Toshiba Surveillance Surveillix DVR 'MeIpCamX.dll' 1.0 - ActiveX Control Buffer Overflow

source: https://www.securityfocus.com/bid/27360/info Surveillix DVR 'MeIpCamX.DLL' ActiveX control is prone to multiple buffer-overflow vulnerabilities because the application fails to perform adequate boundary checks on user-supplied data. Successfully exploiting these issues allows remote...

Macrovision InstallShield Update Service ActiveX Control Code Execution (CVE-2007-5660)

Macrovision InstallShield is a software tool for creating installers or software packages. This vulnerability is due to errors in the Macrovision InstallShield Update Service ActiveX Control when handling webpage scripts. To trigger this issue, an attacker may create a malicious web page that wil...

LinkedIn Toolbar IEContextMenu Buffer Overflow (CVE-2007-3955)

A buffer overflow vulnerability exists in LinkedIn Internet Explorer Toolbar. LinkedIn is a popular business-oriented networking site. This vulnerability is due to errors in the LinkedIn Internet Explorer Toolbar IEContextMenu ActiveX Control when handling overly long arguments sent to the search...

VideoLAN VLC axvlc.dll ActiveX Crafted Parameter Remote Code Execution (CVE-2007-6262)

VLC media player is a free multimedia player for various audio and video formats as well as DVDs, VCDs, and various streaming protocols. This vulnerability is due to recursive object release as a result from flaws in the VideoLAN VLC ActiveX Control. To trigger this issue, an attacker may create ...

Macrovision FLEXnet Connect ActiveX控件任意文件下载漏洞

BUGTRAQ ID: 27279 Macrovision FLEXnet Connect是一种应用软件的厂商为用户提供产品相关的更新及信息发布的工具。 FLEXnet Connect的ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞下载任意文件到用户系统。 FLEXnet Connect所使用的DownloadManager控件： ISDM.exe version 6.1.100.61372 MVSNClientDownloadManager61Lib.DownloadManager FCED4482-7CCB-4E6F-86C9-DCB22B52843C...

联众世界GLChat.ocx ActiveX Control BoF exploit

No description provided by source. define CRTSECURENODEPRECATE include windows.h include stdio.h const unsigned char shellcode174 = 0xE8, 0x00, 0x00, 0x00, 0x00, 0x6A, 0x03, 0xEB, 0x21, 0x7E, 0xD8, 0xE2, 0x73, 0x98, 0xFE, 0x8A, ...

Buffer overflow

Buffer overflow in an ActiveX control in ccpm0237.dll for StreamAudio ChainCast ProxyManager allows remote attackers to execute arbitrary code via a long URL argument to the InternalTuneIn method...

CVE-2008-0248

Buffer overflow in an ActiveX control in ccpm0237.dll for StreamAudio ChainCast ProxyManager allows remote attackers to execute arbitrary code via a long URL argument to the InternalTuneIn method...

CVE-2008-0248

CVE-2008-0248 describes a buffer overflow in an ActiveX control (ccpm_0237.dll) used by StreamAudio ChainCast ProxyManager. The overflow can be triggered by a long URL argument to the InternalTuneIn method, allowing remote attackers to execute arbitrary code. The description and references indica...

CVE-2008-0248

Buffer overflow in an ActiveX control in ccpm0237.dll for StreamAudio ChainCast ProxyManager allows remote attackers to execute arbitrary code via a long URL argument to the InternalTuneIn method...

Design/Logic Flaw

An ActiveX control for Microsoft Visual FoxPro vfp6r.dll 6.0.8862.0 allows remote attackers to execute arbitrary commands by invoking the DoCmd method...

Design/Logic Flaw

The Microsoft Rich Textbox ActiveX Control RICHTX32.OCX 6.1.97.82 allows remote attackers to execute arbitrary commands by invoking the insecure SaveFile method...

Design/Logic Flaw

The Microsoft VFPOLEServer ActiveX control allows remote attackers to execute arbitrary code by invoking the foxcommand method...

CVE-2008-0236

An ActiveX control for Microsoft Visual FoxPro vfp6r.dll 6.0.8862.0 allows remote attackers to execute arbitrary commands by invoking the DoCmd method...

CVE-2008-0235

CVE-2008-0235 affects the Microsoft VFP_OLE_Server ActiveX control. The vulnerability allows remote attackers to execute arbitrary code by invoking the foxcommand method. The NVD entry lists a base score of 10.0 (HIGH) with network attack vector and no authentication, indicating a severe remote c...

CVE-2008-0237

The Microsoft Rich Textbox ActiveX Control RICHTX32.OCX 6.1.97.82 allows remote attackers to execute arbitrary commands by invoking the insecure SaveFile method...

CVE-2008-0237

The CVE-2008-0237 entry involves the Microsoft Rich Textbox ActiveX control (Richtx32.ocx, v6.1.97.82). The vulnerability lies in the SaveFile method, which can be abused to create or overwrite arbitrary files via a web page, enabling remote access to write files on the target system. Exploitatio...

Qvod Player 2.1.5 - QvodInsert.dll ActiveX Control Remote Buffer Overflow

Qvod Player 2.1.5 - QvodInsert.dll ActiveX Control Remote Buffer Overflow source: https://www.securityfocus.com/bid/27271/info Qvod Player 'QvodInsert.dll' ActiveX control is prone to is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on...

Microsoft VFP_OLE_Server ActiveX控件远程命令执行漏洞

Microsoft Visual FoxPro是一款数据库管理和应用软件开发系统。 Microsoft VFPOLEServer ActiveX控件存在设计问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意命令。 问题是Microsoft VFPOLEServer控件不安全使用"foxcommand"函数，直接传递运行应用程序作为参数，可导致应用程序权限执行。 Microsoft VFPOLEServer ActiveX Control 0 + Microsoft Internet Explorer 6.0 + Microsoft Internet Explorer 5.5 SP2 ...

Qvod Player 2.1.5 - 'QvodInsert.dll' ActiveX Control Remote Buffer Overflow

source: https://www.securityfocus.com/bid/27271/info Qvod Player 'QvodInsert.dll' ActiveX control is prone to is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Successfully exploiting this issue allows remote...