CVE-2006-6410

Buffer overflow in an ActiveX control in VMWare 5.5.1 allows local users to execute arbitrary code via a long VmdbDb parameter to the Initialize function...

CVE-2006-6410

The CVE-2006-6410 entry describes a buffer overflow in an ActiveX control in VMware 5.5.1 that allows local users to execute arbitrary code by passing a long VmdbDb parameter to the Initialize function. The NVD entry corroborates this description and lists a CVSSv2 base score of 4.6 (Medium) with...

Microsoft Internet Explorer IMSKDIC.DLL拒绝服务漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer实例化IMSKDIC.DLL COM对象存在问题，远程攻击者可以利用漏洞进行内存破坏攻击，可能以进程权限执行任意指令。 当Microsoft Internet Explorer尝试以ActiveX控件实例化IMSKDIC.DLLMicrosoft IME COM对象，可能破坏系统内存造成拒绝服务，可能导致任意代码执行。 Microsoft Internet Explorer 6.0 SP2 Microsoft Internet Explorer 6.0...

Microsoft Internet Explorer CHTSKDIC.DLL拒绝服务漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer实例化CHTSKDIC.DLL COM对象存在问题，远程攻击者可以利用漏洞进行内存破坏攻击，可能以进程权限执行任意指令。 当Microsoft Internet Explorer尝试以ActiveX控件实例化CHTSKDIC.DLLMicrosoft IME COM对象，可能破坏系统内存造成拒绝服务，可能导致任意代码执行。 Microsoft Internet Explorer 6.0 SP2 Microsoft Internet Explorer 6....

AOL ActiveX element buffer overflow

Buffer overflow in CDDBControlAOL.CDDBAOLControl ActiveX control...

[SA23043] AOL CDDBControl ActiveX Control "SetClientInfo()" Buffer Overflow

TITLE: AOL CDDBControl ActiveX Control "SetClientInfo" Buffer Overflow SECUNIA ADVISORY ID: SA23043 VERIFY ADVISORY: http://secunia.com/advisories/23043/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: AOL 9.x http://secunia.com/product/6840/ AOL 8.x...

CVE-2006-6410: Undefined Security Weakness

Buffer overflow in an ActiveX control in VMWare 5.5.1 allows local users to execute arbitrary code via a long VmdbDb parameter to the Initialize function...

Adobe Reader < 8.0 AcroPDF ActiveX Control Multiple Vulnerabilities

The remote host contains a version of the 'AcroPDF' ActiveX control included with Adobe Reader and Acrobat. The version of this ActiveX control on the remote host reportedly exposes several methods that fail to handle malformed arguments. If an attacker can trick a user on the affected host into...

CVE-2006-6236

Adobe Reader Adobe Acrobat Reader 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument string to the 1 src, 2 setPageMode, 3 setLayoutMode, and 4 setNamedDest methods in an AcroPDF ActiveX control, a different set of vector...

CVE-2006-6236

Adobe Reader/AcroPDF ActiveX in Windows is affected by CVE-2006-6027 and CVE-2006-6236. CVE-2006-6027 describes a memory corruption flaw in the AcroPDF ActiveX control, exploitable via the LoadFile method path, or related argument handling, potentially allowing remote code execution. CVE-2006-623...

CVE-2006-6236: Undefined Security Weakness

Adobe Reader Adobe Acrobat Reader 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument string to the 1 src, 2 setPageMode, 3 setLayoutMode, and 4 setNamedDest methods in an AcroPDF ActiveX control, a different set of vector...

Acer LunchApp.APlunch (ActiveX Control) Command Execution Exploit

Exploit for unknown platform in category remote exploits ================================================================= Acer LunchApp.APlunch ActiveX Control Command Execution Exploit ================================================================= hahaha.Run"c",...

Acer LunchApp.APlunch - ActiveX Control Command Execution

hahaha.Run"c", "\windows\system32\calc.exe", ""; milw0rm.com 2006-11-30...

Acer LunchApp.APlunch - ActiveX Control Command Execution

Acer LunchApp.APlunch - ActiveX Control Command Execution hahaha.Run"c", "\windows\system32\calc.exe", ""; milw0rm.com 2006-11-30...

WinZip FileView ActiveX control unsafe method

Added: 11/27/2006 CVE: CVE-2006-5198 BID: 21060 OSVDB: 30433 Background WinZip includes the FileView ActiveX control which provides a user interface similar to the file view pane in Windows Explorer. Problem The FileView ActiveX control is marked "safe for scripting" and exposes several unsafe...

WinZip FileView ActiveX control unsafe method

Added: 11/27/2006 CVE: CVE-2006-5198 BID: 21060 OSVDB: 30433 Background WinZip includes the FileView ActiveX control which provides a user interface similar to the file view pane in Windows Explorer. Problem The FileView ActiveX control is marked "safe for scripting" and exposes several unsafe...

WinZip FileView ActiveX control unsafe method

Added: 11/27/2006 CVE: CVE-2006-5198 BID: 21060 OSVDB: 30433 Background WinZip includes the FileView ActiveX control which provides a user interface similar to the file view pane in Windows Explorer. Problem The FileView ActiveX control is marked "safe for scripting" and exposes several unsafe...

CVE-2006-6121

Acer Notebook LunchApp.APlunch ActiveX control allows remote attackers to execute arbitrary commands by calling the Run method...

CVE-2006-6121

Acer Notebook LunchApp.APlunch ActiveX control allows remote attackers to execute arbitrary commands by calling the Run method...

CVE-2006-6121: Undefined Security Weakness

Acer Notebook LunchApp.APlunch ActiveX control allows remote attackers to execute arbitrary commands by calling the Run method...