CVE-2008-6442

Insecure method vulnerability in Sina Inc. DLoader Class ActiveX Control allows remote attackers to overwrite arbitrary files via a URL in the first parameter to the DonwloadAndInstall method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2008-6447

CVE-2008-6447 : The QuikSoft EasyMail MailStore ActiveX control (emmailstore.dll, version 6.5.0.3) is vulnerable to a buffer overflow when processing a long first argument to the CreateStore method, allowing remote code execution. This vulnerability is documented across multiple connected sources...

CVE-2008-6442

CVE-2008-6442 covers an insecure method vulnerability in the Sina Inc. DLoader Class ActiveX Control. The issue allows remote attackers to overwrite arbitrary files using a URL provided as the first parameter to the DonwloadAndInstall method. This is the concrete vulnerability described in the in...

Buffer overflow vulnerability in ActiveX Control for Sony SNC series network cameras

Overview The ActiveX Control for Sony SNC series network cameras contains a heap-based buffer overflow vulnerability. The ActiveX Control for Sony SNC series network cameras is a software to monitor images over the network using a web browser. This ActiveX Control contains a heap-based buffer...

CVE-2009-0813

Insecure method vulnerability in the ImeraIEPlugin ActiveX control ImeraIEPlugin.dll 1.0.2.54 in Imera TeamLinks Client allows remote attackers to force the download and execution of arbitrary URLs via modified DownloadProtocol, DownloadHost, DownloadPort, and DownloadURI parameters...

CVE-2009-0813

Insecure method vulnerability in the ImeraIEPlugin ActiveX control ImeraIEPlugin.dll 1.0.2.54 in Imera TeamLinks Client allows remote attackers to force the download and execution of arbitrary URLs via modified DownloadProtocol, DownloadHost, DownloadPort, and DownloadURI parameters...

CVE-2009-0813

Imera TeamLinks Client's ImeraIEPlugin.dll ActiveX (version 1.0.2.54) is affected by CVE-2009-0813 due to an insecure method vulnerability in how DownloadProtocol, DownloadHost, DownloadPort, and DownloadURI are handled. This allows a remote attacker to force the download and execution of arbitra...

Imera ImeraIEPlugin ActiveX控件任意文件下载漏洞

Imera TeamLinks是桌面客户端软件，允许物理分不断组成员之间进行协作。 TeamLinks客户端的ImeraIEPlugin.dll库所提供的ImeraIEPlugin.Pilot.1 ActiveX控件没有正地的处理DownloadHost属性参数，如果用户受骗访问了恶意站点并向该属性传送了恶意参数的话，就可能导致向用户系统下载并执行任意文件。 Imera ImeraIEPlugin.dll 1.0.2.54 临时解决方法： 为CLSID 75CC8584-86D4-4A50-B976-AA72618322C6设置kill-bit。 厂商补丁： Imera -----...

CVE-2009-0811

Insecure method vulnerability in the SopCast SopCore ActiveX control in sopocx.ocx 3.0.3.501 allows remote attackers to execute arbitrary programs via an executable file name in the argument to the SetExternalPlayer method...

CVE-2009-0811

CVE-2009-0811 describes an insecure method vulnerability in the SopCast SopCore ActiveX control (sopocx.ocx 3.0.3.501). The vulnerability allows remote attackers to cause arbitrary code execution by supplying an executable file name to the SetExternalPlayer method. Affected product: SopCast SopCo...

CVE-2009-0811

Insecure method vulnerability in the SopCast SopCore ActiveX control in sopocx.ocx 3.0.3.501 allows remote attackers to execute arbitrary programs via an executable file name in the argument to the SetExternalPlayer method...

Imera ImeraIEPlugin ActiveX Control Remote Code Execution Exploit

No description provided by source. Who: Imerahttp://www.imera.com Imera TeamLinks Clienthttp://teamlinks.imera.com/install.html What: ImeraIEPlugin.dll Version 1.0.2.54 Dated 12/02/2008 75CC8584-86D4-4A50-B976-AA72618322C6 http://teamlinks.imera.com/ImeraIEPlugin.cab How: This control is used to...

Imera ImeraIEPlugin - ActiveX Control Remote Code Execution

Imera ImeraIEPlugin - ActiveX Control Remote Code Execution Who: Imerahttp://www.imera.com Imera TeamLinks Clienthttp://teamlinks.imera.com/install.html What: ImeraIEPlugin.dll Version 1.0.2.54 Dated 12/02/2008 75CC8584-86D4-4A50-B976-AA72618322C6 http://teamlinks.imera.com/ImeraIEPlugin.cab How:...

Imera ImeraIEPlugin ActiveX Control Remote Code Execution Exploit

Exploit for unknown platform in category remote exploits ================================================================= Imera ImeraIEPlugin ActiveX Control Remote Code Execution Exploit ================================================================= Who: Imerahttp://www.imera.com Imera...

"Imera ImeraIEPlugin ActiveX Control Remote Code Execution Exploit"

No description provided by source. Who: Imerahttp://www.imera.com Imera TeamLinks Clienthttp://teamlinks.imera.com/install.html What: ImeraIEPlugin.dll Version 1.0.2.54 Dated 12/02/2008 75CC8584-86D4-4A50-B976-AA72618322C6 http://teamlinks.imera.com/ImeraIEPlugin.cab How: This control is used to...

Imera ImeraIEPlugin - ActiveX Control Remote Code Execution

Who: Imerahttp://www.imera.com Imera TeamLinks Clienthttp://teamlinks.imera.com/install.html What: ImeraIEPlugin.dll Version 1.0.2.54 Dated 12/02/2008 75CC8584-86D4-4A50-B976-AA72618322C6 http://teamlinks.imera.com/ImeraIEPlugin.cab How: This control is used to install the Imera TeamLinks Client...

FlipViewer FViewerLoading ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in E-BOOK Systems FlipViewer 4.0. The vulnerability is caused due to a boundary error in the FViewerLoading FlipViewerX.dll ActiveX control when handling the "LoadOpf" method. This module requires Metasploit: https://metasploit.com/download Current...

iDefense COMRaider - ActiveX Control write() Arbitrary File Overwrite

iDefense COMRaider - ActiveX Control write Arbitrary File Overwrite source: https://www.securityfocus.com/bid/33942/info iDefense COMRaider ActiveX control is prone to a vulnerability that lets attackers overwrite arbitrary local files on the victim's computer in the context of the vulnerable...

HP Virtual Rooms ActiveX control fails to restrict access to dangerous methods

Overview The HP Virtual Rooms ActiveX control contains methods that can be used to download and execute arbitrary code from an arbitrary server. Description HP Virtual Rooms is software for online collaboration. HP Virtual Rooms requires Internet Explorer, as one of the components is an ActiveX...

JVN#16767117 Buffer overflow vulnerability in ActiveX Control for Sony SNC series network cameras

The ActiveX Control for Sony SNC series network cameras is a software to monitor images over the network using a web browser. This ActiveX Control contains a heap-based buffer overflow vulnerability triggered by the improper processing of some configuration variables. Impact A remote attacker cou...