CVE-2007-1689

The CVE-2007-1689 entry concerns a stack buffer overflow in the ISAlertDataCOM ActiveX control (ISLALERT.DLL) shipped with Norton Personal Firewall 2004 and Norton Internet Security 2004. The vulnerability is triggered by long arguments to the Get() and Set() methods of the ISAlertDataCOM control...

CVE-2007-1689

Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Security 2004 allows remote attackers to execute arbitrary code via long arguments to the 1 Get and 2 Set functions...

idauto-dos.txt

2007/05/13 -------------------------------------------------------------------------------------------------- ID Automation Linear Barcode ActiveX Control IDAutomationLinear6.dll v. 1.6.0.5 DoS url: http://www.idautomation.com/ price: from $199 to $3,570 author: shinnai mail:...

Symantec Norton Internet Security 2004 ISAlertDataCOM ActiveX control stack buffer overflow

Overview The Symantec Norton Internet Security 2004 ISAlertDataCOM ActiveX control contains a stack buffer overflow, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Symantec Norton Internet Security is a software package for Windows...

Buffer overflow

Buffer overflow in the DB Software Laboratory VImpX ActiveX control in VImpX.ocx 4.7.3 allows remote attackers to execute arbitrary code via a long LogFile parameter...

Stack overflow

Stack-based buffer overflow in the Hewlett-Packard HP Magview ActiveX control in hpqvwocx.dll 1.0.0.309 allows remote attackers to cause a denial of service application crash and possibly have other impact via a long argument to the DeleteProfile method...

CVE-2007-2656

Stack-based buffer overflow in the Hewlett-Packard HP Magview ActiveX control in hpqvwocx.dll 1.0.0.309 allows remote attackers to cause a denial of service application crash and possibly have other impact via a long argument to the DeleteProfile method...

CVE-2007-2658

Unspecified vulnerability in the ID Automation Linear Barcode 1.6.0.5 ActiveX control in IDAutomationLinear6.dll allows remote attackers to cause a denial of service via a long argument to the SaveEnhWMF method...

CVE-2007-2657

CVE-2007-2657 affects the PrecisionID Barcode 1.3 ActiveX control (PrecisionID_DataMatrix.DLL). The vulnerability allows a remote attacker to cause a denial of service by sending a long argument to the SaveBarCode method. The description is generic and specifies no concrete root cause beyond the ...

CVE-2007-2656

Stack-based buffer overflow in the Hewlett-Packard HP Magview ActiveX control in hpqvwocx.dll 1.0.0.309 allows remote attackers to cause a denial of service application crash and possibly have other impact via a long argument to the DeleteProfile method...

CVE-2007-2648

Stack-based buffer overflow in the Clever Database Comparer 2.2 ActiveX control comparerax.ocx allows remote attackers to execute arbitrary code via a long argument to the ConnectToDatabase function...

Stack overflow

Stack-based buffer overflow in the Clever Database Comparer 2.2 ActiveX control comparerax.ocx allows remote attackers to execute arbitrary code via a long argument to the ConnectToDatabase function...

CVE-2007-2648

Stack-based buffer overflow in the Clever Database Comparer 2.2 ActiveX control comparerax.ocx allows remote attackers to execute arbitrary code via a long argument to the ConnectToDatabase function...

CVE-2007-2648

The CVE-2007-2648 entry concerns the Clever Database Comparer 2.2 ActiveX control (comparerax.ocx). The provided sources describe a stack-based buffer overflow that enables an attacker to execute arbitrary code by supplying a long argument to the ConnectToDatabase function. The NVD entry lists th...

Symantec Norton Internet Security 2006 COM对象安全绕过漏洞

Norton Internet Security 2006是一款可以对反间谍软件，病毒，反垃圾，恶意网络通信进行保护的安全套件。 Norton Internet Security 2006安装的ActiveX控件存在设计错误，远程攻击者可以利用漏洞以应用程序进程权限执行任意代码。 Norton Internet Security 2006安装如下ActiveX控件注册为安全脚本： Progid: Symantec.Norton.AntiVirus.NAVOptions Clsid: 085ABFE2-D753-445C-8A2A-D4BD46CE0811 File: C:\Program...

CVE-2007-2644

A certain ActiveX control in Morovia Barcode ActiveX Professional 3.3.1304 allows remote attackers to overwrite arbitrary files by calling the Save method with an arbitrary filename...

Code injection

A certain ActiveX control in Morovia Barcode ActiveX Professional 3.3.1304 allows remote attackers to overwrite arbitrary files by calling the Save method with an arbitrary filename...

CVE-2007-2644

The connected Nessus entry identifies Morovia Barcode ActiveX Control

EUVD-2007-2636

A certain ActiveX control in Morovia Barcode ActiveX Professional 3.3.1304 allows remote attackers to overwrite arbitrary files by calling the Save method with an arbitrary filename...

ID Automation Linear Barcode ActiveX Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================================== ID Automation Linear Barcode ActiveX Denial of Service Exploit ============================================================== 2007/05/13...