SAP GUI ActiveX unauthorized access

EAI WebViewer2D, VSFlexGrid, SAPBExCommonResources components insecure method...

Viscom Software Movie Player Pro ActiveX Control DrawText Buffer Overflow

Added: 07/16/2010 CVE: CVE-2010-0356 BID: 40719 OSVDB: 61634 Background Viscom Movie Player Pro SDK ActiveX is a software development kit for Microsoft Windows environments to incorporate an advanced media player with overlay text and images. Problem The MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX...

Viscom Software Movie Player Pro ActiveX Control DrawText Buffer Overflow

Added: 07/16/2010 CVE: CVE-2010-0356 BID: 40719 OSVDB: 61634 Background Viscom Movie Player Pro SDK ActiveX is a software development kit for Microsoft Windows environments to incorporate an advanced media player with overlay text and images. Problem The MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX...

FathFTP ActiveX Control Multiple Buffer Overflow Vulnerabilities

This host is installed with FathFTP and is prone to multiple buffer overflow vulnerabilities. OpenVAS Vulnerability Test $Id: gbfathftpclientmultbofvuln.nasl 5306 2017-02-16 09:00:16Z teissa $ FathFTP ActiveX Control Multiple Buffer Overflow Vulnerabilities Authors: Antu Sanadi Copyright: Copyrig...

Viscom Software Movie Player Pro ActiveX Control DrawText Buffer Overflow

Added: 07/16/2010 CVE: CVE-2010-0356 BID: 40719 OSVDB: 61634 Background Viscom Movie Player Pro SDK ActiveX is a software development kit for Microsoft Windows environments to incorporate an advanced media player with overlay text and images. Problem The MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX...

FathFTP ActiveX Control Multiple Buffer Overflow Vulnerabilities

FathFTP is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Viscom Software Movie Player Pro ActiveX Control DrawText Buffer Overflow

Added: 07/16/2010 CVE: CVE-2010-0356 BID: 40719 OSVDB: 61634 Background Viscom Movie Player Pro SDK ActiveX is a software development kit for Microsoft Windows environments to incorporate an advanced media player with overlay text and images. Problem The MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX...

Microsoft Internet Explorer - Daxctle.OCX KeyFrame Method Heap Buffer Overflow (MS06-067) (Metasploit)

$Id: ms06067keyframe.rb 9842 2010-07-16 02:33:25Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

CVE-2010-0814

The Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 and 2007 SP1 and SP2 do not properly interact with the memory-allocation approach used by Internet Explorer during instantiation, which allows remote attackers to execute arbitrary code via a web site that...

Design/Logic Flaw

The Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 and 2007 SP1 and SP2 do not properly interact with the memory-allocation approach used by Internet Explorer during instantiation, which allows remote attackers to execute arbitrary code via a web site that...

Memory corruption

The FieldList ActiveX control in the Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 does not properly interact with the memory-access approach used by Internet Explorer and Office during instantiation, which allows remote attackers to execute arbitrary code or...

Microsoft Access ActiveX控件实例化远程代码执行漏洞（MS10-044）

BUGTRAQ ID: 41442 CVE ID: CVE-2010-0814 Microsoft Access是微软Office套件中的关系数据库管理系统。 在以特定的顺序实例化ACCWIZ.dll库所提供的ImexGrid和FieldList等ActiveX控件时，执行流可能会进入到未分配的内存区域，导致以当前用户的权限执行任意代码。 Microsoft Access 2007 SP2 Microsoft Access 2007 SP1 Microsoft Access 2003 SP3 临时解决方法： 禁止在Internet...

Microsoft Office Access FieldList ActiveX控件实例化内存破坏漏洞（MS10-044）

BUGTRAQ ID: 41444 CVE ID: CVE-2010-1881 Microsoft Access是微软Office套件中的关系数据库管理系统。 Microsoft Access实例化FieldList ActiveX控件的未初始化变量时存在内存破坏漏洞，成功利用此漏洞的攻击者可能以登录用户的身份运行任意代码。 Microsoft Access 2003 SP3 临时解决方法： 禁止在Internet Explorer中运行COM对象。要为值为53230327-172B-11D0-AD40-00A0C90DC8D9的CLSID设置 kill...

CVE-2010-0814

The Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 and 2007 SP1 and SP2 do not properly interact with the memory-allocation approach used by Internet Explorer during instantiation, which allows remote attackers to execute arbitrary code via a web site that...

CVE-2010-0814

CVE-2010-0814 involves remote code execution in Microsoft Office Access ActiveX controls. The vulnerability arises in the ACCWIZ.dll-based Access Wizard Controls (including ImexGrid and FieldList) when Internet Explorer instantiates multiple Access ActiveX controls, interacting with memory alloca...

CVE-2010-1881

The FieldList ActiveX control in the Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 does not properly interact with the memory-access approach used by Internet Explorer and Office during instantiation, which allows remote attackers to execute arbitrary code or...

CVE-2010-1881

CVE-2010-1881 concerns ACCWIZ.dll (Microsoft Access Wizard Controls) in Microsoft Office Access 2003 SP3. The issue is a memory corruption/Uninitialized Variable vulnerability in the ACCWIZ.dll ActiveX controls (FieldList/ACCWIZ), exploited when instantiated by Internet Explorer or Office with cr...

ZDI-10-117: Microsoft Office Access AccWizObjects ActiveX Control Uninitialized Imports Remote Code Execution Vulnerability

ZDI-10-117: Microsoft Office Access AccWizObjects ActiveX Control Uninitialized Imports Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-117 July 13, 2010 -- CVE ID: CVE-2010-0814 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Microsoft --...

Microsoft Office Access ActiveX Controls Remote Code Execution Vulnerabilities (982335)

This host is missing a critical security update according to Microsoft Bulletin MS10-044. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Security Bulletin MS10-044 - Critical Vulnerabilities in Microsoft Office Access ActiveX Controls Could Allow Remote Code Execution (982335)

Microsoft Security Bulletin MS10-044 - Critical Vulnerabilities in Microsoft Office Access ActiveX Controls Could Allow Remote Code Execution 982335 Published: July 13, 2010 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in...