5643 matches found
SiteKiosk < 6.5.150 Multiple Vulnerabilities
According to its version number, the installation of SiteKiosk on the remote host contains an unspecified ActiveX control that is marked as 'safe for scripting' yet exposes two dangerous methods that reading and downloading of any file from the kiosk. In addition, it fails to completely sanitize...
rediffbol.txt
Rediff Bol Downloader Allows Downloading and Spawning Arbitary Files Affected Program : Rediff Bol Download ActiveX ActiveX OCX Control that downloads the Rediff Bol Messenger setup and spawns it. Related URL : http://messenger.rediff.com/newbol/ Discovered by : Gregory R. Panakkal Vulnerability...
Rediff Bol Downloader (ActiveX Control) Execute Local File Exploit
No description provided by source. !-- Rediff Bol Downloader ActiveX Allows Downloading and Spawning Arbitary Files Affected Program : Rediff Bol Download ActiveX ActiveX OCX Control that downloads the Rediff Bol Messenger setup and spawns it. Related URL : http://messenger.rediff.com/newbol/...
CVE-2006-6847
An ActiveX control in ierpplug.dll for RealNetworks RealPlayer 10.5 allows remote attackers to cause a denial of service Internet Explorer 7 crash by invoking the RealPlayer.OpenURLInPlayerBrowser method with a long second argument...
CVE-2006-6488
Stack-based buffer overflow in the DoModal function in the Dialog Wrapper Module ActiveX control DlgWrapper.dll before 8.4.166.0, as used by ICONICS OPC Enabled Gauge, Switch, and Vessel ActiveX, allows remote attackers to execute arbitrary code via a long 1 FileName or 2 Filter argument...
CVE-2006-6884
Buffer overflow in the WZFILEVIEW.FileViewCtrl.61 ActiveX control aka Sky Software "FileView" ActiveX control for WinZip 10.0 Build 6667 allows remote attackers to execute arbitrary code via a long argument to the CreateNewFolderFromName method, a different vulnerability than CVE-2006-5198...
CVE-2006-6838
Rediff Bol Downloader ActiveX OCX control allows remote attackers to execute arbitrary files, and obtain sensitive information usernames and pathnames, via a URL in the url vbscript parameter...
[Full-disclosure] Rediff Bol Downloader ActiveX Allows Downloading and Spawning Arbitary Files
Rediff Bol Downloader ActiveX Allows Downloading and Spawning Arbitary Files Affected Program : Rediff Bol Download ActiveX ActiveX OCX Control that downloads the Rediff Bol Messenger setup and spawns it. Related URL : http://messenger.rediff.com/newbol/ Discovered by : Gregory R. Panakkal...
Rediff Bol Downloader (ActiveX Control) Execute Local File Exploit
Exploit for unknown platform in category remote exploits ================================================================== Rediff Bol Downloader ActiveX Control Execute Local File Exploit ================================================================== rboldwn.url = "file://C:/WINNT/Notepad.ex...
PT-2006-7435 · Rediff · Rediff Bol Downloader Activex
Name of the Vulnerable Software and Affected Versions: Rediff Bol Downloader ActiveX OCX control affected versions not specified Description: The issue allows remote attackers to execute arbitrary files and obtain sensitive information, such as usernames and pathnames, by providing a URL in the u...
Rediff Bol Downloader - ActiveX Control Execute Local File
Rediff Bol Downloader - ActiveX Control Execute Local File rboldwn.url = "file://C:/WINNT/Notepad.exe" rboldwn.fontsize = 14 rboldwn.barcolor = EE4E00 rboldwn.start = "start" milw0rm.com 2006-12-31...
Rediff Bol Downloader - ActiveX Control Execute Local File
rboldwn.url = "file://C:/WINNT/Notepad.exe" rboldwn.fontsize = 14 rboldwn.barcolor = EE4E00 rboldwn.start = "start" milw0rm.com 2006-12-31...
[SA23463] NeoTrace Express/Pro ActiveX Control "TraceTarget()" Buffer Overflow
TITLE: NeoTrace Express/Pro ActiveX Control "TraceTarget" Buffer Overflow SECUNIA ADVISORY ID: SA23463 VERIFY ADVISORY: http://secunia.com/advisories/23463/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: NeoTrace Pro 3.x http://secunia.com/product/7223/ NeoTrace...
CVE-2006-6707
Stack-based buffer overflow in the NeoTraceExplorer.NeoTraceLoader ActiveX control NeoTraceExplorer.dll in NeoTrace Express 3.25 and NeoTrace Pro aka McAfee Visual Trace 3.25 allows remote attackers to execute arbitrary code via a long argument string to the TraceTarget method. NOTE: The provenan...
CVE-2006-6659
The Microsoft Office Outlook Recipient ActiveX control ole32.dll in Windows XP SP2 allows remote attackers to cause a denial of service Internet Explorer 7 hang via crafted HTML...
CVE-2006-6659
The Microsoft Office Outlook Recipient ActiveX control ole32.dll in Windows XP SP2 allows remote attackers to cause a denial of service Internet Explorer 7 hang via crafted HTML...
RealPlayer 10.5 - ActiveX Control Denial of Service
RealPlayer.Initialize"AA","defaultV" milw0rm.com 2006-12-20...
RealPlayer 10.5 (ActiveX Control) Denial of Service Exploit
Exploit for unknown platform in category dos / poc =========================================================== RealPlayer 10.5 ActiveX Control Denial of Service Exploit =========================================================== RealPlayer.Initialize"AA","defaultV" 0day.today 2018-01-05...
Microsoft Outlook - ActiveX Control Remote Internet Explorer Denial of Service
source: https://www.securityfocus.com/bid/21649/info The Microsoft Office Outlook Recipient Control is prone to a denial-of-service vulnerability. An attacker can exploit this issue to trigger denial-of-service conditions in Internet Explorer or other applications that use the ActiveX control...
Microsoft Outlook - ActiveX Control Remote Internet Explorer Denial of Service
Microsoft Outlook - ActiveX Control Remote Internet Explorer Denial of Service source: https://www.securityfocus.com/bid/21649/info The Microsoft Office Outlook Recipient Control is prone to a denial-of-service vulnerability. An attacker can exploit this issue to trigger denial-of-service...