CVE-2007-2496

CVE-2007-2496 affects the WordOCX ActiveX control in WordViewer.ocx 3.2.0.5, allowing remote DoS in Internet Explorer 7 via overly long values for various properties (e.g., DoOleCommand, FTPDownloadFile, HttpUploadFile, Open, Save, etc.). Connected sources corroborate a buffer-overflow/long-input...

CVE-2007-2495

CVE-2007-2495 affects the ExcelViewer.ocx 3.1.0.6 ExcelOCX ActiveX control. The vulnerability is described as multiple stack-based buffer overflows that allow remote attackers to cause a denial of service, specifically an Internet Explorer 7 crash, by supplying long values for any of these proper...

McAfee ePolicy Orchestrator SiteManager ActiveX Multiple Buffer Overflows (CVE-2007-1498)

Multiple vulnerabilities exist in the McAfee ePolicy Orchestrator ePO, and the Protection Pilot products. McAfee ePolicy Orchestrator is a central management system to enforce and monitor system security. A remote attacker could exploit this issue by convincing a user to visit a specially crafted...

PowerPoint Viewer OCX 3.2 - ActiveX Control Denial of Service

PowerPoint Viewer OCX 3.2 - ActiveX Control Denial of Service 2007/05/01 ----------------------------------------------------------------------------- PowerPointViewer.ocx v. 3.1.0.3 multiple methods Denial of Service url: http://www.officeocx.com/ price: from €63.95 update to last version to...

PowerPoint Viewer OCX 3.2 (ActiveX Control) Denial of Service Exploit

Exploit for unknown platform in category dos / poc ===================================================================== PowerPoint Viewer OCX 3.2 ActiveX Control Denial of Service Exploit ===================================================================== 2007/05/01...

PowerPoint Viewer OCX 3.2 - ActiveX Control Denial of Service

2007/05/01 ----------------------------------------------------------------------------- PowerPointViewer.ocx v. 3.1.0.3 multiple methods Denial of Service url: http://www.officeocx.com/ price: from €63.95 update to last version to €1,585.95 Royalty author: shinnai mail:...

Buffer overflow

Multiple buffer overflows in the WinDVDX ActiveX control in InterVideo Home Theater 2.1.13.0 and 2.5.13.58 allow remote attackers to execute arbitrary code via a long string argument to the 1 GetDiscType or 2 AddFileList method. NOTE: the provenance of this information is unknown; the details are...

CVE-2007-2323

CVE-2007-2323 describes multiple buffer overflows in the WinDVDX ActiveX control used by InterVideo Home Theater (versions 2.1.13.0 and 2.5.13.58). The flaw allows remote attackers to execute arbitrary code by passing a long string to the GetDiscType or AddFileList methods. The vulnerability is r...

Stack overflow

Stack-based buffer overflow in the DoWebMenuAction function in the IncrediMail IMMenuShellExt ActiveX control ImShExt.dll allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-1683

Stack-based buffer overflow in the DoWebMenuAction function in the IncrediMail IMMenuShellExt ActiveX control ImShExt.dll allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-1683

Stack-based buffer overflow in the DoWebMenuAction function in the IncrediMail IMMenuShellExt ActiveX control ImShExt.dll allows remote attackers to execute arbitrary code via unspecified vectors...

IncrediMail IMMenuShellExt ActiveX control stack buffer overflow vulnerability

Overview The IncrediMail IMMenuShellExt ActiveX control contains a stack buffer overflow, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description IncrediMail is an email application that includes animations and 1000's of emoticons...

Buffer overflow

A certain ActiveX control in askPopStp.dll in Netsprint Ask IE Toolbar 1.1 allows remote attackers to cause a denial of service Internet Explorer crash via a long AddAllowed property value, related to "improper memory handling," possibly a buffer overflow...

CVE-2007-2210

A certain ActiveX control in askPopStp.dll in Netsprint Ask IE Toolbar 1.1 allows remote attackers to cause a denial of service Internet Explorer crash via a long AddAllowed property value, related to "improper memory handling," possibly a buffer overflow...

CVE-2007-2210

Summary: CVE-2007-2210 involves an ActiveX control (askPopStp.dll) in the Netsprint Ask IE Toolbar 1.1. The vulnerability arises from improper memory handling related to a long AddAllowed property value, potentially causing a buffer overflow and a remote denial of service (Internet Explorer crash...

CVE-2007-2210

A certain ActiveX control in askPopStp.dll in Netsprint Ask IE Toolbar 1.1 allows remote attackers to cause a denial of service Internet Explorer crash via a long AddAllowed property value, related to "improper memory handling," possibly a buffer overflow...

Buffer overflow

Multiple buffer overflows in the CDDBControl ActiveX control in Gracenote CDDB before 20070418 allow remote attackers to execute arbitrary code via long values for certain Proxy configuration parameters...

CVE-2007-2177

Stack-based buffer overflow in the Microgaming Download Helper ActiveX control dlhelper.dll before 7.2.0.19, and the WebHandler Class control, allows remote attackers to execute arbitrary code via unspecified vectors...

Stack overflow

Stack-based buffer overflow in the Microgaming Download Helper ActiveX control dlhelper.dll before 7.2.0.19, and the WebHandler Class control, allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-2177

Stack-based buffer overflow in the Microgaming Download Helper ActiveX control dlhelper.dll before 7.2.0.19, and the WebHandler Class control, allows remote attackers to execute arbitrary code via unspecified vectors...