Design/Logic Flaw

The HPRevolutionRegistryManager ActiveX control in Hp.Revolution.RegistryManager.dll 1 in Telecom Italy Alice Messenger allows remote attackers to create registry keys and values via the arguments to the WriteRegistry method...

CVE-2007-4740

The HPRevolutionRegistryManager ActiveX control in Hp.Revolution.RegistryManager.dll 1 in Telecom Italy Alice Messenger allows remote attackers to create registry keys and values via the arguments to the WriteRegistry method...

CVE-2007-4740

The vulnerability CVE-2007-4740 affects the HPRevolutionRegistryManager ActiveX control in Hp.Revolution.RegistryManager.dll 1 used by Telecom Italia Alice Messenger. The issue allows a remote attacker to create registry keys and values by supplying arguments to the WriteRegistry method, exposing...

Move Media Player Quantum Streaming ActiveX控件多个栈溢出漏洞

BUGTRAQ ID: 25529 Move Media Player是一款网络流媒体播放器。 Move Media Player的Quantum Streaming IE Player ActiveX控件在处理Play和Buzzer方式的参数时存在栈溢出漏洞。如果用户受骗访问了恶意站点并向受影响的方式传送了超长字符串的话，就可能触发这些溢出，导致执行任意代码。 Move Networks Move Media Player 1.0.0.1 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.movenetworks.co...

Earth Resource Mapping NCSView ActiveX control stack buffer overflows

Overview The Earth Resource Mapping NCSView ActiveX control contains multiple stack buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The Earth Resource Mapping NCSView ActiveX control, which is provided by...

Stack overflow

Multiple stack-based buffer overflows in the Intuit QuickBooks Online Edition ActiveX control before 10 allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-4722

Multiple stack-based buffer overflows in the Quantum Streaming Internet Explorer Player ActiveX control in qsp2ie07051001.dll 1.0.0.1 in Move Media Player allow remote attackers to execute arbitrary code via a long string to the 1 Play and 2 Buzzer methods...

Stack overflow

Multiple stack-based buffer overflows in the Quantum Streaming Internet Explorer Player ActiveX control in qsp2ie07051001.dll 1.0.0.1 in Move Media Player allow remote attackers to execute arbitrary code via a long string to the 1 Play and 2 Buzzer methods...

CVE-2007-4471

Multiple unspecified vulnerabilities in the Intuit QuickBooks Online Edition ActiveX control before 10 allow remote attackers to create or overwrite arbitrary files via unspecified arguments to the 1 httpGETToFile, 2 httpPOSTFromFile, and possibly other methods, probably involving path traversal...

CVE-2007-0322

Multiple stack-based buffer overflows in the Intuit QuickBooks Online Edition ActiveX control before 10 allow remote attackers to execute arbitrary code via unspecified vectors...

Path traversal

Multiple unspecified vulnerabilities in the Intuit QuickBooks Online Edition ActiveX control before 10 allow remote attackers to create or overwrite arbitrary files via unspecified arguments to the 1 httpGETToFile, 2 httpPOSTFromFile, and possibly other methods, probably involving path traversal...

CVE-2007-0322

Multiple stack-based buffer overflows in the Intuit QuickBooks Online Edition ActiveX control before 10 allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-4471

Multiple unspecified vulnerabilities in the Intuit QuickBooks Online Edition ActiveX control before 10 allow remote attackers to create or overwrite arbitrary files via unspecified arguments to the 1 httpGETToFile, 2 httpPOSTFromFile, and possibly other methods, probably involving path traversal...

CVE-2007-4722

Multiple stack-based buffer overflows in the Quantum Streaming Internet Explorer Player ActiveX control in qsp2ie07051001.dll 1.0.0.1 in Move Media Player allow remote attackers to execute arbitrary code via a long string to the 1 Play and 2 Buzzer methods...

McAfee VirusScan 10.0.21 ActiveX control Stack Overflow PoC

Exploit for unknown platform in category dos / poc =========================================================== McAfee VirusScan 10.0.21 ActiveX control Stack Overflow PoC =========================================================== Proof of Concept - Mc Afee Viruscan Stack Overflow v10.0.21 Proof ...

Intuit QuickBooks Online Edition ActiveX control stack buffer overflows

Overview The Intuit QuickBooks Online Edition ActiveX control contains multiple stack buffer overflows, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Intuit QuickBooks Online Edition is a version of QuickBooks that functions withi...

Intuit QuickBooks Online Edition ActiveX control fails to properly restrict access to methods

Overview The Intuit QuickBooks Online Edition ActiveX control fails to properly restrict access to dangerous methods, which could allow a remote attacker to execute arbitrary code on a vulnerable system. Description Intuit QuickBooks Online Edition is a version of QuickBooks that is implemented a...

Move Media Player 1.0 Quantum Streaming - ActiveX Control Multiple Buffer Overflow Vulnerabilities

source: https://www.securityfocus.com/bid/25529/info Move Media Player is prone to multiple remote buffer-overflow vulnerabilities because the application fails to properly bounds-check user-supplied data before copying it into insufficiently sized memory buffers. Exploiting these issues allows...

Move Media Player 1.0 Quantum Streaming - ActiveX Control Multiple Buffer Overflow Vulnerabilities

Move Media Player 1.0 Quantum Streaming - ActiveX Control Multiple Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/25529/info Move Media Player is prone to multiple remote buffer-overflow vulnerabilities because the application fails to properly bounds-check user-supplie...

Yahoo! Messenger - YVerInfo.dll 2007.8.27.1 ActiveX Buffer Overflow

Yahoo! Messenger - YVerInfo.dll 2007.8.27.1 ActiveX Buffer Overflow that functions are safely scriptable and exploitable by HeapSpray Technique Tested : Windows XP Professional SP2 all patched,Internet Explorer 7 That functions within this class can only be called if the control believes it is...