6215 matches found
ZDI-10-077: Adobe Download Manager Atlcom.get_atlcom ActiveX Control Remote Code Execution Vulnerability
ZDI-10-077: Adobe Download Manager Atlcom.getatlcom ActiveX Control Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-077 April 21, 2010 -- CVE ID: CVE-2010-1278 -- Affected Vendors: Adobe -- Affected Products: Adobe Download Manager -- TippingPointTM IPS...
Internet Explorer Tabular Data Control DataURL memory corruption
Added: 04/22/2010 CVE: CVE-2010-0805 BID: 39025 OSVDB: 63329 Background Tabular Data Control.aspx is an ActiveX control which can be used to display data from a delimited text file. Problem A memory corruption vulnerability allows command execution when a user loads a web page which invokes Tabul...
EDraw Flowchart ActiveX Control 2.3 - 'EDImage.ocx' Remote Denial of Service (IE)
EDraw Flowchart ActiveX Control 2.3 EDImage.ocx Remote DoS Exploit IE Vendor: EdrawSoft - http://www.edrawsoft.com Platform Used: MS Win XP Pro SP3 en / IE 8.0 CompanyName EDrawSoft FileDescription EDraw Flowchart ActiveX Control Module FileVersion 2, 3, 0, 6 InternalName EDrawSoft LegalCopyright...
EDraw Flowchart ActiveX Control 2.3 - '.edd parsing' Buffer Overflow
!/usr/bin/perl Title: EDraw Flowchart ActiveX Control 2.3 .edd parsing Remote Buffer Overflow PoC Vendor: EdrawSoft Product Web Page: http://www.edrawsoft.com Summary: Do you want to learn how to draw? Now you can online! Learn how to draw like a local application with Edraw Flowchart ActiveX...
CVE-2010-1033
Multiple stack-based buffer overflows in a certain Tetradyne ActiveX control in HP Operations Manager 7.5, 8.10, and 8.16 might allow remote attackers to execute arbitrary code via a long string argument to the 1 LoadFile or 2 SaveFile method, related to srcvw32.dll and srcvw4.dll...
Stack overflow
Multiple stack-based buffer overflows in a certain Tetradyne ActiveX control in HP Operations Manager 7.5, 8.10, and 8.16 might allow remote attackers to execute arbitrary code via a long string argument to the 1 LoadFile or 2 SaveFile method, related to srcvw32.dll and srcvw4.dll...
CVE-2010-1033
Multiple stack-based buffer overflows in a certain Tetradyne ActiveX control in HP Operations Manager 7.5, 8.10, and 8.16 might allow remote attackers to execute arbitrary code via a long string argument to the 1 LoadFile or 2 SaveFile method, related to srcvw32.dll and srcvw4.dll...
CVE-2010-1033
CVE-2010-1033 affects HP Operations Manager for Windows (versions 7.5, 8.10, 8.16) via a vulnerability in the SourceView ActiveX controls (srcvw32.dll and srcvw4.dll). The issue is described as multiple stack-based buffer overflows triggered by long strings passed to LoadFile or SaveFile, enablin...
CVE-2010-1033: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple stack-based buffer overflows in a certain Tetradyne ActiveX control in HP Operations Manager 7.5, 8.10, and 8.16 might allow remote attackers to execute arbitrary code via a long string argument to the 1 LoadFile or 2 SaveFile method, related to srcvw32.dll and srcvw4.dll...
HP Operations Manager SourceView ActiveX LoadFile / SaveFile Stack Overflows
The SourceView ActiveX control, a component of HP Operations Manager, installed on the remote Windows host reportedly is affected by buffer overflows that can be triggered by passing specially crafted Unicode strings to the 'LoadFile' or 'SaveFile' methods. If an attacker can trick a user on the...
Adobe Download Manager Atlcom.get_atlcom ActiveX Control Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Adobe Download Manager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists within the gp.ocx ActiveX control. Th...
AVTECH Software (AVC781Viewer.dll) ActiveX Multiple Remote Vulnerabilities
Summary AVTECH Software, a private corporation founded in 1988, is a computer software and hardware manufacturer specializing in providing Windows NT/2K/XP/2K3 products to monitor multi-OS computers and network issues throughout a department or an entire enterprise. Once issues or events occur,...
ZDI-10-072: Cisco Secure Desktop CSDWebInstaller ActiveX Control Remote Code Execution Vulnerability
ZDI-10-072: Cisco Secure Desktop CSDWebInstaller ActiveX Control Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-072 April 14, 2010 -- Affected Vendors: Cisco -- Affected Products: Cisco Secure Desktop -- TippingPointTM IPS Customer Protection: TippingPoint...
Avtech Software - ActiveX 'avc781viewer.dll' Multiple Vulnerabilities
Title: AVTECH Software AVC781Viewer.dll ActiveX Multiple Remote Vulnerabilities Vendor: AVTECH Software, Inc. Product Web Page: http://www.avtech.com Summary: AVTECH Software, a private corporation founded in 1988, is a computer software and hardware manufacturer specializing in providing Windows...
CVE-2010-0589
The Web Install ActiveX control CSDWebInstaller in Cisco Secure Desktop CSD before 3.5.841 does not properly verify the signatures of downloaded programs, which allows remote attackers to force the download and execution of arbitrary files via a crafted web page, aka Bug ID CSCta25876...
CVE-2010-0589
CVE-2010-0589 affects Cisco Secure Desktop prior to version 3.5.841. The vulnerability lies in the Web Install ActiveX control (CSDWebInstaller) failing to properly verify signatures of downloaded executables, enabling a remote attacker to force a user to download and execute arbitrary files via ...
CVE-2010-0589
The Web Install ActiveX control CSDWebInstaller in Cisco Secure Desktop CSD before 3.5.841 does not properly verify the signatures of downloaded programs, which allows remote attackers to force the download and execution of arbitrary files via a crafted web page, aka Bug ID CSCta25876...
Cisco Releases Security Advisory
Cisco has released a security advisory to address a vulnerability in Cisco Secure Desktop. Cisco Secure Desktop contains a vulnerable ActiveX control that may allow an attacker to execute arbitrary code. US-CERT encourages users and administrators to review Cisco security advisory...
Remote code execution
Unspecified vulnerability in the Windows Media Player ActiveX control in Windows Media Player WMP 9 on Microsoft Windows 2000 SP4 and XP SP2 and SP3 allows remote attackers to execute arbitrary code via crafted media content, aka "Media Player Remote Code Execution Vulnerability."...
