Novell Client for Windows 2000/XP - ActiveX Remote Denial of Service

Application: Novell Client for Windows 2000 and XP Platforms: Windows XP Professional French SP2 crash: IE 6.0.2900.2180 Exploitation: remote DoS Date: 2009-08-24 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details 3 The Code =============== 1 Introduction...

Lotus note connector for Blackberry Manager 5.0.0.11 ActiveX DoS Vuln

Exploit for unknown platform in category dos / poc ===================================================================== Lotus note connector for Blackberry Manager 5.0.0.11 ActiveX DoS Vuln ===================================================================== Application: Lotus note connector fo...

Memory corruption

LogMeIn Remote Access Utility ActiveX control RACtrl.dll allows remote attackers to cause a denial of service crash by setting the fgcolor and bgcolor properties to certain long values that trigger memory corruption...

CVE-2008-7053

LogMeIn Remote Access Utility ActiveX control RACtrl.dll allows remote attackers to cause a denial of service crash by setting the fgcolor and bgcolor properties to certain long values that trigger memory corruption...

Microsoft Office Web Components OWC.Spreadsheet BorderAround vulnerability

Added: 08/24/2009 CVE: CVE-2009-2496 BID: 35991 OSVDB: 56915 Background Microsoft Office Web Components OWC are a group of OLE classes implemented as ActiveX controls. Problem A heap corruption vulnerability in the OWC10.Spreadsheet ActiveX control allows command execution when a user opens a web...

Microsoft Office Web Components OWC.Spreadsheet BorderAround vulnerability

Added: 08/24/2009 CVE: CVE-2009-2496 BID: 35991 OSVDB: 56915 Background Microsoft Office Web Components OWC are a group of OLE classes implemented as ActiveX controls. Problem A heap corruption vulnerability in the OWC10.Spreadsheet ActiveX control allows command execution when a user opens a web...

Microsoft Office Web Components OWC.Spreadsheet BorderAround vulnerability

Added: 08/24/2009 CVE: CVE-2009-2496 BID: 35991 OSVDB: 56915 Background Microsoft Office Web Components OWC are a group of OLE classes implemented as ActiveX controls. Problem A heap corruption vulnerability in the OWC10.Spreadsheet ActiveX control allows command execution when a user opens a web...

CVE-2008-7022

Insecure method vulnerability in ChilkatMailv79.dll in the Chilkat Software IMAP ActiveX control ChilkatMail2.ChilkatMailMan2.1 allows remote attackers to execute arbitrary programs via the LoadXmlEmail method...

CVE-2008-7022

The CVE-2008-7022 entry describes an insecure method vulnerability in ChilkatMail_v7_9.dll, part of the Chilkat Software IMAP ActiveX control (ChilkatMail2.ChilkatMailMan2.1). A remote attacker could exploit the LoadXmlEmail method to execute arbitrary code. The affected component is the ChilkatM...

CVE-2008-7022

Insecure method vulnerability in ChilkatMailv79.dll in the Chilkat Software IMAP ActiveX control ChilkatMail2.ChilkatMailMan2.1 allows remote attackers to execute arbitrary programs via the LoadXmlEmail method...

Acer AcerCtrls.APlunch ActiveX控件不安全方式调用漏洞

CVECAN ID: CVE-2009-2627 AcerCtrls.APlunch是Acer笔记本默认所捆绑的一个ActiveX控件。 AcerCtrls.APlunch ActiveX控件（acerctrl.ocx）中包含有一个名为Run的调用方式，该方式会取Drive和FileName两个参数。尽管这个控件本身没有通过IObjectSafety接口标记为safe for scripting，但通过适当的Implemented Categories注册表键发布可能导致将其标记为safe for scripting。这意味着在Internet...

Acer AcerCtrls.APlunch ActiveX Arbitrary Command Execution

The remote host contains an ActiveX control from Acer called 'AcerCtrls.APlunch'. If this control is distributed with the appropriate 'Implemented Categories' registry key, it may be marked as safe for scripting. This would allow a web page in Internet Explorer to call the control's 'Run' method....

Microsoft Office Web Components ActiveX memory corruption

ActiveX vulnerability is actively used in-the-wild for silent malware installation...

CMailServer ActiveX Control Multiple Buffer Overflow Vulnerabilities

CMailServer ActiveX Control is prone to Multiple Buffer Overflow vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

iDefense Security Advisory 08.11.09: Microsoft Office Web Components 2000 Buffer Overflow Vulnerability

iDefense Security Advisory 08.11.09 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 11, 2009 I. BACKGROUND Office Web Components is a group of ActiveX controls that can be used to view and edit Microsoft Office files such as spreadsheets and charts. It is commonly used to allow a user ...

iDefense Security Advisory 08.11.09: Multiple Vendor Microsoft ATL/MFC ActiveX Type Confusion Vulnerability

iDefense Security Advisory 08.11.09 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 11, 2009 I. BACKGROUND Microsoft's Component Object Model COM was designed to allow interoperability between disjointed software components. It is a standardized interface solution to the programming...

iDefense Security Advisory 07.28.09: Multiple Vendor Microsoft ATL/MFC ActiveX Security Bypass Vulnerability

iDefense Security Advisory 07.28.09 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 28, 2009 I. BACKGROUND Microsoft's Component Object Model COM was designed to allow interoperability between disjointed software components. It is a standardized interface solution to the programming...

CMailServer ActiveX Control Multiple Buffer Overflow Vulnerabilities

This host is installed with CMailServer ActiveX Control and is prone to Multiple Buffer Overflow vulnerabilities. OpenVAS Vulnerability Test $Id: secpodcmailserveractivexmultbofvuln.nasl 3898 2009-08-19 12:45:380Z aug CMailServer ActiveX Control Multiple Buffer Overflow Vulnerabilities Authors:...

iDefense Security Advisory 07.28.09: Multiple Vendor Microsoft ATL/MFC ActiveX Information Disclosure Vulnerability

iDefense Security Advisory 07.28.09 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 28, 2009 I. BACKGROUND Microsoft's Component Object Model COM was designed to allow interoperability between disjointed software components. It is a standardized interface solution to the programming...

CVE-2009-2627

Insecure method vulnerability in the Acer LunchApp aka AcerCtrls.APlunch ActiveX control in acerctrl.ocx allows remote attackers to execute arbitrary commands via the Run method, a different vulnerability than CVE-2006-6121...