CVE-2006-3424: Undefined Security Weakness

Multiple buffer overflows in WebEx Downloader ActiveX Control, possibly in versions before November 2005, allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2006-3391

The Execute function in iMBCContents ActiveX Control before 2.0.0.59 allows remote attackers to execute arbitrary files via the file URI handler...

CVE-2006-3357

Heap-based buffer overflow in HTML Help ActiveX control hhctrl.ocx in Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code by repeatedly setting the Image field of an Internet.HHCtrl.1 object to certain values,...

CVE-2006-3391

The Execute function in iMBCContents ActiveX Control before 2.0.0.59 allows remote attackers to execute arbitrary files via the file URI handler...

CVE-2006-3391

This CVE affects the iMBCContents ActiveX Control prior to 2.0.0.59. The vulnerability resides in the Execute function, which allows remote attackers to run arbitrary files via the file URI handler. Impact is remote code execution with partial confidentiality, integrity, and availability implicat...

Microsoft Internet Explorer 5.0.16.0 - Structured Graphics Control Denial of Service

Microsoft Internet Explorer 5.0.16.0 - Structured Graphics Control Denial of Service source: https://www.securityfocus.com/bid/18855/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability because it fails to handle ActiveX controls properly. This issue is triggered when an...

Touch ActiveX control code execution

Execute method allows execution of arbitrary files...

CVE-2006-3391: Undefined Security Weakness

The Execute function in iMBCContents ActiveX Control before 2.0.0.59 allows remote attackers to execute arbitrary files via the file URI handler...

Gracenote CDDBControl ActiveX Control Option String Overflow

The Windows remote host contains the Gracenote CDDBControl ActiveX control, which is used by various products, including AOL's software, to lookup CD information in the Gracenote CDDB and is commonly marked as safe for scripting. The version of this ActiveX control on the remote host reportedly...

CVE-2006-3134

Buffer overflow in GraceNote CDDBControl ActiveX Control, as used by multiple products that use Gracenote CDDB, allows remote attackers to execute arbitrary code via a long option string...

CVE-2006-3134

Buffer overflow in GraceNote CDDBControl ActiveX Control, as used by multiple products that use Gracenote CDDB, allows remote attackers to execute arbitrary code via a long option string...

CVE-2006-3134

CVE-2006-3134 concerns the GraceNote CDDBControl ActiveX control. The vulnerability is a buffer overflow in the CDDB ActiveX object triggered by a long option string, allowing a remote attacker to execute arbitrary code on systems where the control is present. Affected vendors include AOL, Gracen...

CVE-2006-3134: Undefined Security Weakness

Buffer overflow in GraceNote CDDBControl ActiveX Control, as used by multiple products that use Gracenote CDDB, allows remote attackers to execute arbitrary code via a long option string...

CVE-2006-3217

JaguarEditControl JEdit ActiveX Control 1.1.0.20 and earlier allows remote attackers to obtain sensitive information, such as the username and MAC and IP addresses, by setting the test field to certain values such as 2404 or 2790, then reading the information from the .JText field...

CVE-2006-3217

The provided records identify CVE-2006-3217 as affecting JaguarEditControl (JEdit) ActiveX Control, version 1.1.0.20 and earlier. The vulnerability arises from a processing flaw involving a test field whose values (e.g., 2404 or 2790) can trigger leakage of sensitive information read from the .JT...

CVE-2006-3217: Undefined Security Weakness

JaguarEditControl JEdit ActiveX Control 1.1.0.20 and earlier allows remote attackers to obtain sensitive information, such as the username and MAC and IP addresses, by setting the test field to certain values such as 2404 or 2790, then reading the information from the .JText field...

JEdit ActiveX Control Information Disclosure vulnerability

JEdit ActiveX Control Information Disclosure vulnerability Publish Date: July 17, 2006 Status: SRLabs.net contacted with the vendor at July 7 2006 to request security contact for sending information about vulnerability but couldn't get any response yet Vendor: Jaguarsoft http://www.jaguarsoft.com...

CVE-2006-2383

Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to execute arbitrary code via "unexpected data" related to "parameter validation" in the DXImageTransform.Microsoft.Light ActiveX control, which causes Internet Explorer to crash in a w...

Code injection

Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to execute arbitrary code via "unexpected data" related to "parameter validation" in the DXImageTransform.Microsoft.Light ActiveX control, which causes Internet Explorer to crash in a w...

CVE-2006-2383

Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to execute arbitrary code via "unexpected data" related to "parameter validation" in the DXImageTransform.Microsoft.Light ActiveX control, which causes Internet Explorer to crash in a w...