CVE-2008-0312

Stack-based buffer overflow in the AutoFix Support Tool ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products, including Norton 360 1.0, AntiVirus 2006 through 2008, Internet Security 2006 through 2008, and System Works 2006 through 2008, allows remote attackers to execute...

Design/Logic Flaw

The ActiveDataInfo.LaunchProcess method in the SymAData.ActiveDataInfo.1 ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products including Norton 360 1.0, AntiVirus 2006 through 2008, Internet Security 2006 through 2008, and System Works 2006 through 2008, does not properly...

CVE-2008-0312

CVE-2008-0312 is a stack-based buffer overflow in the AutoFix Support Tool ActiveX control SYMADATA.DLL v2.7.0.1, used by Norton products (e.g., Norton 360 1.0, AntiVirus/Internet Security/System Works 2006–2008). The overflow occurs via a long argument to GetEventLogInfo and could allow remote c...

CVE-2008-0312

Stack-based buffer overflow in the AutoFix Support Tool ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products, including Norton 360 1.0, AntiVirus 2006 through 2008, Internet Security 2006 through 2008, and System Works 2006 through 2008, allows remote attackers to execute...

CVE-2008-0313

The ActiveDataInfo.LaunchProcess method in the SymAData.ActiveDataInfo.1 ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products including Norton 360 1.0, AntiVirus 2006 through 2008, Internet Security 2006 through 2008, and System Works 2006 through 2008, does not properly...

CVE-2008-0313

The CVE-2008-0313 issue affects the SymAData.ActiveDataInfo.1 ActiveX control (SYMADATA.DLL, version 2.7.0.1) shipped with multiple Norton products (Norton 360 1.0; AntiVirus 2006–2008; Internet Security 2006–2008; System Works 2006–2008). The vulnerability is a design/logic flaw in ActiveDataInf...

Novell iPrint Client ienipp.ocx ActiveX Control Stack-based Buffer Overflow (CVE-2008-0935)

Novell iPrint is an application that enables users to install and manage printers, or submit print job from a web browser. A buffer overflow vulnerability has been reported in Novell iPrint Client for Windows. The vulnerability is due to a boundary error in a Novell iPrint ActiveX control. To...

tumbleweed-overflow.txt

!-- aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 07-Apr-2008 Software: Tumbleweed Communications - SecureTransport FileTransfer http://www.tumbleweed.com/ Description: "Tumbleweed SecureTransport is the industry's most secure Managed File...

dda-insecure.txt

------------------------------------------------------------------------------------ Data Dynamics ActiveBar ActiveX Control Actbar3.ocx 3.2 Multiple Inscure Methods url: http://www.datadynamics.com author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was writte...

CDNetworks Nefficient Download(NeffyLauncher.dll) Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: CDNetworks Nefficient DownloadNeffyLauncher.dll Vulnerabilities Author: Simon Ryeobar4mi at gmail.com, barami at ahnlab.com Severity: High Impact: Remote Code Execution Vulnerable Systems: MS Windows Systems Version: NeffyLauncher 1.0.5...

Symantec Backup Exec Server Scheduler ActiveX Control Buffer Overflow (CVE-2007-6016)

Symantec Backup Exec is a data backup and recovery system for Windows. A buffer overflow vulnerability has been reported in the Symantec Backup Exec for Windows Servers. The vulnerability is due to a boundary error in the Symantec Backup Exec ActiveX control of the Scheduler component. To trigger...

Tumbleweed SecureTransport FileTransfer ActiveX BOF Exploit

No description provided by source. !-- aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 07-Apr-2008 Software: Tumbleweed Communications - SecureTransport FileTransfer http://www.tumbleweed.com/ Description: "Tumbleweed SecureTransport is the...

CDNetworks Nefficient Download (NeffyLauncher.dll) Code Execution Vulnerabilities

No description provided by source. Title: CDNetworks Nefficient DownloadNeffyLauncher.dll Vulnerabilities Author: Simon Ryeobar4mi at gmail.com, barami at ahnlab.com Severity: High Impact: Remote Code Execution Vulnerable Systems: MS Windows Systems Version: NeffyLauncher 1.0.5...

Tumbleweed SecureTransport FileTransfer ActiveX Control Buffer Overflow

aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 07-Apr-2008 Software: Tumbleweed Communications - SecureTransport FileTransfer http://www.tumbleweed.com/ Description: "Tumbleweed SecureTransport is the industry's most secure Managed File Transfer...

Yahoo! Music Jukebox ActiveX Control Multiple Buffer Overflows (CVE-2008-0623; CVE-2008-0624; CVE-2008-0625)

Yahoo! Music Jukebox is a freeware media player for Microsoft Windows. Multiple buffer overflow vulnerabilities have been reported in Yahoo! Music Jukebox. The vulnerabilities are due to boundary errors in certain Yahoo! Music Jukebox ActiveX controls. To trigger these issues, an attacker may...

Tumbleweed SecureTransport FileTransfer ActiveX buffer overflow

Buffer overflow in TransferFile method...

cdnetworks-exec.txt

Title: CDNetworks Nefficient DownloadNeffyLauncher.dll Vulnerabilities Author: Simon Ryeobar4mi at gmail.com, barami at ahnlab.com Severity: High Impact: Remote Code Execution Vulnerable Systems: MS Windows Systems Version: NeffyLauncher 1.0.5 AA07EBD2-EBDD-4BD6-9F8F-114BD513492C Solution: Upgrad...

CDNetworks Nefficient Download ActiveX unauthorized access

It's possible to download file to any location...

Data Dynamics ActiveBar (Actbar3.ocx 3.2) Multiple Insecure Methods

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"body bgcolor="E0E0E0"------------------------------------------------------------------------------------ bData Dynamics ActiveBar ActiveX Control Actbar3.ocx 3.2 Multiple Inscure Methods/b...

Internet Explorer ActiveX Control hxvz.dll Memory Corruption (MS08-023; CVE-2008-1086)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The flaw is located in the ActiveX Controls of the component hxvz.dll. The vulnerability is due to a memory corruption error in Microsoft Internet Explorer. A remote attacker could exploit this issue by...