MS08-070: Vulnerabilities in Visual Basic 6.0 ActiveX Controls Could Allow Remote Code Execution (932349)

The remote host contains a version of the ActiveX control for Visual Basic 6.0 Runtime Extended Files that may allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and enticing a victim to visit it. Note that this control may have been included with...

Microsoft Visual Basic multiple ActiveX security vulnerabilities

Memory corruptions in DataGrid, FlexGrid, Hierarchical FlexGrid, Windows Common AVI, Charts, Masked Edit controls...

Microsoft Security Bulletin MS08-070 - Critical Vulnerabilities in Visual Basic 6.0 Runtime Extended Files (ActiveX Controls) Could Allow Remote Code Execution (932349)

Microsoft Security Bulletin MS08-070 - Critical Vulnerabilities in Visual Basic 6.0 Runtime Extended Files ActiveX Controls Could Allow Remote Code Execution 932349 Published: December 9, 2008 Version: 1.0 General Information Executive Summary This security update resolves five privately reported...

EasyMail ActiveX (emmailstore.dll 6.5.0.3) Buffer Overflow Exploit

No description provided by source. EasyMail ActiveX Heap Spray Exploit By: e.wiZz! & shinnai Site: infected.blogger.ba & shinnai.net Info: CompanyName Quiksoft Corporation FileDescription EasyMail MailStore Object FileVersion 6, 5, 0, 3 Vulnerable file emmailstore.dll html script...

ZDI-08-083: Microsoft Animation ActiveX Control Malformed AVI Parsing Code Execution Vulnerability

ZDI-08-083: Microsoft Animation ActiveX Control Malformed AVI Parsing Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-083 December 9, 2008 -- CVE ID: CVE-2008-4255 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Windows XP -- TippingPointTM IPS...

Secunia Research: Microsoft Hierarchical FlexGrid Control Integer Overflows

====================================================================== Secunia Research 09/12/2008 - Microsoft Hierarchical FlexGrid Control Integer Overflows - ====================================================================== Table of Contents Affected...

CVE-2008-5404

Insecure method vulnerability in the FlexCell.Grid ActiveX control in FlexCell.ocx 5.7.0.1 in FlexCell Grid ActiveX Component allows remote attackers to create and overwrite arbitrary files via the HttpDownloadFile method. NOTE: this could be leveraged for code execution by creating executable...

CVE-2008-5404

The CVE-2008-5404 issue concerns the FlexCell Grid ActiveX Control (FlexCell.ocx 5.7.0.1). The vulnerability arises in the HttpDownloadFile method, enabling a remote attacker to create and overwrite arbitrary files. This could enable code execution by placing executables in Startup folders or via...

EasyMail Active-X Buffer Overflow Exploit

EasyMail ActiveX Heap Spray Exploit By: e.wiZz! & shinnai Site: infected.blogger.ba & shinnai.net Info: CompanyName Quiksoft Corporation FileDescription EasyMail MailStore Object FileVersion 6, 5, 0, 3 Vulnerable file emmailstore.dll var sCode =...

Microsoft FlexGrid ActiveX Control Memory Corruption Vulnerability

Description Microsoft FlexGrid ActiveX control is prone to a remote memory-corruption vulnerability. Remote attackers can exploit this issue to execute arbitrary code in the context of the application using the ActiveX control typically Internet Explorer. Successful exploits will compromise the...

EasyMail - ActiveX 'emmailstore.dll 6.5.0.3' Remote Buffer Overflow

EasyMail ActiveX Heap Spray Exploit By: e.wiZz! & shinnai Site: infected.blogger.ba & shinnai.net Info: CompanyName Quiksoft Corporation FileDescription EasyMail MailStore Object FileVersion 6, 5, 0, 3 Vulnerable file emmailstore.dll var sCode =...

Microsoft Charts ActiveX Control Memory Corruption Vulnerability

Description Microsoft Charts ActiveX control is prone to a remote memory-corruption vulnerability. Remote attackers can exploit this issue to execute arbitrary code in the context of the application using the ActiveX control typically Internet Explorer. Successful exploits will compromise the...

Linksys WVC54GC NetCamPlayerWeb11gv2.ocx ActiveX控件栈溢出漏洞

BUGTRAQ ID: 32665 CVECAN ID: CVE-2008-4391 Linksys WVC54GC是一款支持802.11g协议的无线网络摄像头。 Linksys WVC54GC摄像头的NetCamPlayerWeb11gv2.ocx文件提供一个名为NetCamPlayerWeb11gv2的ActiveX控件，该控件没有正确地过滤对SetSource方式所传送的输入参数。如果用户受骗浏览了特制的HTML文档并向该方式提供了超长输入参数的话，就可以触发栈溢出，导致浏览器崩溃或执行任意指令。 0 Linksys WVC54GC 1.19 临时解决方法：...

Microsoft DataGrid ActiveX Control Memory Corruption Vulnerability

Description Microsoft DataGrid ActiveX control is prone to a remote memory-corruption vulnerability. Remote attackers can exploit this issue to execute arbitrary code in the context of the application using the ActiveX control typically Internet Explorer. Successful exploits will compromise the...

EasyMail - ActiveX emmailstore.dll 6.5.0.3 Remote Buffer Overflow

EasyMail - ActiveX emmailstore.dll 6.5.0.3 Remote Buffer Overflow EasyMail ActiveX Heap Spray Exploit By: e.wiZz! & shinnai Site: infected.blogger.ba & shinnai.net Info: CompanyName Quiksoft Corporation FileDescription EasyMail MailStore Object FileVersion 6, 5, 0, 3 Vulnerable file emmailstore.d...

CVE-2008-4391

Stack-based buffer overflow in the SetSource method in the NetCamPlayerWeb11gv2 ActiveX control in NetCamPlayerWeb11gv2.ocx on the Cisco Linksys WVC54GC wireless video camera before firmware 1.25 allows remote attackers to execute arbitrary code via long invalid arguments...

Microsoft Windows Common AVI ActiveX Control File Parsing Buffer Overflow Vulnerability

Description Microsoft Windows Common AVI ActiveX control is prone to a remote buffer-overflow vulnerability. Remote attackers can exploit this issue to execute arbitrary code in the context of the application using the ActiveX control typically Internet Explorer. Successful exploits will compromi...

EasyMail ActiveX (emmailstore.dll 6.5.0.3) Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================== EasyMail ActiveX emmailstore.dll 6.5.0.3 Buffer Overflow Exploit ================================================================== EasyMail ActiveX Heap Spray Exploit By:...

CVE-2008-4391

CVE-2008-4391 affects Linksys WVC54GC, specifically the NetCamPlayerWeb11gv2.ocx ActiveX control. The issue is a stack-based/buffer overflow in SetSource that can be triggered by long invalid arguments in a specially crafted HTML page, potentially allowing remote code execution with the user’s pr...

Microsoft Animation ActiveX Control Malformed AVI Parsing Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code through vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists within the Microsoft Animation...