CVE-2009-3977

Multiple buffer overflows in a certain ActiveX control in ActiveDom.ocx in HP OpenView Network Node Manager OV NNM 7.53 might allow remote attackers to cause a denial of service memory corruption or have unspecified other impact via a long string argument to the 1 DisplayName, 2 AddGroup, 3...

CVE-2009-3977

CVE-2009-3977 affects the ActiveX control ActiveDom.ocx in HP OpenView Network Node Manager (OV NNM) 7.53. The vulnerability comprises multiple buffer overflows exploitable via long string arguments to the DisplayName, AddGroup, InstallComponent, or Subscribe methods, potentially leading to memor...

Adobe AcroPDF.dll Denial Of Service

Adobe browser document ActiveX DoS vulnerablity File: AcroPDF.dll Affected version : 7.0.5 . Later versions are also effected Description: RegKey Safe for Script: True RegKey Safe for Init: True POC: Create a HTML file with following Code and test it on IE Test Exploit page targetFile = "C:\Progr...

Internet Explorer daxctle.ocx KeyFrame Method Memory Corruption (MS06-067; CVE-2006-4777)

Microsoft Internet Explorer IE is a web browser application that is capable rendering both static and dynamic contents. The application supports the ActiveX technology, which is a feature extension framework. IE is installed with a set of ActiveX controls including the DirectAnimation package...

Yahoo! Messenger 9 Denial Of Service

Product: Yahoo Messenger 9.0.0.2162 Vulnerability: ActiveX Null Pointer - Denial of Service Description: Yahoo Messenger is prone to a denial-of-service cause of null pointer vulnerability. Vulnerability is in YahooBridgeLib.dll Activex Control An attacker can exploit this vulnerability by entici...

EasyMail IMAP4 ActiveX Control LicenseKey buffer overflow

Added: 11/16/2009 OSVDB: 59938 Background QuikSoft EasyMail Objects is a set of ActiveX controls which provide e-mail functionality. QuikSoft EasyMail Objects is included with Oracle Document Capture among other products. Problem A buffer overflow vulnerability in the EasyMail IMAP4 ActiveX...

EasyMail IMAP4 ActiveX Control LicenseKey buffer overflow

Added: 11/16/2009 OSVDB: 59938 Background QuikSoft EasyMail Objects is a set of ActiveX controls which provide e-mail functionality. QuikSoft EasyMail Objects is included with Oracle Document Capture among other products. Problem A buffer overflow vulnerability in the EasyMail IMAP4 ActiveX...

EasyMail IMAP4 ActiveX Control LicenseKey buffer overflow

Added: 11/16/2009 OSVDB: 59938 Background QuikSoft EasyMail Objects is a set of ActiveX controls which provide e-mail functionality. QuikSoft EasyMail Objects is included with Oracle Document Capture among other products. Problem A buffer overflow vulnerability in the EasyMail IMAP4 ActiveX...

EasyMail IMAP4 ActiveX Control LicenseKey buffer overflow

Added: 11/16/2009 OSVDB: 59938 Background QuikSoft EasyMail Objects is a set of ActiveX controls which provide e-mail functionality. QuikSoft EasyMail Objects is included with Oracle Document Capture among other products. Problem A buffer overflow vulnerability in the EasyMail IMAP4 ActiveX...

Oracle Document Capture 10g ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in Oracle Document Capture 10g 10.1.3.5.0. Oracle Document Capture 10g comes bundled with a third party ActiveX control emsmtp.dll 6.0.1.0. When passing an overly long string to the method "SubmitToExpress" an attacker may be able to execute arbitrary...

AwingSoft Winds3D Player 3.5 SceneURL Download and Execute

This module exploits an untrusted program execution vulnerability within the Winds3D Player from AwingSoft. The Winds3D Player is a browser plugin for IE ActiveX, Opera DLL and Firefox XPI. By setting the 'SceneURL' parameter to the URL to an executable, an attacker can execute arbitrary code...

AwingSoft Winds3D Player SceneURL Buffer Overflow

This module exploits a data segment buffer overflow within Winds3D Viewer of AwingSoft Awakening 3.x WindsPly.ocx v3.6.0.0. This ActiveX is a plugin of AwingSoft Web3D Player. By setting an overly long value to the 'SceneURL' property, an attacker can overrun a buffer and execute arbitrary code...

Persits XUpload ActiveX AddFile Buffer Overflow

This module exploits a stack buffer overflow in Persits Software Inc's XUpload ActiveX controlversion 3.0.0.3 thats included in HP LoadRunner 9.5. By passing an overly long string to the AddFile method, an attacker may be able to execute arbitrary code. This module requires Metasploit:...

HP LoadRunner 9.0 ActiveX AddFolder Buffer Overflow

This module exploits a stack buffer overflow in Persits Software Inc's XUpload ActiveX controlversion 2.1.0.1 thats included in HP LoadRunner 9.0. By passing an overly long string to the AddFolder method, an attacker may be able to execute arbitrary code. This module requires Metasploit:...

雅虎通9.0.0.2162 YahooBridgeLib.dll ActiveX控件空指针引用拒绝服务漏洞

BUGTRAQ ID: 37007 雅虎通是一款非常流行的即时通讯工具。 雅虎通所安装的YahooBridgeLib.dll Activex控件没有正确地验证用户所传送的超长参数。如果用户受骗访问了恶意网页并传送了超长参数，就可能触发空指针引用，导致浏览器崩溃。 Yahoo! Messenger 9.0.0.2162 临时解决方法： 为clsid 58916BE6-BAFF-4F33-AEFE-B2AA03FE4C86设置kill-bit。 厂商补丁： Yahoo! ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Yahoo Messenger 9 ActiveX DoS (Null Pointer) Vulnerability

Product: Yahoo Messenger 9.0.0.2162 Vulnerability: ActiveX Null Pointer - Denial of Service Description: Yahoo Messenger is prone to a denial-of-service cause of null pointer vulnerability. Vulnerability is in YahooBridgeLib.dll Activex Control An attacker can exploit this vulnerability by entici...

Yahoo Instant Messenger ActiveX DoS

Null pointer dereference...

迅雷看看 3.1.0 AvtiveX控件信息泄露漏洞

迅雷看看是迅雷公司出品的一款支持在线播放的视频播放软件 它所包含的DapCtrl控件包含有信息泄露漏洞 利用特殊构造的网页，攻击者可能通过调用.IsFileExist（文件名）方法获得返回值来发现是否存在本地文件，进而展开其他攻击。利用此漏洞攻击者无法获得文件的内容。 迅雷看看 = 3.2.0.248 临时解决方法： 为CLSID：ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8设置kill-bit。 厂商补丁： 迅雷网络技术有限公司 --------------------...

Yahoo! Messenger 9.0.0.2162 - YahooBridgeLib.dll ActiveX Control Remote Denial of Service

Yahoo! Messenger 9.0.0.2162 - YahooBridgeLib.dll ActiveX Control Remote Denial of Service arg1=String11284, "A" target.RegisterMe arg1...

EasyMail Objects EMSMTP.DLL 6.0.1 ActiveX Control Remote Buffer Overflow Vulnerability

No description provided by source. !-- Postcast Server Pro 3.0.61 / Quiksoft EasyMail SMTP Object emsmtp.dll 6.0.1 remote buffer overflow exploit ie6 / xp sp2 version passing more than 539 chars to SubmitToExpress method: EAX 00000400 ECX 0013DD24 ASCII "Error Creating File: AAAA ... EDX C0403FFF...