CVE-2009-4225

Stack-based buffer overflow in the PestPatrol ActiveX control ppctl.dll 5.6.7.9 in CA eTrust PestPatrol allows remote attackers to execute arbitrary code via a long argument to the Initialize method...

Stack overflow

Stack-based buffer overflow in the PestPatrol ActiveX control ppctl.dll 5.6.7.9 in CA eTrust PestPatrol allows remote attackers to execute arbitrary code via a long argument to the Initialize method...

CVE-2009-4225

Stack-based buffer overflow in the PestPatrol ActiveX control ppctl.dll 5.6.7.9 in CA eTrust PestPatrol allows remote attackers to execute arbitrary code via a long argument to the Initialize method...

Yahoo! Messenger 'YahooBridgeLib.dll' ActiveX Control DoS Vulnerability

Yahoo! Messenger is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-4225: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the PestPatrol ActiveX control ppctl.dll 5.6.7.9 in CA eTrust PestPatrol allows remote attackers to execute arbitrary code via a long argument to the Initialize method...

Novell iPrint Client ActiveX Control target-frame Buffer Overflow

This module exploits a stack buffer overflow in Novell iPrint Client 5.30. When passing an overly long string via the "target-frame" parameter to ienipp.ocx an attacker can execute arbitrary code. NOTE: The "operation" variable must be set to a valid command in order to reach this vulnerability...

Novell iPrint Client ActiveX Control Date/Time Buffer Overflow

This module exploits a stack buffer overflow in Novell iPrint Client 5.30. When passing a specially crafted date/time string via certain parameters to ienipp.ocx an attacker can execute arbitrary code. NOTE: The "operation" variable must be set to a valid command in order to reach this...

Stack overflow

Stack-based buffer overflow in the MYACTIVEX.MyActiveXCtrl.1 ActiveX control in MyActiveX.ocx 1.4.8.0 in Haihaisoft Universal Player allows remote attackers to execute arbitrary code via a long URL property value. NOTE: some of these details are obtained from third party information...

CVE-2009-4219

CVE-2009-4219 concerns Haihaisoft Universal Player’s MyActiveX.ocx 1.4.8.0, specifically the MYACTIVEX.MyActiveXCtrl.1 ActiveX control. The connected PT-SECURITY entry documents a stack-based buffer overflow that can be triggered by a long URL property value, enabling remote arbitrary code execut...

CVE-2009-4219

Stack-based buffer overflow in the MYACTIVEX.MyActiveXCtrl.1 ActiveX control in MyActiveX.ocx 1.4.8.0 in Haihaisoft Universal Player allows remote attackers to execute arbitrary code via a long URL property value. NOTE: some of these details are obtained from third party information...

PT-2009-6381 · Haihaisoft · Haihaisoft Universal Player

Name of the Vulnerable Software and Affected Versions: Haihaisoft Universal Player MyActiveX.ocx version 1.4.8.0 Description: The issue is related to a stack-based buffer overflow in the MYACTIVEX.MyActiveXCtrl.1 ActiveX control. This can be exploited by remote attackers to execute arbitrary code...

IBM Access Support ActiveX GetXMLValue Method Buffer Overflow (CVE-2009-0215)

IBM Access Support is part of a suite of several tools used by IBM to provide support to its customers having IBM/Lenovo Laptops and Desktop systems. This product is used by the vendor to remotely examine the product and collect information in order to address any problems or distribute updates. ...

Design/Logic Flaw

DAZ Studio 2.3.3.161, 2.3.3.163, and 3.0.1.135 allows remote attackers to execute arbitrary JavaScript code via a 1 .ds, 2 .dsa, 3 .dse, or 4 .dsb file, as demonstrated by code that loads the WScript.Shell ActiveX control, related to a "script injection vulnerability."...

CVE-2009-4148: Improper Control of Generation of Code

DAZ Studio 2.3.3.161, 2.3.3.163, and 3.0.1.135 allows remote attackers to execute arbitrary JavaScript code via a 1 .ds, 2 .dsa, 3 .dse, or 4 .dsb file, as demonstrated by code that loads the WScript.Shell ActiveX control, related to a "script injection vulnerability."...

MS Internet Explorer 'Style' Object Remote Code Execution Vulnerability

This host is missing a critical security update according to Microsoft Bulletin MS09-072. OpenVAS Vulnerability Test $Id: gbmsiestyleobjectremotecodeexecvuln.nasl 6527 2017-07-05 05:56:34Z cfischer $ Description: MS Internet Explorer 'Style' Object Remote Code Execution Vulnerability Authors: Suj...

Microsoft Internet Explorer 'Style' Object RCE Vulnerability

This host is missing a critical security update according to Microsoft Bulletin MS09-072. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2009-1567

Multiple stack-based buffer overflows in the Lateral Arts Photobox uploader ActiveX control 1.x before 1.3, and 2.2.0.6, allow remote attackers to execute arbitrary code via a long URL string for the 1 LogURL, 2 ConnectURL, 3 SkinURL, 4 AlbumCreateURL, 5 ErrorURL, or 6 httpsinglehost property val...

CVE-2009-1567

Multiple stack-based buffer overflows in the Lateral Arts Photobox uploader ActiveX control 1.x before 1.3, and 2.2.0.6, allow remote attackers to execute arbitrary code via a long URL string for the 1 LogURL, 2 ConnectURL, 3 SkinURL, 4 AlbumCreateURL, 5 ErrorURL, or 6 httpsinglehost property val...

CVE-2009-1567

The CVE-2009-1567 issue affects Lateral Arts Photobox Uploader ActiveX Control (2.x and 1.x up to 1.3). It is a stack-based buffer overflow triggered by overly long values assigned to URL-related properties (LogURL, ConnectURL, SkinURL, AlbumCreateURL, ErrorURL, httpsinglehost), allowing remote c...

CVE-2009-1567: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in the Lateral Arts Photobox uploader ActiveX control 1.x before 1.3, and 2.2.0.6, allow remote attackers to execute arbitrary code via a long URL string for the 1 LogURL, 2 ConnectURL, 3 SkinURL, 4 AlbumCreateURL, 5 ErrorURL, or 6 httpsinglehost property val...