CVE-2010-0252

The Microsoft Data Analyzer ActiveX control aka the Office Excel ActiveX control for Data Analysis in max3activex.dll in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remot...

Security feature bypass

The Microsoft Data Analyzer ActiveX control aka the Office Excel ActiveX control for Data Analysis in max3activex.dll in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remot...

CVE-2010-0252

The Microsoft Data Analyzer ActiveX control aka the Office Excel ActiveX control for Data Analysis in max3activex.dll in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remot...

CVE-2010-0252: Improper Control of Generation of Code

The Microsoft Data Analyzer ActiveX control aka the Office Excel ActiveX control for Data Analysis in max3activex.dll in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remot...

Microsoft Data Analyzer ActiveX Control memory corruption

No description provided...

PT-2010-2051 · Microsoft · Windows Server 2003 +7

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2 Description: A remote code execution issue...

Hyleos ChemView ActiveX Control Stack Buffer Overflow

This module exploits a stack-based buffer overflow within version 1.9.5.1 of Hyleos ChemView HyleosChemView.ocx. By calling the 'SaveAsMolFile' or 'ReadMolFile' methods with an overly long first argument, an attacker can overrun a buffer and execute arbitrary code. Module Options msf use...

Microsoft Data Analyzer ActiveX Control Vulnerability (978262)

This host is missing a critical security update according to Microsoft Bulletin MS10-008. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Data Analyzer 'max3activex.dll' ActiveX Control Remote Code Execution Vulnerability

Description The Microsoft Data Analyzer is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user to view a malicious webpage. Successful exploits will allow the attacker to execute arbitrary code within the context of the application...

Microsoft Data Analyzer ActiveX Control Remote Code Execution (MS10-008; CVE-2010-0252)

Microsoft Data Analyzer is a data analysis software for Microsoft Office XP. Microsoft Data Analyzer allows analyzing and visualizing data and data trends, and is integrated with SQL Server Analysis Services. Reports and graphs generated could be saved as Excel or PowerPoint files. A remote code...

MS10-008: Cumulative Security Update of ActiveX Kill Bits (978262)

The Microsoft Data Analyzer ActiveX control has a remote code execution vulnerability. The system may also have one or more vulnerable third-party ActiveX controls installed. A remote attacker could exploit these issues by tricking a user into requesting a maliciously crafted web page, resulting ...

Novell iPrint Client ActiveX Control Date/Time Buffer Overflow

$Id: novelliprintdatetime.rb 8339 2010-02-01 03:56:02Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

TVUPlayer 2.4.4.9beta1 - PlayerOcx.ocx ActiveX Control Arbitrary File Overwrite

TVUPlayer 2.4.4.9beta1 - PlayerOcx.ocx ActiveX Control Arbitrary File Overwrite source: https://www.securityfocus.com/bid/39956/info TVUPlayer ActiveX control is prone to a vulnerability that lets attackers overwrite arbitrary local files on the victim's computer in the context of the vulnerable...

TVUPlayer 2.4.4.9beta1 - 'PlayerOcx.ocx' ActiveX Control Arbitrary File Overwrite

source: https://www.securityfocus.com/bid/39956/info TVUPlayer ActiveX control is prone to a vulnerability that lets attackers overwrite arbitrary local files on the victim's computer in the context of the vulnerable application, typically Internet Explorer, using the ActiveX control. TVUPlayer...

Novell iPrint Client ienipp.ocx target-frame Stack Buffer Overflow (CVE-2009-1568)

Novell iPrint Client is an application that allows users to install and manage printers, or submit print jobs from a web browser. Novell iPrint Client is bundled with an ActiveX control that implements various functions. A buffer overflow vulnerability exists in Novell iPrint Client. The...

EMC Captiva PixTools Distributed Imaging ActiveX crafted web page

EMC Captiva PixTools is a suite of software developer toolkits that provides image scanning, viewing, and processing functionality. This software application can be integrated into existing applications serving as either a centralized or distributed document capture module. EMC Captiva PixTools...

Novell iPrint Client ienipp.ocx persistence parameter parsing buffer overflow

Added: 01/28/2010 CVE: CVE-2009-1569 BID: 37242 OSVDB: 60804 Background Novell iPrint is an application which allows users to install and manage printers. Novell iPrint installs the Novell iPrint Control ActiveX control named ienipp.ocx. Problem A buffer overflow in ienipp.ocx allows command...

Novell iPrint Client ienipp.ocx persistence parameter parsing buffer overflow

Added: 01/28/2010 CVE: CVE-2009-1569 BID: 37242 OSVDB: 60804 Background Novell iPrint is an application which allows users to install and manage printers. Novell iPrint installs the Novell iPrint Control ActiveX control named ienipp.ocx. Problem A buffer overflow in ienipp.ocx allows command...

Microsoft Agent Crafted URL Stack Buffer Overflow (MS07-051; CVE-2007-3040)

The Microsoft Agent ActiveX control, exposes a set of methods and properties that can be used for scripting in HTML pages. There exists a buffer overflow vulnerability in Microsoft Windows Agent application. The flaw is due to wrongfully copying an overly large string to a fixed-size stack buffer...

Novell iPrint Client ienipp.ocx persistence parameter parsing buffer overflow

Added: 01/28/2010 CVE: CVE-2009-1569 BID: 37242 OSVDB: 60804 Background Novell iPrint is an application which allows users to install and manage printers. Novell iPrint installs the Novell iPrint Control ActiveX control named ienipp.ocx. Problem A buffer overflow in ienipp.ocx allows command...