EasyMail SMTP ActiveX Control AddAttachment buffer overflow

Added: 12/10/2009 BID: 36440 OSVDB: 59939 Background QuikSoft EasyMail Objects is a set of ActiveX controls which provide e-mail functionality. QuikSoft EasyMail Objects is included with Oracle Document Capture among other products. Problem A stack buffer overflow vulnerability in the...

EasyMail SMTP ActiveX Control AddAttachment buffer overflow

Added: 12/10/2009 BID: 36440 OSVDB: 59939 Background QuikSoft EasyMail Objects is a set of ActiveX controls which provide e-mail functionality. QuikSoft EasyMail Objects is included with Oracle Document Capture among other products. Problem A stack buffer overflow vulnerability in the...

SAP GUI for Windows sapirrfc.dll Activex Overflow Exploit

Exploit for unknown platform in category remote exploits ========================================================= SAP GUI for Windows sapirrfc.dll Activex Overflow Exploit ========================================================= Title: SAP GUI for Windows sapirrfc.dll Activex Overflow Exploit...

DPI 1.1-Final Cross Site Scripting

view source print? andresg888 Vendor : http://www.image-host-script.com/ Contact : andresg8884tgmaildotcom Web: : www.ilegalintrusion.net & www.bl4ck-p0rtal.org Dork : No DoRk f0R ScRipT KiDDieS Example1: http://server/path/images.php?date=%3Cscript%3Ealert123456%3C/script%3E Example2:...

Adobe AIR < 1.5.3 Multiple Vulnerabilities (APSB09-19)

Binary data 5256.prm...

Adobe Flash PlugIn File Existence Data Disclosure (APSB09-19; CVE-2009-3951)

An Information Disclosure vulnerability has been reported in the Adobe Flash Player. The Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. A remote attacker may exploit this vulnerability to verify if a file exists on a remote vulnerable system. The...

CVE-2009-4225

Stack-based buffer overflow in the PestPatrol ActiveX control ppctl.dll 5.6.7.9 in CA eTrust PestPatrol allows remote attackers to execute arbitrary code via a long argument to the Initialize method...

Stack overflow

Stack-based buffer overflow in the PestPatrol ActiveX control ppctl.dll 5.6.7.9 in CA eTrust PestPatrol allows remote attackers to execute arbitrary code via a long argument to the Initialize method...

CVE-2009-4225

Stack-based buffer overflow in the PestPatrol ActiveX control ppctl.dll 5.6.7.9 in CA eTrust PestPatrol allows remote attackers to execute arbitrary code via a long argument to the Initialize method...

Persits XUpload ActiveX MakeHttpRequest Directory Traversal

This module exploits a directory traversal in Persits Software Inc's XUpload ActiveX controlversion 3.0.0.3 that's included in HP LoadRunner 9.5. By passing a string containing ".." sequences to the MakeHttpRequest method, an attacker is able to write arbitrary files to arbitrary locations on...

Yahoo! Messenger 'YahooBridgeLib.dll' ActiveX Control DoS Vulnerability

Yahoo! Messenger is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Novell iPrint Client multiple security vulnerabilities

Buffer overflows in ActiveX...

Stack overflow

Stack-based buffer overflow in the MYACTIVEX.MyActiveXCtrl.1 ActiveX control in MyActiveX.ocx 1.4.8.0 in Haihaisoft Universal Player allows remote attackers to execute arbitrary code via a long URL property value. NOTE: some of these details are obtained from third party information...

CVE-2009-4219

CVE-2009-4219 concerns Haihaisoft Universal Player’s MyActiveX.ocx 1.4.8.0, specifically the MYACTIVEX.MyActiveXCtrl.1 ActiveX control. The connected PT-SECURITY entry documents a stack-based buffer overflow that can be triggered by a long URL property value, enabling remote arbitrary code execut...

CVE-2009-4219

Stack-based buffer overflow in the MYACTIVEX.MyActiveXCtrl.1 ActiveX control in MyActiveX.ocx 1.4.8.0 in Haihaisoft Universal Player allows remote attackers to execute arbitrary code via a long URL property value. NOTE: some of these details are obtained from third party information...

PT-2009-6381 · Haihaisoft · Haihaisoft Universal Player

Name of the Vulnerable Software and Affected Versions: Haihaisoft Universal Player MyActiveX.ocx version 1.4.8.0 Description: The issue is related to a stack-based buffer overflow in the MYACTIVEX.MyActiveXCtrl.1 ActiveX control. This can be exploited by remote attackers to execute arbitrary code...

Microsoft XML Core Services Memory Corruption (MS07-042; CVE-2007-2223)

Microsoft Windows is shipped with an XML processing framework, named MSXML or Microsoft XML Core services. The framework is used by applications shipped with the operating system as well as third party applications. The most popular application using this framework is Internet Explorer, which can...

Office OCX Multiple ActiveX Controls OpenWebFile Arbitrary Program Execution

Office OCX provides multiple software products that parse various Microsoft Office documents. Some of these products include Word Viewer OCX, Excel Viewer OCX, PowerPoint Viewer OCX, and Office Viewer OCX. These products act as ActiveX document containers to create, open, edit, and print...

IBM Access Support ActiveX GetXMLValue Method Buffer Overflow (CVE-2009-0215)

IBM Access Support is part of a suite of several tools used by IBM to provide support to its customers having IBM/Lenovo Laptops and Desktop systems. This product is used by the vendor to remotely examine the product and collect information in order to address any problems or distribute updates. ...

Design/Logic Flaw

DAZ Studio 2.3.3.161, 2.3.3.163, and 3.0.1.135 allows remote attackers to execute arbitrary JavaScript code via a 1 .ds, 2 .dsa, 3 .dse, or 4 .dsb file, as demonstrated by code that loads the WScript.Shell ActiveX control, related to a "script injection vulnerability."...