VMware COM API ActiveX Control Buffer Overflow (CVE-2008-3892)

VMware API is developed by VMware Inc. to provide a complete set of language-neutral interfaces to the VMware Virtual Infrastructure Management VIM Framework. When the Windows version, VMware COM API, is installed on a Windows hosting computer, an ActiveX control is registered. A buffer overflow...

Yahoo Messenger YMailAttach ActiveX Control Buffer Overflow (CVE-2006-6603)

Yahoo! Messenger is a instant messaging communicating application developed by Yahoo! Inc. When a user registers a Yahoo! user account, it is bundled with the Yahoo! Mail service, which is a web-based email service. Users can use a web browser to read, send and maintain their email messages. The...

Symantec Antivirus Client Proxy 10 Buffer Overflow

Exploit for unknown platform in category local exploits ================================================== Symantec Antivirus Client Proxy 10 Buffer Overflow ================================================== Application: Symantec Antivirus Client Proxy Versions Affected: Version 10 Vendor URL:...

CA Multiple Products gui_cm_ctrls ActiveX Control Memory Corruption (CVE-2008-1786)

CA Computer Associates provides a group of products intended for enhancing the security of enterprise as well as individual clients. A memory corruption vulnerability exists in CA Multiple Products. The issue is due to an insufficient verification of function arguments. A remote attacker could...

Adobe Acrobat Local File Disclosure (CVE-2005-0035)

Adobe Acrobat is a product for creating, and distributing PDF documents. Adobe Acrobat Reader is a free application that allows for viewing and printing of PDF documents. The Windows versions of Acrobat and Acrobat Reader are packaged with an ActiveX control in the file pdf.ocx to allow the displ...

Microsoft Data Analyzer ActiveX控件栈破坏漏洞（MS10-008）

BUGTRAQ ID: 38045 CVE ID: CVE-2010-0252 Microsoft Data Analyzer ActiveX控件允许从基于COM的开发应用程序（如Visual Basic）以编程方式控制Data Analyzer。 在Internet Explorer中实例化Microsoft Data Analyzer ActiveX控件（max3activex.dll）时，该控件可能会破坏栈状态，导致执行任意代码。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP...

Buffer overflow

Buffer overflow in the cliproxy.objects.1 ActiveX control in the Symantec Client Proxy CLIproxy.dll in Symantec AntiVirus 10.0.x, 10.1.x before MR9, and 10.2.x before MR4; and Symantec Client Security 3.0.x and 3.1.x before MR9 allows remote attackers to execute arbitrary code via a long argument...

CVE-2010-0108

The CVE-2010-0108 issue is a buffer overflow in the Symantec Client Proxy ActiveX (CLIproxy.dll). Affected products include Symantec AntiVirus 10.0.x, 10.1.x before MR9, and 10.2.x before MR4, plus Symantec Client Security 3.0.x and 3.1.x before MR9. The underlying cause is insufficient boundary ...

CVE-2010-0108

Buffer overflow in the cliproxy.objects.1 ActiveX control in the Symantec Client Proxy CLIproxy.dll in Symantec AntiVirus 10.0.x, 10.1.x before MR9, and 10.2.x before MR4; and Symantec Client Security 3.0.x and 3.1.x before MR9 allows remote attackers to execute arbitrary code via a long argument...

Rising Online Virus Scanner v22.0.0.5 ActiveX Control DoS (Stack overflow)

No description provided by source. Exploit Title: Rising Online Virus Scanner ActiveX Control DoS Stack overflow Author: wirebonder Software Link: http://www.rising-global.com/products/online-scanner-intro.html Tested on: Windows XP sp3 ProgID: RavOLCtlLib.RavOnline ClassID:...

Rising Online Virus Scanner 22.0.0.5 - ActiveX Control Stack Overflow (Denial of Service)

Rising Online Virus Scanner 22.0.0.5 - ActiveX Control Stack Overflow Denial of Service Exploit Title: Rising Online Virus Scanner ActiveX Control DoS Stack overflow Author: wirebonder Software Link: http://www.rising-global.com/products/online-scanner-intro.html Tested on: Windows XP sp3 ProgID:...

Rising Online Virus Scanner v22.0.0.5 ActiveX Control DoS

Exploit for unknown platform in category dos / poc ========================================================================== Rising Online Virus Scanner v22.0.0.5 ActiveX Control DoS Stack overflow ========================================================================== Exploit Title: Rising...

Rising Online Virus Scanner 22.0.0.5 - ActiveX Control Stack Overflow (Denial of Service)

Exploit Title: Rising Online Virus Scanner ActiveX Control DoS Stack overflow Author: wirebonder Software Link: http://www.rising-global.com/products/online-scanner-intro.html Tested on: Windows XP sp3 ProgID: RavOLCtlLib.RavOnline ClassID: 9FAFB576-6933-4CCC-AB3D-B988EC43D04E Member: Scan File:...

Rising Online Virus Scanner Active-X Denial Of Service

Exploit Title: Rising Online Virus Scanner ActiveX Control DoS Stack overflow Date: 17/02/2010 Author: wirebonder Software Link: http://www.rising-global.com/products/online-scanner-intro.html Version: 22.0.0.5 Tested on: Windows XP sp3 CVE : n/a Code : ProgID: RavOLCtlLib.RavOnline ClassID:...

Worldweaver DX Studio Player shell.execute() Command Execution

This module exploits a command execution vulnerability within the DX Studio Player from Worldweaver for versions 3.0.29 and earlier. The player is a browser plugin for IE ActiveX and Firefox dll. When an unsuspecting user visits a web page referring to a specially crafted .dxstudio document, an...

Symantec Client Proxy Buffer Overflow in Older Product Versions

SUMMARY The Symantec Client Proxy integrated into older versions of Symantec AntiVirus and Symantec Client Security is vulnerable to a buffer overflow. AFFECTED PRODUCTS Product | Version | Solutions ---|---|--- Symantec AntiVirus | 10.0.x | Upgrade to SAV 10.1 MR9 10.1.x | Upgrade to to MR9 10.2...

Input validation errors in SYMLTCOM.dll can lead to a buffer overflow.

SUMMARY The Symantec Client Proxy integrated into older versions of Symantec AntiVirus and Symantec Client Security is vulnerable to a buffer overflow. AFFECTED PRODUCTS Product | Version | Solutions ---|---|--- Symantec AntiVirus | 10.0.x | Upgrade to SAV 10.1 MR9 10.1.x | Upgrade to to MR9 10.2...

Symantec (Multiple Products) - Client Proxy ActiveX CLIproxy.dll Remote Overflow

Symantec Multiple Products - Client Proxy ActiveX CLIproxy.dll Remote Overflow source: https://www.securityfocus.com/bid/38222/info The Symantec Client Proxy ActiveX control is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on...

Worldweaver DX Studio Player <= 3.0.29 shell.execute() Command Execution

$Id: dxstudioplayerexec.rb 8541 2010-02-17 20:14:40Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Symantec (Multiple Products) - Client Proxy ActiveX 'CLIproxy.dll' Remote Overflow

source: https://www.securityfocus.com/bid/38222/info The Symantec Client Proxy ActiveX control is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Successful exploits allow remote attackers to execute arbitrary code ...