CVE-2009-1517

Multiple insecure method vulnerabilities in the Symantec.EasySetup.1 ActiveX control in EasySetupInt.dll 14.0.4.30167 in the EasySetup wizard in Symantec Norton Ghost 14.0 allow remote attackers to cause a denial of service browser crash and possibly execute arbitrary code via unspecified input t...

CVE-2009-1516

CVE-2009-1516 affects IceWarp Merak Mail Server 9.4.1, where the IceWarpServer.APIObject ActiveX control (api.dll) is vulnerable to a stack-based buffer overflow via a large value in the second argument of Base64FileEncode. This can lead to arbitrary code execution under context-dependent conditi...

CVE-2009-1516

Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp Merak Mail Server 9.4.1 might allow context-dependent attackers to execute arbitrary code via a large value in the second argument to the Base64FileEncode method, as possibly demonstrated by a web...

Symantec Fax Viewer Control ActiveX Control AppendFax Overflow

The version of the Symantec Fax Viewer Control ActiveX control, a component included with Symantec Winfax Pro and installed on the remote Windows host, reportedly contains a stack-based buffer overflow that can be triggered by calling the 'AppendFax' method with an overly long argument. If an...

Stack overflow

Multiple stack-based buffer overflows in the Danske Bank e-Sec Control Module ActiveX control DanskeSikker.ocx 3.1.0.48, and possibly earlier versions, allow remote attackers to execute arbitrary code via long arguments to unspecified methods, which are not properly handled by a logging function...

CVE-2008-1107

Multiple stack-based buffer overflows in the Danske Bank e-Sec Control Module ActiveX control DanskeSikker.ocx 3.1.0.48, and possibly earlier versions, allow remote attackers to execute arbitrary code via long arguments to unspecified methods, which are not properly handled by a logging function...

CVE-2008-1107

CVE-2008-1107 affects Danske Bank Danske e-Sec Control Module ActiveX control DanskeSikker.ocx 3.1.0.48 (and possibly earlier). The vulnerability is a boundary error in the error-logging function of DanskeSikker.ocx that can be triggered by overly long inputs to certain methods during initialisat...

CVE-2008-4830

Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 KWEDIT.DLL 6400.1.1.41 and 7.10 Patch 5 KWEDIT.DLL 7100.1.1.43 allows remote attackers to 1 overwrite arbitrary files via the SaveDocumentAs method or 2 read or execute arbitrary files via the OpenDocument method...

CVE-2007-2238

Multiple stack-based buffer overflows in the Whale Client Components ActiveX control WhlMgr.dll, as used in Microsoft Intelligent Application Gateway IAG before 3.7 SP2, allow remote attackers to execute arbitrary code via long arguments to the 1 CheckForUpdates or 2 UpdateComponents methods...

Stack overflow

Multiple stack-based buffer overflows in the Whale Client Components ActiveX control WhlMgr.dll, as used in Microsoft Intelligent Application Gateway IAG before 3.7 SP2, allow remote attackers to execute arbitrary code via long arguments to the 1 CheckForUpdates or 2 UpdateComponents methods...

Security feature bypass

Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 KWEDIT.DLL 6400.1.1.41 and 7.10 Patch 5 KWEDIT.DLL 7100.1.1.43 allows remote attackers to 1 overwrite arbitrary files via the SaveDocumentAs method or 2 read or execute arbitrary files via the OpenDocument method...

CVE-2008-4830

Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 KWEDIT.DLL 6400.1.1.41 and 7.10 Patch 5 KWEDIT.DLL 7100.1.1.43 allows remote attackers to 1 overwrite arbitrary files via the SaveDocumentAs method or 2 read or execute arbitrary files via the OpenDocument method...

CVE-2007-2238

CVE-2007-2238 describes multiple stack-based buffer overflows in the Whale Client Components ActiveX control (WhlMgr.dll) used by Microsoft Intelligent Application Gateway (IAG) before 3.7 SP2. The vulnerabilities allow remote code execution when an attacker supplies overly long arguments to the ...

CVE-2007-2238

Multiple stack-based buffer overflows in the Whale Client Components ActiveX control WhlMgr.dll, as used in Microsoft Intelligent Application Gateway IAG before 3.7 SP2, allow remote attackers to execute arbitrary code via long arguments to the 1 CheckForUpdates or 2 UpdateComponents methods...

Microsoft Whale Intelligent Application Gateway ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in Microsoft Whale Intelligent Application Gateway Whale Client. When sending an overly long string to CheckForUpdates method of WhlMgr.dll 3.1.502.64 an attacker may be able to execute arbitrary code. This module requires Metasploit:...

SAP GUI KWEdit ActiveX Control SaveDocumentAs() Insecure Method

The version of the KWEdit ActiveX control on the remote host is reportedly affected by a remote code execution vulnerability. The control provides the insecure method 'SaveDocumentAs', which saves an HTML document to a specified location. This can be exploited in combination with e.g. the...

Microsoft Whale Intelligent Application Gateway Whale Client Components ActiveX control stack buffer overflows

Overview The Microsoft Whale Intelligent Application Gateway Whale Client Components ActiveX control contains multiple stack buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Whale Communications Intelligent...

CVE-2009-0218

Insecure method vulnerability in Particle Software IntraLaunch Application Launcher ActiveX control in IntraLaunch.ocx, as used in LDRA TBbrowse and possibly other products, allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2009-0218

CVE-2009-0218 involves Particle Software’s IntraLaunch ActiveX control (IntraLaunch.ocx) used by LDRA TBbrowse. The ActiveX control is not restricted to any domain/zone and is marked Safe for Scripting, enabling web pages to trigger arbitrary code execution on affected systems. Exploitation could...

CVE-2009-0218

Insecure method vulnerability in Particle Software IntraLaunch Application Launcher ActiveX control in IntraLaunch.ocx, as used in LDRA TBbrowse and possibly other products, allows remote attackers to execute arbitrary code via unknown vectors...