Yahoo Music Jukebox MediaGrid ActiveX buffer overflow

Added: 02/11/2008 CVE: CVE-2008-0625 BID: 27578 OSVDB: 41051 Background Yahoo! Music Jukebox is a music player capable of playing, ripping, and burning MP3s and CDs, creating and sharing playlists, streaming radio stations, and purchasing music. Problem A buffer overflow vulnerability in the...

MySpace Uploader ActiveX Control < 1.0.0.6 Action Property Buffer Overflow

The remote host contains a version of the MySpace Uploader ActiveX control MySpace.Uploader.4.1 that reportedly is affected by a buffer overflow that can be triggered by assigning a string longer than 260 characters to certain properties, such as 'Action', 'ExtractIptc', and 'ExtractExif'. If a...

Stack overflow

Stack-based buffer overflow in Aurigma Image Uploader ActiveX control ImageUploader4.ocx 4.5.70 and earlier, as used in MySpace MySpaceUploader.ocx 1.0.0.4, allows remote attackers to execute arbitrary code via a long Action property...

CVE-2008-0659

Stack-based buffer overflow in Aurigma Image Uploader ActiveX control ImageUploader4.ocx 4.5.70 and earlier, as used in MySpace MySpaceUploader.ocx 1.0.0.4, allows remote attackers to execute arbitrary code via a long Action property...

CVE-2008-0659

Stack-based buffer overflow in Aurigma Image Uploader ActiveX control ImageUploader4.ocx 4.5.70 and earlier, as used in MySpace MySpaceUploader.ocx 1.0.0.4, allows remote attackers to execute arbitrary code via a long Action property...

CVE-2008-0660

The CVE-2008-0660 vulnerability affects the Aurigma Image Uploader ActiveX control (ImageUploader4.ocx: 4.6.17.0, 4.5.70.0, 4.5.126.0 and ImageUploader5: 5.0.10.0) as used by Facebook PhotoUploader 4.5.57.0. It is caused by stack-based buffer overflows in the ExtractExif and ExtractIptc propertie...

Facebook Photo Uploader 4 ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in Facebook Photo Uploader 4. By sending an overly long string to the "ExtractIptc" property located in the ImageUploader4.ocx 4.5.57.0 Control, an attacker may be able to execute arbitrary code. This module requires Metasploit:...

CVE-2008-0213

Unspecified vulnerability in a certain ActiveX control for HP Virtual Rooms HPVR 6 and earlier allows remote attackers to execute arbitrary code via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in a certain ActiveX control for HP Virtual Rooms HPVR 6 and earlier allows remote attackers to execute arbitrary code via unknown vectors...

Stack overflow

Multiple stack-based buffer overflows in the HanGamePluginCn18.HanGamePluginCn18.1 ActiveX control in HanGamePluginCn18.dll in Ourgame GLWorld 2.6.1.29 aka Lianzong Game Platform allow remote attackers to execute arbitrary code via long arguments to the 1 hgsstartGame and 2 hgsstartNotify methods...

CVE-2008-0213

Unspecified vulnerability in a certain ActiveX control for HP Virtual Rooms HPVR 6 and earlier allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2008-0213

HP Virtual Rooms (HPVR) versions 6 and earlier are affected by CVE-2008-0213 due to an unspecified vulnerability in an ActiveX control that could allow remote code execution. The HP Security Bulletin HPSBGN02310 rev.1 (HPVR on Windows) states the vulnerability could be exploited to achieve remote...

CVE-2008-0647

Multiple stack-based buffer overflows in the HanGamePluginCn18.HanGamePluginCn18.1 ActiveX control in HanGamePluginCn18.dll in Ourgame GLWorld 2.6.1.29 aka Lianzong Game Platform allow remote attackers to execute arbitrary code via long arguments to the 1 hgsstartGame and 2 hgsstartNotify methods...

CVE-2008-0647

The CVE-2008-0647 issue affects the HanGamePluginCn18.ActiveX control inside Ourgame GLWorld 2.6.1.29 (aka Lianzong Game Platform). It involves multiple stack-based buffer overflows in HanGamePluginCn18.dll that allow remote code execution when long arguments are passed to the methods hgs_startGa...

CVE-2008-0647

Multiple stack-based buffer overflows in the HanGamePluginCn18.HanGamePluginCn18.1 ActiveX control in HanGamePluginCn18.dll in Ourgame GLWorld 2.6.1.29 aka Lianzong Game Platform allow remote attackers to execute arbitrary code via long arguments to the 1 hgsstartGame and 2 hgsstartNotify methods...

VulnCheck KEV: CVE-2008-0647

Multiple stack-based buffer overflows in the HanGamePluginCn18.HanGamePluginCn18.1 ActiveX control in HanGamePluginCn18.dll in Ourgame GLWorld 2.6.1.29 aka Lianzong Game Platform allow remote attackers to execute arbitrary code via long arguments to the 1 hgsstartGame and 2 hgsstartNotify...

KLA10079 ACE vulnerability in Aurigma Image Uploader

A buffer overflow vulnerability was found in the Aurigma Image Uploader ActiveX control. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network at a point related to unknown applications via specially designed properties...

Buffer overflow

Buffer overflow in the MediaGrid ActiveX control mediagrid.dll in Yahoo! Music Jukebox 2.2.2.56 allows remote attackers to execute arbitrary code via a long argument to the AddBitmap method...

CVE-2008-0634

Buffer overflow in the NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1, as used in Sejoong Namo ActiveSquare6, allows remote attackers to execute arbitrary code via a long argument to the Install method, a different vulnerability than CVE-2008-0551...

CVE-2008-0623

Stack-based buffer overflow in the YMP Datagrid ActiveX control datagrid.dll in Yahoo! Music Jukebox 2.2.2.056 allows remote attackers to execute arbitrary code via a long argument to the AddImage method...