ICQ Toolbar 2.3 - ActiveX Remote Denial of Service

bof=String128, "spdr" toolbar.GetPropertyById "" ,bof milw0rm.com 2008-03-06...

ICQ Toolbar 2.3 - ActiveX Remote Denial of Service

ICQ Toolbar 2.3 - ActiveX Remote Denial of Service bof=String128, "spdr" toolbar.GetPropertyById "" ,bof milw0rm.com 2008-03-06...

Learn2 STRunner ActiveX Control Multiple Buffer Overflow Vulnerabilities

The Learn2 Corporation's STRunner ActiveX control, used with various online tutorials, is installed on the remote host. It reportedly is affected by multiple and as-yet unspecified stack-based buffer overflows. If a remote attacker can trick a user on the affected host into visiting a specially...

Symantec Backup Exec Calendar ActiveX Control Multiple Vulnerabilities (SYM08-007)

The remote host contains the PVATLCalendar.PVCalendar.1 ActiveX control distributed with Symantec Backup Exec for Windows Servers. The installed version of that control reportedly contains two stack-based buffer overflows and allows for corrupting or saving malicious script code, and overwriting...

EDraw Office Viewer ActiveX (EDraw.OfficeViewer) FtpDownloadFile Method Overflow

The remote host contains the EDraw Office Viewer Component, an ActiveX control for working with Microsoft Office documents. The version of this control installed on the remote host contains a buffer overflow that can be triggered by a long value for the first and second arguments of the...

Design/Logic Flaw

Insecure method vulnerability in the Web Scan Object ActiveX control OL2005.dll in Rising Antivirus Online Scanner allows remote attackers to force the download and execution of arbitrary code by setting the BaseURL property and invoking the UpdateEngine method. NOTE: some of these details are...

Stack overflow

Multiple stack-based buffer overflows in the Learn2 Corporation STRunner aka Street Technologies ActiveX control in iestm32.dll allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2008-1116

Insecure method vulnerability in the Web Scan Object ActiveX control OL2005.dll in Rising Antivirus Online Scanner allows remote attackers to force the download and execution of arbitrary code by setting the BaseURL property and invoking the UpdateEngine method. NOTE: some of these details are...

CVE-2007-6252

Multiple stack-based buffer overflows in the Learn2 Corporation STRunner aka Street Technologies ActiveX control in iestm32.dll allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2008-1116

CVE-2008-1116 describes an insecure method vulnerability in the Web Scan Object ActiveX control (OL2005.dll) of Rising Antivirus Online Scanner. The flaw enables remote code execution by setting the BaseURL property and invoking the UpdateEngine method. The affected component is the ActiveX contr...

CVE-2007-6252

The CVE-2007-6252 issue concerns Learn2 Corporation STRunner ActiveX control (iestm32.dll). The vulnerability is described as multiple stack-based buffer overflows that could allow a remote attacker to execute arbitrary code on a vulnerable host via unspecified vectors. Affected product: Learn2 S...

VulnCheck KEV: CVE-2007-5779

Buffer overflow in the GomManager GomWeb Control ActiveX control in GomWeb3.dll 1.0.0.12 in Gretech Online Movie Player GOM Player 2.1.6.3499 allows remote attackers to execute arbitrary code via a long argument to the OpenUrl method...

Symantec the presence of a remote execution vulnerability 0day-vulnerability warning-the black bar safety net

milw0rm to this morning published a Symantec remote execution vulnerability EXP DEMO code, a hacker can simply modify the Code of the SHELLCODE, and then after ALPHA2 coding can be constructed in a download virus web Trojan. It has yet to intercept to exploit the vulnerability of the net horse...

VulnCheck KEV: CVE-2007-0018

Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control NCTAudioFile2.dll, as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include 1 NCTsoft NCTAudioStudio,...

Symantec Backup Exec调度程序ActiveX栈溢出及文件覆盖漏洞

BUGTRAQ ID: 28008,26904 CVECAN ID: CVE-2007-6016,CVE-2007-6017 Symantec Backup Exec是一款全面的数据备份解决方案。 Symantec Backup Exec for Windows Server（BEWS）的调度程序组件所安装的ActiveX控件中存在多个栈溢出和不安全函数调用漏洞，远程攻击者可能利用此漏洞控制用户系统。...

Novell iPrint Client ActiveX Control ExecuteRequest Buffer Overflow

This module exploits a stack buffer overflow in Novell iPrint Client 4.26. When sending an overly long string to the ExecuteRequest property of ienipp.ocx an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...

Authentication flaw

The PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the scheduler component in the Media Server in Symantec Backup Exec for Windows Server BEWS 11d 11.0.6235 and 11.0.7170, and 12.0 12.0.1364, exposes the unsafe Save method, which allows remote attackers to cause a denial of servi...

Stack overflow

Multiple stack-based buffer overflows in the PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the scheduler component in the Media Server in Symantec Backup Exec for Windows Server BEWS 11d 11.0.6235 and 11.0.7170, and 12.0 12.0.1364, allow remote attackers to execute arbitrary cod...

CVE-2007-6017

The PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the scheduler component in the Media Server in Symantec Backup Exec for Windows Server BEWS 11d 11.0.6235 and 11.0.7170, and 12.0 12.0.1364, exposes the unsafe Save method, which allows remote attackers to cause a denial of servi...

CVE-2007-6016

Multiple stack-based buffer overflows in the PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the scheduler component in the Media Server in Symantec Backup Exec for Windows Server BEWS 11d 11.0.6235 and 11.0.7170, and 12.0 12.0.1364, allow remote attackers to execute arbitrary cod...