffer Overflow (Metasploit)

$Id: mcafeemcsubmgrvsprintf.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft Internet Explorer - XML Core Services HTTP Request Handling (MS06-071) (Metasploit)

$Id: ms06071xmlcore.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Microsoft Internet Explorer - WebViewFolderIcon setSlice() Overflow (MS06-057) (Metasploit) (2)

$Id: ms06057webviewsetslice.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

NSOADV-2010-009: AnNoText Third-Party ActiveX Control file overwrite vulnerability

-------------------------- NSOADV-2010-009 --------------------------- AnNoText Third-Party ActiveX Control file overwrite vulnerability 111101111 11111 00110 00110001111 111111 01 01 1 11111011111111 11111 0 11 01 0 11 1 1 111011001 11111111101 1 11 0110111 1 1111101111 1001 0 1 10 11 0 10 11...

NSOADV-2010-008: AnNoText Third-Party ActiveX Control Buffer Overflow

-------------------------- NSOADV-2010-008 --------------------------- AnNoText Third-Party ActiveX Control Buffer Overflow 111101111 11111 00110 00110001111 111111 01 01 1 11111011111111 11111 0 11 01 0 11 1 1 111011001 11111111101 1 11 0110111 1 1111101111 1001 0 1 10 11 0 10 11 1111111 1 111...

CVE-2010-2305

Buffer overflow in an ActiveX control in SSHelper.dll for Symantec Sygate Personal Firewall 5.6 build 2808 allows remote attackers to execute arbitrary code via a long third argument to the SetRegString method...

Buffer overflow

Buffer overflow in an ActiveX control in SSHelper.dll for Symantec Sygate Personal Firewall 5.6 build 2808 allows remote attackers to execute arbitrary code via a long third argument to the SetRegString method...

CVE-2010-2305

The CVE-2010-2305 issue affects Symantec Sygate Personal Firewall 5.6 (build 2808). A flaw exists in the SSHelper.dll ActiveX control where a buffer overflow is triggered by passing a long third argument to the SetRegString method, allowing remote code execution. The vulnerability is tied to an A...

CVE-2010-2305: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in an ActiveX control in SSHelper.dll for Symantec Sygate Personal Firewall 5.6 build 2808 allows remote attackers to execute arbitrary code via a long third argument to the SetRegString method...