10868 matches found
CVE-2008-6442
CVE-2008-6442 covers an insecure method vulnerability in the Sina Inc. DLoader Class ActiveX Control. The issue allows remote attackers to overwrite arbitrary files using a URL provided as the first parameter to the DonwloadAndInstall method. This is the concrete vulnerability described in the in...
Buffer overflow vulnerability in ActiveX Control for Sony SNC series network cameras
Overview The ActiveX Control for Sony SNC series network cameras contains a heap-based buffer overflow vulnerability. The ActiveX Control for Sony SNC series network cameras is a software to monitor images over the network using a web browser. This ActiveX Control contains a heap-based buffer...
SupportSoft DNA Editor ActiveX unauathorized access
Multiple unsafe methods...
HP Virtual Rooms Client < 7.0.1 ActiveX Control Dangerous Methods
HP Virtual Rooms client is installed on the remote system. An ActiveX control included with the client and provided by a file with a name such as 'HPVirtualRooms32.dll' contains several dangerous methods. By tricking a user into viewing a specially crafted HTML document, it may be possible for an...
SupportSoft DNA Editor Module (dnaedit.dll v6.9.2205) remote code execution exploit (IE6/7)
!-- SupportSoft DNA Editor Module dnaedit.dll v6.9.2205 remote code execution exploit IE6/7 by Nine:Situations:Group::bruiser vendor url: http://www.supportsoft.com/ our site: http://retrogod.altervista.org/ details: CLSID: 01110800-3E00-11D2-8470-0060089874ED Progid: Tioga.Editor.1 Binary Path:...
Microsoft Internet Explorer DoS
DoS with ListWidth property of Forms.ListBox / Forms.ComboBox ActiveX...
SupportSoft DNA Editor Module ActiveX控件不安全函数调用漏洞
BUGTRAQ ID: 34004 SupportSoft是美国的一家实时服务管理软件供货商。 SupportSoft产品中所提供的DNA Editor Module ActiveX控件（dnaedit.dll，CLSID: 01110800-3E00-11D2-8470-0060089874ED）没有正确地过滤对Packagefiles、SaveDna、AddFile、SetIdentity等方式所传送的参数，如果用户受骗访问了恶意网页并向上述方式传送了特制参数的话，就可能导致拒绝服务、向用户系统下载恶意文件或执行任意代码。 SupportSoft DNA Editor Module...
CVE-2009-0813
Insecure method vulnerability in the ImeraIEPlugin ActiveX control ImeraIEPlugin.dll 1.0.2.54 in Imera TeamLinks Client allows remote attackers to force the download and execution of arbitrary URLs via modified DownloadProtocol, DownloadHost, DownloadPort, and DownloadURI parameters...
CVE-2009-0813
Insecure method vulnerability in the ImeraIEPlugin ActiveX control ImeraIEPlugin.dll 1.0.2.54 in Imera TeamLinks Client allows remote attackers to force the download and execution of arbitrary URLs via modified DownloadProtocol, DownloadHost, DownloadPort, and DownloadURI parameters...
CVE-2009-0813
Imera TeamLinks Client's ImeraIEPlugin.dll ActiveX (version 1.0.2.54) is affected by CVE-2009-0813 due to an insecure method vulnerability in how DownloadProtocol, DownloadHost, DownloadPort, and DownloadURI are handled. This allows a remote attacker to force the download and execution of arbitra...
SupportSoft DNA Editor Module - dnaedit.dll Code Execution
SupportSoft DNA Editor Module - dnaedit.dll Code Execution !-- SupportSoft DNA Editor Module dnaedit.dll v6.9.2205 remote code execution exploit IE6/7 by Nine:Situations:Group::bruiser vendor url: http://www.supportsoft.com/ our site: http://retrogod.altervista.org/ details: CLSID:...
Imera ImeraIEPlugin ActiveX控件任意文件下载漏洞
Imera TeamLinks是桌面客户端软件，允许物理分不断组成员之间进行协作。 TeamLinks客户端的ImeraIEPlugin.dll库所提供的ImeraIEPlugin.Pilot.1 ActiveX控件没有正地的处理DownloadHost属性参数，如果用户受骗访问了恶意站点并向该属性传送了恶意参数的话，就可能导致向用户系统下载并执行任意文件。 Imera ImeraIEPlugin.dll 1.0.2.54 临时解决方法： 为CLSID 75CC8584-86D4-4A50-B976-AA72618322C6设置kill-bit。 厂商补丁： Imera -----...
Dissect ActiveX hung it: to install the name of the invasion-bug warning-the black bar safety net
Once Upon a time, the use of ActiveX is a rogue software“kill”the main technical means of nowadays malware mostly all dead now, can ActiveX and do not exit People's field of vision, web hang horse took a fancy to it, so ActiveX hung it to pop up and become the important several hung it. The North...
SupportSoft DNA Editor Module Code Execution
OBJECT classid='clsid:01110800-3E00-11D2-8470-0060089874ED...
SupportSoft DNA Editor Module (dnaedit.dll) Code Execution Exploit
Exploit for unknown platform in category remote exploits ================================================================== SupportSoft DNA Editor Module dnaedit.dll Code Execution Exploit ================================================================== !-- SupportSoft DNA Editor Module...
SupportSoft DNA Editor Module - 'dnaedit.dll' Code Execution
!-- SupportSoft DNA Editor Module dnaedit.dll v6.9.2205 remote code execution exploit IE6/7 by Nine:Situations:Group::bruiser vendor url: http://www.supportsoft.com/ our site: http://retrogod.altervista.org/ details: CLSID: 01110800-3E00-11D2-8470-0060089874ED Progid: Tioga.Editor.1 Binary Path:...
CVE-2009-0811
Insecure method vulnerability in the SopCast SopCore ActiveX control in sopocx.ocx 3.0.3.501 allows remote attackers to execute arbitrary programs via an executable file name in the argument to the SetExternalPlayer method...
Design/Logic Flaw
Insecure method vulnerability in the SopCast SopCore ActiveX control in sopocx.ocx 3.0.3.501 allows remote attackers to execute arbitrary programs via an executable file name in the argument to the SetExternalPlayer method...
CVE-2009-0811
CVE-2009-0811 describes an insecure method vulnerability in the SopCast SopCore ActiveX control (sopocx.ocx 3.0.3.501). The vulnerability allows remote attackers to cause arbitrary code execution by supplying an executable file name to the SetExternalPlayer method. Affected product: SopCast SopCo...
CVE-2009-0811
Insecure method vulnerability in the SopCast SopCore ActiveX control in sopocx.ocx 3.0.3.501 allows remote attackers to execute arbitrary programs via an executable file name in the argument to the SetExternalPlayer method...