6067 matches found
Microsoft Office 2000 Advisory
@Stake Inc. L0pht Research Labs www.atstake.com www.L0pht.com Security Advisory Advisory Name: Microsoft Office 2000 UA Control Scripting Release Date: 5-12-2000 Application: Microsoft Office 2000 Platform: Windows 95/98, NT 4.0 and 2000 Severity: Malicious active content can execute regardless o...
CVE-2000-0419
The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me" function in Office Help, aka the "Office 2000 UA Control" vulnerability...
RealNetworks Real Server 7.0 GameHouse dldisplay ActiveX control 0 - Denial of Service
RealNetworks Real Server 7.0 GameHouse dldisplay ActiveX control 0 - Denial of Service source: https://www.securityfocus.com/bid/1128/info Sending malformed packets to port 7070 will cause Real Server to stop responding. Restarting the server will be required in order to re-establish normal...
microsoft-install.txt
Juan asked me to forward this message from him to the list. He has discovered that an ActiveX control shipped with IE can be used to install software components signed by Microsoft without prompting the user. This of curse raises trust issues. Someone, not necessarily Microsoft, could use this...
CVE-1999-0669
The Eyedog ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy...
CVE-1999-0670
CVE-1999-0670 documents a buffer overflow in the Eyedog ActiveX control that allows a remote attacker to execute arbitrary commands. This is corroborated by multiple connected entries (NVD, CVE List, Red Hat, EUVD). The exact vulnerable versions, affected products, exploit details, and remediatio...
CVE-1999-0670: Undefined Security Weakness
Buffer overflow in the Eyedog ActiveX control allows a remote attacker to execute arbitrary commands...
CVE-1999-0669: Undefined Security Weakness
The Eyedog ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy...
CVE-1999-0917
The Preloader ActiveX control used by Internet Explorer allows remote attackers to read arbitrary files...
CVE-1999-0917: Undefined Security Weakness
The Preloader ActiveX control used by Internet Explorer allows remote attackers to read arbitrary files...
Microsoft Internet Explorer 5 Media Player - ActiveX Error Message
Microsoft Internet Explorer 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4 Media Player ActiveX Error Message Vulnerability source: https://www.securityfocus.com/bid/793/info The Windows Media Player ActiveX control, shipped with IE 5, returns a specific error code if it is instructed to...
Microsoft Internet Explorer 5 Media Player - ActiveX Error Message
Microsoft Internet Explorer 5 Media Player - ActiveX Error Message Microsoft Internet Explorer 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4 Media Player ActiveX Error Message Vulnerability source: https://www.securityfocus.com/bid/793/info The Windows Media Player ActiveX control,...
CVE-2000-0329
A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, aka the "Active Setup Control" vulnerability...
Real Networks GameHouse dldisplay ActiveX control - Port Buffer Overflow (1)
source: https://www.securityfocus.com/bid/767/info At installation, the Real Server software randomly selects an unused port as the remote administration port. This port is used by Real Server's remote web administration feature. To access this feature, the correct port must be specified and a...
Real Networks GameHouse dldisplay ActiveX control - Port Buffer Overflow (2)
// source: https://www.securityfocus.com/bid/767/info At installation, the Real Server software randomly selects an unused port as the remote administration port. This port is used by Real Server's remote web administration feature. To access this feature, the correct port must be specified and a...
CVE-1999-0384
The Forms 2.0 ActiveX control included with Visual Basic for Applications 5.0 can be used to read text from a user's clipboard when the user accesses documents with ActiveX content...
CVE-1999-0487
The vulnerability CVE-1999-0487 affects the DHTML Edit ActiveX control (dhtmled.ocx) used by Internet Explorer. The control can read arbitrary local files, enabling an attacker to exfiltrate data through the browser. Concrete details confirm affected software and root cause: Internet Explorer wit...
CVE-1999-0384: Undefined Security Weakness
The Forms 2.0 ActiveX control included with Visual Basic for Applications 5.0 can be used to read text from a user's clipboard when the user accesses documents with ActiveX content...