5643 matches found
CVE-2007-5608
HP Instant Support HPISDataManager.dll ActiveX control contains the DownloadFile() function vulnerability (CVE-2007-5608). An unauthenticated remote attacker could force the ActiveX to download arbitrary files to a location on the victim’s system via a crafted URL and destination filename. Affect...
CVE-2007-5606
HP Instant Support’s HPISDataManager.dll ActiveX control contains MoveFile() in the HPISDataManager, a buffer overflow that can be exploited by a remote attacker to execute arbitrary code. Public details indicate exploitation requires convincing a user to visit a malicious page to trigger the vul...
HP Instant Support 1.0.22 - HPISDataManager.dll RegistryString Buffer Overflow
HP Instant Support 1.0.22 - HPISDataManager.dll RegistryString Buffer Overflow source: https://www.securityfocus.com/bid/29534/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on...
HP Instant Support 1.0.22 - 'HPISDataManager.dll RegistryString' Buffer Overflow
source: https://www.securityfocus.com/bid/29534/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. An attacker can exploit this issue to execute arbitrary cod...
c6msg-activex.txt
!-- C6 Messenger Installation Url DownloaderActiveX Control Remote Download & Execute Exploit by Nine:Situations:Group::SnoopyAssault site: http://retrogod.altervista.org/ "C6 Messenger is an instant messaging program produced by Telecom Italia Group, specifically by Alice distribution, Icon Spa...
KLA10054 ACE vulnerability in Akamai Download Manager
CRLF injection vulnerability was found in the Akamai Download Manager. By using this vulnerability spiteful abuser can execute arbitrary code. This vulnerability can be exploited from network at point related to unknown. Via specially designed URL. Original advisories vulnerability description...
HP Instant Support 1.0.22 - HPISDataManager.dll ExtractCab ActiveX Control Buffer Overflow
HP Instant Support 1.0.22 - HPISDataManager.dll ExtractCab ActiveX Control Buffer Overflow source: https://www.securityfocus.com/bid/29529/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary...
HP Instant Support 1.0.22 - HPISDataManager.dll ActiveX Control Arbitrary File Delete
HP Instant Support 1.0.22 - HPISDataManager.dll ActiveX Control Arbitrary File Delete source: https://www.securityfocus.com/bid/29536/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to a vulnerability that lets attackers delete arbitrary files on the affected computer in th...
HP Instant Support 1.0.22 - 'HPISDataManager.dll' ActiveX Control Arbitrary File Delete
source: https://www.securityfocus.com/bid/29536/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to a vulnerability that lets attackers delete arbitrary files on the affected computer in the context of the application using the ActiveX control. Successful attacks can result ...
HP Instant Support 1.0.22 - HPISDataManager.dll ActiveX Control Arbitrary File Creation
HP Instant Support 1.0.22 - HPISDataManager.dll ActiveX Control Arbitrary File Creation source: https://www.securityfocus.com/bid/29535/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to a vulnerability that lets attackers create and overwrite files with arbitrary,...
HP Instant Support 1.0.22 - HPISDataManager.dll StartApp ActiveX Control Insecure Method
HP Instant Support 1.0.22 - HPISDataManager.dll StartApp ActiveX Control Insecure Method source: https://www.securityfocus.com/bid/29533/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to an insecure-method vulnerability. Successfully exploiting this issue allows remote...
HP Instant Support 1.0.22 - 'HPISDataManager.dll ExtractCab' ActiveX Control Buffer Overflow
source: https://www.securityfocus.com/bid/29529/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. An attacker can exploit this issue to execute arbitrary cod...
HP Instant Support 1.0.22 - 'HPISDataManager.dll' ActiveX Control Arbitrary File Creation
source: https://www.securityfocus.com/bid/29535/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to a vulnerability that lets attackers create and overwrite files with arbitrary, attacker-controlled content. Successful exploits may compromise affected computers and aid in...
HP Instant Support 1.0.22 - 'HPISDataManager.dll StartApp' ActiveX Control Insecure Method
source: https://www.securityfocus.com/bid/29533/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to an insecure-method vulnerability. Successfully exploiting this issue allows remote attackers to launch arbitrary applications with the privileges of the application running th...
CVE-2008-2511
Directory traversal vulnerability in the UmxEventCli.CachedAuditDataList.1 aka UmxEventCliLib ActiveX control in UmxEventCli.dll in CA Internet Security Suite 2008 allows remote attackers to create and overwrite arbitrary files via a .. dot dot in the argument to the SaveToFile method. NOTE: this...
CVE-2008-2511
CVE-2008-2511 describes a directory traversal vulnerability in the CA Internet Security Suite 2008’s UmxEventCli.dll (UmxEventCli.CachedAuditDataList/UmxEventCliLib) ActiveX control. The flaw lets remote attackers supply a ... path to the SaveToFile method, enabling creation or overwriting of arb...
Stack overflow
Stack-based buffer overflow in the Creative Software AutoUpdate Engine ActiveX control in CTSUEng.ocx allows remote attackers to execute arbitrary code via a long CacheFolder property value...
Stack overflow
Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioInformation2 ActiveX control in NCTAudioInformation2.dll, as used in 1 Power Audio CD Grabber 1.0, 2 Power Audio CD Burner 1.02, 3 CinematicMP3 1.4.0.0, 4 Alive MP3 WAV Converter 3.9.3.2, and possibly other...
CVE-2008-0958
Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioGrabber2 ActiveX control in NCTAudioGrabber2.dll allow remote attackers to execute arbitrary code via unspecified vectors...