5643 matches found
CAID 34509 - CA eTrust Antivirus WebScan vulnerabilities
Title: CA eTrust Antivirus WebScan vulnerabilities CA Vulnerability ID CAID: 34509 CA Advisory Date: 2006-08-03 Discovered By: Matt Murphy of the TippingPoint Security Research Team Impact: Remote attacker can execute arbitrary code. Summary: Ca eTrust Antivirus WebScan is a free, web-based virus...
CVE-2006-3961
Buffer overflow in McSubMgr ActiveX control mcsubmgr.dll in McAfee Security Center 6.0.23 for Internet Security Suite 2006, Wireless Home Network Security, Personal Firewall Plus, VirusScan, Privacy Service, SpamKiller, AntiSpyware, and QuickClean allows remote user-assisted attackers to execute...
CVE-2006-3961
The CVE-2006-3961 vulnerability is a stack buffer overflow in the McAfee Subscription Manager ActiveX control (mcsubmgr.dll) used by McAfee Security Center and related products. A long/ crafted input passed to versus printf-family code (vsprintf) can overflow the stack, potentially allowing remot...
CVE-2006-3925
Stack-based buffer overflow in ITIRecorder.MicRecorder ActiveX control in iarecord.dll in InterActual Player before 2.6 allows remote attackers to execute arbitrary code via a long argument to the Files method. NOTE: the provenance of this information is unknown; the details are obtained from thi...
WebEx Downloader ActiveX Control Command Injection
The Windows remote host contains the WebEx Downloader ActiveX control, which is used when attending or hosting a meeting using WebEx, a sharing and conferencing application for Windows. The version of this ActiveX control on the remote host reportedly allows an attacker to deliver arbitrary...
Trend Micro OfficeScan 7.3 Multiple Vulnerabilities
The remote host appears to be running Trend Micro OfficeScan Server. This version of OfficeScan is vulnerable to multiple stack overflows in CGI programs that could allow a remote attacker to execute code in the context of the remote server. Note that OfficeScan server under Windows runs with...
[SA20969] eBay Enhanced Picture Services ActiveX Control Buffer Overflow
---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Reversing must be a passion as your skills will be challenged on a daily basis and you will be working several hours everyday in IDA, Ollydbg, and with BinDiff. Often, it is also requir...
Microsoft Internet Explorer 6 - RDS.DataControl Denial of Service
Microsoft Internet Explorer 6 - RDS.DataControl Denial of Service source: https://www.securityfocus.com/bid/18900/info Microsoft Internet Explorer 6 is reportedly prone to a denial-of-service vulnerability because the application fails to perform boundary checks before copying user-supplied data...
Microsoft Internet Explorer 6 RDS.DataControl Denial of Service Vulnerability
Description Microsoft Internet Explorer 6 is reportedly prone to a denial-of-service vulnerability because the application fails to perform boundary checks before copying user-supplied data into sensitive process buffers. This issue is triggered when an attacker convinces a victim to activate a...
CVE-2006-3424
Multiple buffer overflows in WebEx Downloader ActiveX Control, possibly in versions before November 2005, allow remote attackers to execute arbitrary code via unspecified vectors...
CVE-2006-3423
CVE-2006-3423 affects WebEx Downloader ActiveX/Java controls prior to version 2.1.0.0. The vulnerability stems from lack of validation of downloaded components and control parameters (notably GpcUrlRoot and GpcIniFileName), allowing an attacker to supply a configuration file that can lead to DLL ...
CVE-2006-3424
CVE-2006-3424 concerns multiple buffer overflows in the WebEx Downloader ActiveX Control, potentially affecting versions prior to November 2005. The vulnerability could allow remote code execution by an attacker via unspecified attack vectors. The connected documents confirm the affected componen...
CVE-2006-3391
The Execute function in iMBCContents ActiveX Control before 2.0.0.59 allows remote attackers to execute arbitrary files via the file URI handler...
CVE-2006-3391
The Execute function in iMBCContents ActiveX Control before 2.0.0.59 allows remote attackers to execute arbitrary files via the file URI handler...
CVE-2006-3391
This CVE affects the iMBCContents ActiveX Control prior to 2.0.0.59. The vulnerability resides in the Execute function, which allows remote attackers to run arbitrary files via the file URI handler. Impact is remote code execution with partial confidentiality, integrity, and availability implicat...
CVE-2006-3357
Heap-based buffer overflow in HTML Help ActiveX control hhctrl.ocx in Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code by repeatedly setting the Image field of an Internet.HHCtrl.1 object to certain values,...
Touch ActiveX control code execution
Execute method allows execution of arbitrary files...
Microsoft Internet Explorer 5.0.16.0 - Structured Graphics Control Denial of Service
Microsoft Internet Explorer 5.0.16.0 - Structured Graphics Control Denial of Service source: https://www.securityfocus.com/bid/18855/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability because it fails to handle ActiveX controls properly. This issue is triggered when an...
Gracenote CDDBControl ActiveX Control Option String Overflow
The Windows remote host contains the Gracenote CDDBControl ActiveX control, which is used by various products, including AOL's software, to lookup CD information in the Gracenote CDDB and is commonly marked as safe for scripting. The version of this ActiveX control on the remote host reportedly...