CVE-2010-10015

AOL versions up to and including 9.5 includes an ActiveX control Phobos.dll that exposes a method called Import via the Phobos.Playlist COM object. This method is vulnerable to a stack-based buffer overflow when provided with an excessively long string argument. Exploitation allows remote attacke...

PT-2025-34288 · Undefined · Undefined

CommuniCrypt Mail versions up to and including 1.16 contains a stack-based buffer overflow vulnerability in its ANSMTP.dll and AOSMTP.dll ActiveX controls, specifically within the AddAttachments method. This method fails to properly validate the length of input strings, allowing data to exceed th...

CVE-2011-10028

The RealNetworks RealArcade platform includes an ActiveX control InstallerDlg.dll, version 2.6.0.445 that exposes a method named Exec via the StubbyUtil.ProcessMgr COM object. This method allows remote attackers to execute arbitrary commands on a victim's Windows machine without proper validation...

CVE-2011-10028

The RealNetworks RealArcade platform includes an ActiveX control InstallerDlg.dll, version 2.6.0.445 that exposes a method named Exec via the StubbyUtil.ProcessMgr COM object. This method allows remote attackers to execute arbitrary commands on a victim's Windows machine without proper validation...

RealNetworks RealArcade 安全漏洞

RealNetworks RealArcade is a gaming service from RealNetworks USA. A security vulnerability exists in RealNetworks RealArcade that stems from an ActiveX control exposing the Exec method, which could lead to the execution of arbitrary commands...

CVE-2011-10028: Unsafe ActiveX Control Marked Safe For Scripting

The RealNetworks RealArcade platform includes an ActiveX control InstallerDlg.dll, version 2.6.0.445 that exposes a method named Exec via the StubbyUtil.ProcessMgr COM object. This method allows remote attackers to execute arbitrary commands on a victim's Windows machine without proper validation...

CVE-2013-10057

A stack-based buffer overflow vulnerability exists in Synactis PDF In-The-Box ActiveX control PDFIN1.ocx, specifically the ConnectToSynactis method. When a long string is passed to this method—intended to populate the ldCmdLine argument of a WinExec call—a strcpy operation overwrites a saved...

CVE-2013-10057 Synactis PDF In-The-Box ConnectToSynactic Stack-Based Buffer Overflow

A stack-based buffer overflow vulnerability exists in Synactis PDF In-The-Box ActiveX control PDFIN1.ocx, specifically the ConnectToSynactis method. When a long string is passed to this method—intended to populate the ldCmdLine argument of a WinExec call—a strcpy operation overwrites a saved...

CVE-2013-10057

Synactis PDF In-The-Box ActiveX control (PDF_IN_1.ocx) contains a stack-based buffer overflow in the ConnectToSynactis method. A long string passed to populate ldCmdLine for WinExec can overwrite a saved TRegistry pointer on the stack, enabling remote code execution when a user visits a malicious...

PT-2025-31691 · Synactis +1 · Synactis Pdf In-The-Box +1

Name of the Vulnerable Software and Affected Versions: Synactis PDF In-The-Box ActiveX control PDF IN 1.ocx affected versions not specified Description: A stack-based buffer overflow vulnerability exists in the ConnectToSynactis method of the Synactis PDF In-The-Box ActiveX control PDF IN 1.ocx. ...

CVE-2025-34128

A buffer overflow vulnerability exists in the X360 VideoPlayer ActiveX control VideoPlayer.ocx version 2.6 when handling overly long arguments to the ConvertFile method. An attacker can exploit this vulnerability by supplying crafted input to cause memory corruption and execute arbitrary code...

CVE-2025-34128

A buffer overflow vulnerability exists in the X360 VideoPlayer ActiveX control VideoPlayer.ocx version 2.6 when handling overly long arguments to the ConvertFile method. An attacker can exploit this vulnerability by supplying crafted input to cause memory corruption and execute arbitrary code...

CVE-2025-34128 X360 VideoPlayer ActiveX Control Buffer Overflow via ConvertFile()

A buffer overflow vulnerability exists in the X360 VideoPlayer ActiveX control VideoPlayer.ocx version 2.6 when handling overly long arguments to the ConvertFile method. An attacker can exploit this vulnerability by supplying crafted input to cause memory corruption and execute arbitrary code...

CVE-2025-34128 X360 VideoPlayer ActiveX Control Buffer Overflow via ConvertFile()

A buffer overflow vulnerability exists in the X360 VideoPlayer ActiveX control VideoPlayer.ocx version 2.6 when handling overly long arguments to the ConvertFile method. An attacker can exploit this vulnerability by supplying crafted input to cause memory corruption and execute arbitrary code...

CVE-2025-34128

CVE-2025-34128 describes a buffer overflow in X360 VideoPlayer ActiveX control (VideoPlayer.ocx) v2.6 triggered by overly long arguments to ConvertFile(), leading to memory corruption and arbitrary code execution in the executing process. Affected component is the ActiveX control; root cause is a...

CVE-2020-7804

ActiveX ControlHShell.dll in Handy Groupware 1.7.3.1 for Windows 7, 8, and 10 allows an attacker to execute arbitrary command via the ShellExec method...

CVE-2020-5897

In versions 7.1.5-7.1.9, there is use-after-free memory vulnerability in the BIG-IP Edge Client Windows ActiveX component...

CVE-2020-1402

An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows ActiveX Installer Service Elevation of Privilege Vulnerability'...

CVE-2020-0860

An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows ActiveX Installer Service Elevation of Privilege Vulnerability'. Thi...

CVE-2020-0773

An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows ActiveX Installer Service Elevation of Privilege Vulnerability'. Thi...