CVE-2009-1740

Multiple heap-based buffer overflows in the D-Link MPEG4 Viewer ActiveX Control csviewer.ocx 2.11.918.2006 allow remote attackers to execute arbitrary code via a long argument to the 1 SetFilePath and 2 SetClientCookie methods. NOTE: the provenance of this information is unknown; the details are...

CVE-2009-1740

The CVE-2009-1740 vulnerability affects the D-Link MPEG4 Viewer ActiveX Control (csviewer.ocx) version 2.11.918.2006. It involves multiple heap-based buffer overflows that allow remote attackers to execute arbitrary code by passing a long argument to the SetFilePath or SetClientCookie methods. Th...

CVE-2009-1740

Multiple heap-based buffer overflows in the D-Link MPEG4 Viewer ActiveX Control csviewer.ocx 2.11.918.2006 allow remote attackers to execute arbitrary code via a long argument to the 1 SetFilePath and 2 SetClientCookie methods. NOTE: the provenance of this information is unknown; the details are...

BaoFeng Storm ActiveX Control Buffer Overflow Vulnerability

BaoFeng Storm ActiveX is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-1672

The Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment aka JRE 6 Update 13 allows remote attackers to 1 execute arbitrary code via a .jnlp URL in the argument to the launch method, and might allow remote attackers to launch JRE installation processes v...

CVE-2009-1671

Multiple buffer overflows in the Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment aka JRE 6 Update 13 allow remote attackers to execute arbitrary code via a long string argument to the 1 setInstallerType, 2 setAdditionalPackages, 3 compareVersion, 4...

Security feature bypass

The Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment aka JRE 6 Update 13 allows remote attackers to 1 execute arbitrary code via a .jnlp URL in the argument to the launch method, and might allow remote attackers to launch JRE installation processes v...

Buffer overflow

Multiple buffer overflows in the Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment aka JRE 6 Update 13 allow remote attackers to execute arbitrary code via a long string argument to the 1 setInstallerType, 2 setAdditionalPackages, 3 compareVersion, 4...

CVE-2009-1671

Multiple buffer overflows in the Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment aka JRE 6 Update 13 allow remote attackers to execute arbitrary code via a long string argument to the 1 setInstallerType, 2 setAdditionalPackages, 3 compareVersion, 4...

CVE-2009-1672

The Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment aka JRE 6 Update 13 allows remote attackers to 1 execute arbitrary code via a .jnlp URL in the argument to the launch method, and might allow remote attackers to launch JRE installation processes v...

CVE-2009-1672

The CVE-2009-1672 entry concerns Sun Java SE Runtime Environment (JRE) 6 Update 13 with the Deployment Toolkit ActiveX control deploytk.dll 6.0.130.3. Affected component: deploytk.dll ActiveX control used by JRE. Root cause: .jnlp URL passed to the launch method can lead to remote code execution;...

PT-2009-4156 · Sun · Sun Java Runtime Environment

Name of the Vulnerable Software and Affected Versions: Sun Java SE Runtime Environment JRE 6 Update 13 Description: The issue allows remote attackers to execute arbitrary code via a .jnlp URL in the argument to the launch method. Additionally, it might allow remote attackers to launch JRE...

PT-2009-4155 · Sun +1 · Sun Java Runtime Environment +1

Name of the Vulnerable Software and Affected Versions: Sun Java SE Runtime Environment aka JRE 6 Update 13 Description: The issue is related to multiple buffer overflows in the Deployment Toolkit ActiveX control. These overflows can be triggered by a long string argument to certain methods,...

CycloMedia CycloScopeLite ActiveX控件内存破坏漏洞

Bugraq ID: 34912 CNCAN ID：CNCAN-2009051301 CycloMedia CycloScopeLite包含的ActiveX控件存在内存破坏问题，远程攻击者可以利用漏洞以应用程序权限执行任意代码。 问题存在于CMADOConnection.dll, CMAddressInfoDBC.dll和CMRecordingLocationDBC.dll中，当解析"ReturnConnection"方法时存在错误，可导致引用非法对象而造成任意代码执行 CycloMedia CycloScopeLite 2.50.3 目前没有详细解决方案提供：...

Sun Java Runtime Environment ActiveX Control Multiple Remote Buffer Overflow Vulnerabilities

Description Sun Java Runtime Environment is prone to multiple remote buffer-overflow vulnerabilities because the application fails to perform adequate boundary checks on user-supplied data. Successfully exploiting these issues allows remote attackers to execute arbitrary code in the context of th...

CVE-2009-1612

Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to execute arbitrary code via a long argument to the OnBeforeVideoDownload method, as exploited in the wild in April and May 2009. NOTE: some of these details are...

Heap overflow

Multiple stack-based and heap-based buffer overflows in Dafolo DafoloControl ActiveX control DafoloFFControl.dll 1.108.6.195 allow remote attackers to execute arbitrary code via long 1 baseurl, 2 kommune, 3 felter, 4 afdeling, 5 Flags, 6 HelpURL, 7 caburl, or 8 filename properties; or 9 a long...

CVE-2009-1612

BaoFeng Storm ActiveX control (MPS.StormPlayer.1 in mps.dll) is affected by a stack-based buffer overflow (CVE-2009-1612). Vulnerable component: mps.dll 3.9.4.27 and earlier; condition arises when an overly long string is passed to OnBeforeVideoDownload. Consequence: remote code execution by an a...

CVE-2009-1606

Multiple stack-based and heap-based buffer overflows in Dafolo DafoloControl ActiveX control DafoloFFControl.dll 1.108.6.195 allow remote attackers to execute arbitrary code via long 1 baseurl, 2 kommune, 3 felter, 4 afdeling, 5 Flags, 6 HelpURL, 7 caburl, or 8 filename properties; or 9 a long...

CVE-2009-1612

Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to execute arbitrary code via a long argument to the OnBeforeVideoDownload method, as exploited in the wild in April and May 2009. NOTE: some of these details are...