CVE-2007-0443

The CVE-2007-0443 issue affects GraceNote’s CDDBControl ActiveX Control. The vulnerability is a buffer overflow in the ActiveX proxy-configuration parameters when long strings are supplied, which can allow remote code execution on affected Windows hosts. Exploitation requires the user to visit a ...

Microgaming Download Helper ActiveX control stack buffer overflow

Overview The Microgaming Download Helper ActiveX control contains a stack buffer overflow, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microgaming provides software for online gaming, including online casinos. The Microgaming...

ZDI-07-021: GraceNote CDDBControl ActiveX Buffer Overflow Vulnerability

ZDI-07-021: GraceNote CDDBControl ActiveX Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-021.html April 19, 2007 -- CVE ID: CVE-2007-0443 -- Affected Vendor: GraceNote -- Affected Products: CDDBControl ActiveX Control -- TippingPointTM IPS Customer Protection:...

CVE-2007-1691

Stack-based buffer overflow in Second Sight Software ActiveMod ActiveX control ActiveMod.ocx allows remote attackers to execute arbitrary code via unspecified vectors...

Stack overflow

Multiple stack-based buffer overflows in Second Sight Software ActiveGS ActiveX control ActiveGS.ocx allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-1691

The CVE-2007-1691 issue is a stack-based buffer overflow in Second Sight Software's ActiveMod ActiveX control (ActiveMod.ocx) that can allow a remote attacker to execute arbitrary code. CERT notes the vulnerability can be exploited by convincing a user to view a crafted HTML document and provides...

GraceNote CDDBControl ActiveX Buffer Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of GraceNote's CDDBControl ActiveX Control. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists due to a buffer overflow in an...

CVE-2007-1891

Stack-based buffer overflow in the GetPrivateProfileSectionW function in Akamai Technologies Download Manager ActiveX Control DownloadManagerV2.ocx after 2.0.4.4 but before 2.2.1.0 allows remote attackers to execute arbitrary code, related to misinterpretation of the nSize parameter as a byte cou...

CVE-2007-1891

Stack-based buffer overflow in the GetPrivateProfileSectionW function in Akamai Technologies Download Manager ActiveX Control DownloadManagerV2.ocx after 2.0.4.4 but before 2.2.1.0 allows remote attackers to execute arbitrary code, related to misinterpretation of the nSize parameter as a byte cou...

CVE-2007-1892

The CVE-2007-1892 entry concerns Akamai Technologies Download Manager ActiveX Control (DownloadManagerV2.ocx). It states a stack-based buffer overflow in DownloadManagerV2.ocx before version 2.2.1.0 that allows remote code execution via unspecified vectors. The issue is described as a vulnerabili...

CVE-2007-1891

CVE-2007-1891 reports a stack-based buffer overflow in the Akamai Download Manager ActiveX Control (DownloadManagerV2.ocx) GetPrivateProfileSectionW, affected after 2.0.4.4 and before 2.2.1.0. The issue arises from misinterpreting the nSize parameter as a byte count rather than a wide character c...

CVE-2007-1892

Stack-based buffer overflow in Akamai Technologies Download Manager ActiveX Control DownloadManagerV2.ocx before 2.2.1.0 allows remote attackers to execute arbitrary code via unspecified vectors, a different issue than CVE-2007-1891...

NetSprint Ask IE Toolbar 1.1 - Multiple Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/23535/info NetSprint Ask IE Toolbar ActiveX control is prone to multiple denial-of-service vulnerabilities. Exploiting these issues allows remote attackers to crash applications that employ the vulnerable controls typically Microsoft Internet Explorer...

NetSprint Ask IE Toolbar 1.1 - Multiple Denial of Service Vulnerabilities

NetSprint Ask IE Toolbar 1.1 - Multiple Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/23535/info NetSprint Ask IE Toolbar ActiveX control is prone to multiple denial-of-service vulnerabilities. Exploiting these issues allows remote attackers to crash applications tha...

Akamai Download Manager ActiveX Control < 2.2.1.0 Multiple Vulnerabilities

The Windows remote host contains the Download Manager ActiveX control from Akamai, which helps users download content. The version of this ActiveX control on the remote host reportedly contains two stack-based buffer overflow vulnerabilities. A remote attacker may be able to leverage these issues...

iDefense Security Advisory 04.16.07: Akamai Download Manager ActiveX Stack Buffer Overflow Vulnerability

Akamai Download Manager ActiveX Stack Buffer Overflow Vulnerability iDefense Security Advisory 04.16.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 16, 2007 I. BACKGROUND Akamai Technologies, Inc's provides distributed computing platform for global Internet content caching and...

Yahoo Messenger AudioConf ActiveX control buffer overflow

Added: 04/12/2007 CVE: CVE-2007-1680 BID: 23291 OSVDB: 34319 Background Yahoo! Messenger is an instant messaging application. It includes the AudioConf ActiveX control which is provided by yacscom.dll. Problem A buffer overflow vulnerability in the AudioConf ActiveX control allows command executi...

Yahoo Messenger AudioConf ActiveX control buffer overflow

Added: 04/12/2007 CVE: CVE-2007-1680 BID: 23291 OSVDB: 34319 Background Yahoo! Messenger is an instant messaging application. It includes the AudioConf ActiveX control which is provided by yacscom.dll. Problem A buffer overflow vulnerability in the AudioConf ActiveX control allows command executi...

Yahoo Messenger AudioConf ActiveX control buffer overflow

Added: 04/12/2007 CVE: CVE-2007-1680 BID: 23291 OSVDB: 34319 Background Yahoo! Messenger is an instant messaging application. It includes the AudioConf ActiveX control which is provided by yacscom.dll. Problem A buffer overflow vulnerability in the AudioConf ActiveX control allows command executi...

HP Mercury Interactive Quality Center Spider Module ActiveX control stack buffer overflow

Overview The HP Mercury Interactive Quality Center Spider Module ActiveX control contains a stack buffer overflow, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description HP Mercury Interactive Quality Center includes an ActiveX control...