AOL SuperBuddy ActiveX Control RCE Vulnerability

AOL ActiveX is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Internet Explorer DirectAnimation COM Object Memory Corruption (MS06-042; CVE-2006-3638)

Microsoft Internet Explorer allows HTML documents to embed ActiveX controls for the authoring of dynamic web content. ActiveX controls are based on Component Object Model COM technology. The invocation of an ActiveX control is performed by Internet Explorer by internally instantiating a COM objec...

AOL SuperBuddy ActiveX Control Remote Code Execution Vulnerability

This host is installed with AOL ActiveX and is prone to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: gbaolactivexremotecodeexecvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ AOL SuperBuddy ActiveX Control Remote Code Execution Vulnerability Authors: Antu Sanadi Copyright:...

HP LoadRunner XUpload ActiveX control MakeHttpRequest file download

Added: 10/21/2009 CVE: CVE-2009-3693 BID: 36550 Background HP LoadRunner is a software performance testing solution. HP LoadRunner includes the XUpload.ocx ActiveX control for performing file exchanges. Problem The MakeHttpRequest method in the XUpload.ocx ActiveX control can be used to download...

HP LoadRunner XUpload ActiveX control MakeHttpRequest file download

Added: 10/21/2009 CVE: CVE-2009-3693 BID: 36550 Background HP LoadRunner is a software performance testing solution. HP LoadRunner includes the XUpload.ocx ActiveX control for performing file exchanges. Problem The MakeHttpRequest method in the XUpload.ocx ActiveX control can be used to download...

HP LoadRunner XUpload ActiveX control MakeHttpRequest file download

Added: 10/21/2009 CVE: CVE-2009-3693 BID: 36550 Background HP LoadRunner is a software performance testing solution. HP LoadRunner includes the XUpload.ocx ActiveX control for performing file exchanges. Problem The MakeHttpRequest method in the XUpload.ocx ActiveX control can be used to download...

HP LoadRunner XUpload ActiveX control MakeHttpRequest file download

Added: 10/21/2009 CVE: CVE-2009-3693 BID: 36550 Background HP LoadRunner is a software performance testing solution. HP LoadRunner includes the XUpload.ocx ActiveX control for performing file exchanges. Problem The MakeHttpRequest method in the XUpload.ocx ActiveX control can be used to download...

UiPlayer UiCheck组件栈溢出漏洞

CVE ID: CVE-2009-2970 UiPlayer网络视频播放软件是联合网视（UITV）公司的视频播放软件。 UiPlayer的安装目录下的UiCheck.dll是一个ActiveX控件，该控件允许在IE中加载。UiCheck.dll提供了一个接口函数 GetUiDllVersion，该函数会把接收到的文件名参数拷贝到一个固定大小的缓冲区，如果文件名超长，就会导致栈溢出。 因为和百度等公司的合作，很多视频播放软件中也集成了UiPlayer，例如百度下吧等。 UiTV UiPlayer UiCheck.dll 1.0.0.6 Baidu BaiduV 临时解决方法：...

Input validation

An unspecified ActiveX control in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 does not properly validate input, which allows attackers to cause a denial of service via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in an ActiveX control in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 on Windows allows remote attackers to cause a denial of service via unknown vectors...

CVE-2009-2992

An unspecified ActiveX control in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 does not properly validate input, which allows attackers to cause a denial of service via unknown vectors...

CVE-2009-2987

Unspecified vulnerability in an ActiveX control in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 on Windows allows remote attackers to cause a denial of service via unknown vectors...

CVE-2009-2987

CVE-2009-2987 describes an unspecified vulnerability in the ActiveX control used by Adobe Reader and Acrobat on Windows, leading to remote denial of service via unknown vectors. Connected sources confirm this affects Adobe Reader/Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, wit...

CVE-2009-2987

Unspecified vulnerability in an ActiveX control in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 on Windows allows remote attackers to cause a denial of service via unknown vectors...

CVE-2009-2992

CVE-2009-2992 refers to an unspecified ActiveX control in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 that fails to properly validate input, enabling a denial of service via unknown vectors. Connected documents confirm this as a real vulnerability amo...

CVE-2009-2970

Stack-based buffer overflow in the GetUiDllVersion function in an ActiveX control in UiCheck.dll before 1.0.0.7 in UiTV UiPlayer, as used in BaiduX and other products, allows remote attackers to execute arbitrary code via the filename parameter...

Stack overflow

Stack-based buffer overflow in the GetUiDllVersion function in an ActiveX control in UiCheck.dll before 1.0.0.7 in UiTV UiPlayer, as used in BaiduX and other products, allows remote attackers to execute arbitrary code via the filename parameter...

CVE-2009-2970

CVE-2009-2970 affects UiTV UiPlayer’s UiCheck.dll (ActiveX) prior to version 1.0.0.7. The GetUiDllVersion function copies the filename parameter into a fixed-size buffer, and long filenames trigger a stack-based buffer overflow. This could allow remote code execution via crafted input delivered t...

CVE-2009-2970

Stack-based buffer overflow in the GetUiDllVersion function in an ActiveX control in UiCheck.dll before 1.0.0.7 in UiTV UiPlayer, as used in BaiduX and other products, allows remote attackers to execute arbitrary code via the filename parameter...

Microsoft Design Tools msdds.dll Memory Corruption (MS05-052; CVE-2005-2127)

Microsoft Internet Explorer allows HTML documents to embed ActiveX controls for the authoring of dynamic web content. ActiveX controls are based on the Component Object Model COM technology. There exists a vulnerability in the Microsoft Design Tools Diagram Surface COM object, an object bundled...