Buffer overflow

Buffer overflow in the YMP Datagrid ActiveX control datagrid.dll in Yahoo! JukeBox 2.2.2.56 allows remote attackers to execute arbitrary code via a long argument to the AddButton method, a different vulnerability than CVE-2008-0623...

CVE-2008-0625

Buffer overflow in the MediaGrid ActiveX control mediagrid.dll in Yahoo! Music Jukebox 2.2.2.56 allows remote attackers to execute arbitrary code via a long argument to the AddBitmap method...

CVE-2008-0624

Buffer overflow in the YMP Datagrid ActiveX control datagrid.dll in Yahoo! JukeBox 2.2.2.56 allows remote attackers to execute arbitrary code via a long argument to the AddButton method, a different vulnerability than CVE-2008-0623...

CVE-2008-0623

CVE-2008-0623 : A stack-based buffer overflow in Yahoo! Music Jukebox 2.2.2.056’s YMP Datagrid ActiveX control (datagrid.dll) can be triggered by a long argument to AddImage, enabling remote code execution. Affected product/version: Yahoo! Music Jukebox 2.2.2.056; vulnerable component is the Data...

CVE-2008-0634

Buffer overflow vulnerability CVE-2008-0634 affects the NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll v3.0.0.1 used by Sejoong Namo ActiveSquare 6. The flaw allows remote code execution when a long argument is passed to the Install method. This is a separate issue from CVE-2008...

CVE-2008-0634

Buffer overflow in the NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1, as used in Sejoong Namo ActiveSquare6, allows remote attackers to execute arbitrary code via a long argument to the Install method, a different vulnerability than CVE-2008-0551...

CVE-2008-0625

Buffer overflow in the MediaGrid ActiveX control mediagrid.dll in Yahoo! Music Jukebox 2.2.2.56 allows remote attackers to execute arbitrary code via a long argument to the AddBitmap method...

CVE-2008-0624

Buffer overflow in the YMP Datagrid ActiveX control datagrid.dll in Yahoo! JukeBox 2.2.2.56 allows remote attackers to execute arbitrary code via a long argument to the AddButton method, a different vulnerability than CVE-2008-0623...

CVE-2008-0625

CVE-2008-0625 is a buffer overflow in Yahoo! Music Jukebox MediaGrid ActiveX (mediagrid.dll) that allows remote code execution when a user loads a page calling AddBitmap with a long argument in Yahoo! Music Jukebox 2.2.2.56. Exploitation requires the user to view a crafted page in Internet Explor...

[Full-disclosure] Yahoo! JukeBox MediaGrid ActiveX Control AddBitmap() Buffer Overflow

Who: Yahoo! http://www.yahoo.com What: mediagrid.dll version 2.2.2.56 22FD7C0A-850C-4A53-9821-0B0915C96139 Implements IObjectSafety This control is used with the Yahoo! JukeBox application. How: The 2nd parameter of the AddBitmap method is vulnerable to a buffer overflow. Fix: No official fix kno...

HP Virtual Rooms WebHPVCInstall.HPVirtualRooms14 ActiveX Control Buffer Overflow Vulnerabilities

The remote host contains a version of the HP Virtual Rooms WebHPVCInstall.HPVirtualRooms14 ActiveX control that reportedly is affected by multiple buffer overflows involving properties such as 'AuthenticationURL', 'PortalAPIURL', and 'cabroot'. If a remote attacker can trick a user on the affecte...

Stack overflow

Multiple stack-based buffer overflows in SwiftView Viewer before 8.3.5, as used by SwiftView and SwiftSend, allow remote attackers to execute arbitrary code via unspecified vectors to the 1 svocx.ocx ActiveX control or the 2 npsview.dll plugin for Mozilla and Firefox...

CVE-2007-5602

Multiple stack-based buffer overflows in SwiftView Viewer before 8.3.5, as used by SwiftView and SwiftSend, allow remote attackers to execute arbitrary code via unspecified vectors to the 1 svocx.ocx ActiveX control or the 2 npsview.dll plugin for Mozilla and Firefox...

GlobalLink 2.6.1.2 - HanGamePlugincn18.dll ActiveX Control Multiple Buffer Overflow Vulnerabilities

GlobalLink 2.6.1.2 - HanGamePlugincn18.dll ActiveX Control Multiple Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/27626/info GlobalLink is prone to multiple buffer-overflow vulnerabilities because it fails to properly bounds-check user-supplied data before copying it...

Facebook Photo Uploader ActiveX Control < 4.5.57.1 Multiple Buffer Overflows

The remote host contains a version of the Facebook Photo Uploader ActiveX control that reportedly is affected by multiple buffer overflows involving, for example, long arguments to the control's 'ExtractExif', 'ExtractIptc', and 'FileMask' properties. If a remote attacker can trick a user on the...

Yahoo! JukeBox MediaGrid ActiveX mediagrid.dll AddBitmap() BOF Exploit

No description provided by source. !-- Yahoo! JukeBox MediaGrid ActiveX Control mediagrid.dll AddBitmap Buffer Overflow Exploit written by e.b. Tested on Windows XP SP2fully patched English, IE6, mediagrid.dll version 2.2.2.56 Thanks to h.d.m. and the Metasploit crew -- html head titleYahoo!...

CVE-2007-5602

Multiple stack-based buffer overflows in SwiftView Viewer before 8.3.5, as used by SwiftView and SwiftSend, allow remote attackers to execute arbitrary code via unspecified vectors to the 1 svocx.ocx ActiveX control or the 2 npsview.dll plugin for Mozilla and Firefox...

GlobalLink 2.6.1.2 - 'HanGamePlugincn18.dll' ActiveX Control Multiple Buffer Overflow Vulnerabilities

source: https://www.securityfocus.com/bid/27626/info GlobalLink is prone to multiple buffer-overflow vulnerabilities because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer. An attacker can exploit these issues to execute arbitrary...

Buffer overflow

Multiple buffer overflows in the AIM PicEditor 9.5.1.8 ActiveX control in YGPPicEdit.dll in AOL You've Got Pictures YGP Picture Editor allow remote attackers to cause a denial of service browser crash via a long string in the 1 DisplayName, 2 FinalSavePath, 3 ForceSaveTo, 4 HiddenControls, 5...

CVE-2007-6699

Multiple buffer overflows in the AIM PicEditor 9.5.1.8 ActiveX control in YGPPicEdit.dll in AOL You've Got Pictures YGP Picture Editor allow remote attackers to cause a denial of service browser crash via a long string in the 1 DisplayName, 2 FinalSavePath, 3 ForceSaveTo, 4 HiddenControls, 5...