Microsoft Internet Explorer 6 - 'TSUserEX.dll' ActiveX Control Memory Corruption

source: https://www.securityfocus.com/bid/19570/info Microsoft Internet Explorer is prone to a memory-corruption vulnerability. This is related to the handling of the 'tsuserex.dll' COM object ActiveX control. Attackers may exploit this issue via a malicious web page to execute arbitrary code in...

Microsoft Internet Explorer 6 - MSOE.dll Denial of Service

Microsoft Internet Explorer 6 - MSOE.dll Denial of Service source: https://www.securityfocus.com/bid/19530/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability. This issue occurs because the application fails to load a DLL library when instantiated as an ActiveX control...

Microsoft Internet Explorer 6 - 'MSOE.dll' Denial of Service

source: https://www.securityfocus.com/bid/19530/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability. This issue occurs because the application fails to load a DLL library when instantiated as an ActiveX control. An attacker may exploit this issue to crash Internet...

Panda ActiveScan 5.53 - Ascan_6.asp ActiveX Control Cross-Site Scripting

Panda ActiveScan 5.53 - Ascan6.asp ActiveX Control Cross-Site Scripting source: https://www.securityfocus.com/bid/19471/info Panda ActiveScan is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have...

CVE-2006-3638: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Internet Explorer 5.01 and 6 does not properly handle uninitialized COM objects, which allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code, as demonstrated by the Nth function in the DirectAnimation.DATuple ActiveX control, aka "COM...

CAID 34509 - CA eTrust Antivirus WebScan vulnerabilities

Title: CA eTrust Antivirus WebScan vulnerabilities CA Vulnerability ID CAID: 34509 CA Advisory Date: 2006-08-03 Discovered By: Matt Murphy of the TippingPoint Security Research Team Impact: Remote attacker can execute arbitrary code. Summary: Ca eTrust Antivirus WebScan is a free, web-based virus...

CVE-2006-3961

Buffer overflow in McSubMgr ActiveX control mcsubmgr.dll in McAfee Security Center 6.0.23 for Internet Security Suite 2006, Wireless Home Network Security, Personal Firewall Plus, VirusScan, Privacy Service, SpamKiller, AntiSpyware, and QuickClean allows remote user-assisted attackers to execute...

CVE-2006-3961

The CVE-2006-3961 vulnerability is a stack buffer overflow in the McAfee Subscription Manager ActiveX control (mcsubmgr.dll) used by McAfee Security Center and related products. A long/ crafted input passed to versus printf-family code (vsprintf) can overflow the stack, potentially allowing remot...

CVE-2006-3961: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in McSubMgr ActiveX control mcsubmgr.dll in McAfee Security Center 6.0.23 for Internet Security Suite 2006, Wireless Home Network Security, Personal Firewall Plus, VirusScan, Privacy Service, SpamKiller, AntiSpyware, and QuickClean allows remote user-assisted attackers to execute...

CVE-2006-3925

Stack-based buffer overflow in ITIRecorder.MicRecorder ActiveX control in iarecord.dll in InterActual Player before 2.6 allows remote attackers to execute arbitrary code via a long argument to the Files method. NOTE: the provenance of this information is unknown; the details are obtained from thi...

CVE-2006-3762: Undefined Security Weakness

The Touch Control ActiveX control 2.0.0.55 allows remote attackers to read and possibly execute arbitrary files via a "file///" URI in the sPath parameter to the Execute function...

WebEx Downloader ActiveX Control Command Injection

The Windows remote host contains the WebEx Downloader ActiveX control, which is used when attending or hosting a meeting using WebEx, a sharing and conferencing application for Windows. The version of this ActiveX control on the remote host reportedly allows an attacker to deliver arbitrary...

Trend Micro OfficeScan 7.3 Multiple Vulnerabilities

The remote host appears to be running Trend Micro OfficeScan Server. This version of OfficeScan is vulnerable to multiple stack overflows in CGI programs that could allow a remote attacker to execute code in the context of the remote server. Note that OfficeScan server under Windows runs with...

[SA20969] eBay Enhanced Picture Services ActiveX Control Buffer Overflow

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Reversing must be a passion as your skills will be challenged on a daily basis and you will be working several hours everyday in IDA, Ollydbg, and with BinDiff. Often, it is also requir...

Microsoft Internet Explorer 6 RDS.DataControl Denial of Service Vulnerability

Description Microsoft Internet Explorer 6 is reportedly prone to a denial-of-service vulnerability because the application fails to perform boundary checks before copying user-supplied data into sensitive process buffers. This issue is triggered when an attacker convinces a victim to activate a...

Microsoft Internet Explorer 6 - RDS.DataControl Denial of Service

Microsoft Internet Explorer 6 - RDS.DataControl Denial of Service source: https://www.securityfocus.com/bid/18900/info Microsoft Internet Explorer 6 is reportedly prone to a denial-of-service vulnerability because the application fails to perform boundary checks before copying user-supplied data...

CVE-2006-3424

Multiple buffer overflows in WebEx Downloader ActiveX Control, possibly in versions before November 2005, allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2006-3423

CVE-2006-3423 affects WebEx Downloader ActiveX/Java controls prior to version 2.1.0.0. The vulnerability stems from lack of validation of downloaded components and control parameters (notably GpcUrlRoot and GpcIniFileName), allowing an attacker to supply a configuration file that can lead to DLL ...

CVE-2006-3424

CVE-2006-3424 concerns multiple buffer overflows in the WebEx Downloader ActiveX Control, potentially affecting versions prior to November 2005. The vulnerability could allow remote code execution by an attacker via unspecified attack vectors. The connected documents confirm the affected componen...

CVE-2006-3423: Improper Input Validation

WebEx Downloader ActiveX Control and WebEx Downloader Java before 2.1.0.0 do not validate downloaded components, which allows remote attackers to execute arbitrary code via a website that activates the GpcUrlRoot and GpcIniFileName ActiveX controls to cause the client to download a DLL file...