CVE-2007-3168

A certain ActiveX control in the EDraw Office Viewer Component edrawofficeviewer.ocx 4.0.5.20, and other versions before 5.0, allows remote attackers to delete arbitrary files via the DeleteLocalFile method...

Buffer overflow

Buffer overflow in the NotSafe function in the idaiehlp ActiveX control in idaiehlp.dll 1.9.1.74 in Internet Download Accelerator ida 5.2 allows remote attackers to cause a denial of service Internet Explorer crash via a long argument...

CVE-2007-3162

Buffer overflow in the NotSafe function in the idaiehlp ActiveX control in idaiehlp.dll 1.9.1.74 in Internet Download Accelerator ida 5.2 allows remote attackers to cause a denial of service Internet Explorer crash via a long argument...

CVE-2007-3169

Buffer overflow in a certain ActiveX control in the EDraw Office Viewer Component edrawofficeviewer.ocx 4.0.5.20, and other versions before 5.0, allows remote attackers to cause a denial of service Internet Explorer 7 crash or execute arbitrary code via a long first argument to the HttpDownloadFi...

CVE-2007-3169

Buffer overflow in a certain ActiveX control in the EDraw Office Viewer Component edrawofficeviewer.ocx 4.0.5.20, and other versions before 5.0, allows remote attackers to cause a denial of service Internet Explorer 7 crash or execute arbitrary code via a long first argument to the HttpDownloadFi...

CVE-2007-3167

CVE-2007-3167 describes a stack-based buffer overflow in the Vivotek Motion JPEG ActiveX control (MjpegControl) within MjpegDecoder.dll version 2.0.0.13. The vulnerability arises from handling a very long PtzUrl property value, which can overflow a stack buffer and allow a remote attacker to exec...

CVE-2007-3168

A certain ActiveX control in the EDraw Office Viewer Component edrawofficeviewer.ocx 4.0.5.20, and other versions before 5.0, allows remote attackers to delete arbitrary files via the DeleteLocalFile method...

CVE-2007-3167

Stack-based buffer overflow in the Vivotek Motion Jpeg ActiveX control aka MjpegControl in MjpegDecoder.dll 2.0.0.13 allows remote attackers to execute arbitrary code via a long PtzUrl property value...

CVE-2007-3162

Buffer overflow in the NotSafe function in the idaiehlp ActiveX control in idaiehlp.dll 1.9.1.74 in Internet Download Accelerator ida 5.2 allows remote attackers to cause a denial of service Internet Explorer crash via a long argument...

CVE-2007-3168

The Office Viewer Component ActiveX control (edrawofficeviewer.ocx) in EDraw Office Viewer Component versions 4.0.5.20 and earlier than 5.0 is affected. The CVE-2007-3168 entry describes a vulnerability where remote attackers can delete arbitrary files via the DeleteLocalFile method. The connecte...

CVE-2007-2920

CVE-2007-2920 concerns multiple stack-based buffer overflows in the Zoomify Viewer ActiveX control (ZActiveX.dll). The Nessus/NASL entry and CERT briefing confirm that remote attackers could potentially execute arbitrary code by tempting a user to visit a crafted page, with exploitation tied to t...

CVE-2007-3162

CVE-2007-3162: Buffer overflow in the NotSafe function of idaiehlp.dll (ActiveX control idaiehlp.dll 1.9.1.74) in Internet Download Accelerator (ida) 5.2 allows remote attackers to crash Internet Explorer via a long argument. Root cause described as a buffer overflow in NotSafe; exploitation deta...

CVE-2007-3169

EDraw Office Viewer Component (officeviewer.ocx) ActiveX controls are affected across multiple CVEs (e.g., CVE-2007-3169, CVE-2007-4821, CVE-2007-5257). Affected versions include Office Viewer Component 5.0 and earlier for HttpDownloadFile/HttpDownloadFileToTempDir and 5.3.220.1 and earlier for F...

CVE-2007-3148

Buffer overflow in the Yahoo! Webcam Viewer ActiveX control in ywcvwr.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the receive method...

Buffer overflow

Buffer overflow in the Yahoo! Webcam Viewer ActiveX control in ywcvwr.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the receive method...

CVE-2007-3148

Buffer overflow in the Yahoo! Webcam Viewer ActiveX control in ywcvwr.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the receive method...

CVE-2007-3147

CVE-2007-3147 describes a buffer overflow in Yahoo! Messenger 8.1.0.249’s Webcam ActiveX control (ywcupl.dll v2.0.1.4). The vulnerability occurs when a long value is sent via the Server() method to the Send() method, allowing remote arbitrary code execution. Connected sources also reference buffe...

CVE-2007-3147

Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the send method. NOTE: some of these details are obtained from third party information...

Zoomify Viewer ActiveX control multiple stack buffer overflows

Overview The Zoomify Viewer ActiveX control contains multiple stack buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Zoomify provides software to incorporate zoomable images into web sites. One of the Zoomify produc...

雅虎通Webcam Viewer ActiveX控件远程栈溢出漏洞

雅虎通是一款非常流行的即时通讯工具。 雅虎通的Webcam Viewer ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞控制用户机器。 雅虎通的Webcam Viewer（ywcvwr.dll）ActiveX控件没有正确地验证对Server属性的输入。如果用户受骗访问了恶意站点向该属性传送了超长字符串然后又调用了Receive方式的话，就可能触发栈溢出，导致执行任意指令。 Yahoo! Messenger 8.1.0.249 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://messenger.yahoo.com/...