CVE-2008-0634

Buffer overflow in the NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1, as used in Sejoong Namo ActiveSquare6, allows remote attackers to execute arbitrary code via a long argument to the Install method, a different vulnerability than CVE-2008-0551...

CVE-2008-0623

CVE-2008-0623 : A stack-based buffer overflow in Yahoo! Music Jukebox 2.2.2.056’s YMP Datagrid ActiveX control (datagrid.dll) can be triggered by a long argument to AddImage, enabling remote code execution. Affected product/version: Yahoo! Music Jukebox 2.2.2.056; vulnerable component is the Data...

CVE-2008-0625

Buffer overflow in the MediaGrid ActiveX control mediagrid.dll in Yahoo! Music Jukebox 2.2.2.56 allows remote attackers to execute arbitrary code via a long argument to the AddBitmap method...

CVE-2008-0631

Multiple ActiveX controls in MailBee.dll in MailBee Objects 5.5 allow remote attackers to 1 overwrite arbitrary files via the SaveToDisk method, or 2 modify files via the AddStringToFile method...

CVE-2008-0631

Affected product/component: MailBee Objects 5.5, specifically the MailBee.dll ActiveX controls. Vulnerability: Remote attackers can cause file manipulation via two methods—SaveToDisk (overwrite arbitrary files) and AddStringToFile (modify files). Root cause/conditions: Multiple ActiveX controls a...

CVE-2008-0625

CVE-2008-0625 is a buffer overflow in Yahoo! Music Jukebox MediaGrid ActiveX (mediagrid.dll) that allows remote code execution when a user loads a page calling AddBitmap with a long argument in Yahoo! Music Jukebox 2.2.2.56. Exploitation requires the user to view a crafted page in Internet Explor...

HP Virtual Rooms unauthorized access

Unauthorized access is possible via ActiveX component under Windows...

[Full-disclosure] Yahoo! JukeBox MediaGrid ActiveX Control AddBitmap() Buffer Overflow

Who: Yahoo! http://www.yahoo.com What: mediagrid.dll version 2.2.2.56 22FD7C0A-850C-4A53-9821-0B0915C96139 Implements IObjectSafety This control is used with the Yahoo! JukeBox application. How: The 2nd parameter of the AddBitmap method is vulnerable to a buffer overflow. Fix: No official fix kno...

HP Virtual Rooms WebHPVCInstall.HPVirtualRooms14 ActiveX Control Buffer Overflow Vulnerabilities

The remote host contains a version of the HP Virtual Rooms WebHPVCInstall.HPVirtualRooms14 ActiveX control that reportedly is affected by multiple buffer overflows involving properties such as 'AuthenticationURL', 'PortalAPIURL', and 'cabroot'. If a remote attacker can trick a user on the affecte...

Stack overflow

Multiple stack-based buffer overflows in SwiftView Viewer before 8.3.5, as used by SwiftView and SwiftSend, allow remote attackers to execute arbitrary code via unspecified vectors to the 1 svocx.ocx ActiveX control or the 2 npsview.dll plugin for Mozilla and Firefox...

CVE-2007-5602

Multiple stack-based buffer overflows in SwiftView Viewer before 8.3.5, as used by SwiftView and SwiftSend, allow remote attackers to execute arbitrary code via unspecified vectors to the 1 svocx.ocx ActiveX control or the 2 npsview.dll plugin for Mozilla and Firefox...

Yahoo! Music Jukebox YMP Datagrid ActiveX control stack buffer overflows

Overview The Yahoo! Music Jukebox YMP Datagrid ActiveX control contains multiple stack buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Yahoo! Music Jukebox is a music player for Microsoft Windows, which includes...

GlobalLink 2.6.1.2 - HanGamePlugincn18.dll ActiveX Control Multiple Buffer Overflow Vulnerabilities

GlobalLink 2.6.1.2 - HanGamePlugincn18.dll ActiveX Control Multiple Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/27626/info GlobalLink is prone to multiple buffer-overflow vulnerabilities because it fails to properly bounds-check user-supplied data before copying it...

GlobalLink 'HanGamePlugincn18.dll' ActiveX Control Multiple Buffer Overflow Vulnerabilities

Description GlobalLink is prone to multiple buffer-overflow vulnerabilities because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer. An attacker can exploit these issues to execute arbitrary code within the context of application...

Yahoo! Music Jukebox Yahoo! MediaGrid ActiveX control stack buffer overflow

Overview The Yahoo! Music Jukebox Yahoo! MediaGrid ActiveX control contains a stack buffer overflow, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Yahoo! Music Jukebox is a music player for Microsoft Windows, which includes multip...

Facebook Photo Uploader ActiveX Control < 4.5.57.1 Multiple Buffer Overflows

The remote host contains a version of the Facebook Photo Uploader ActiveX control that reportedly is affected by multiple buffer overflows involving, for example, long arguments to the control's 'ExtractExif', 'ExtractIptc', and 'FileMask' properties. If a remote attacker can trick a user on the...

CVE-2007-5602

Multiple stack-based buffer overflows in SwiftView Viewer before 8.3.5, as used by SwiftView and SwiftSend, allow remote attackers to execute arbitrary code via unspecified vectors to the 1 svocx.ocx ActiveX control or the 2 npsview.dll plugin for Mozilla and Firefox...

Yahoo! Music Jukebox 2.2 AddImage() ActiveX Remote BOF Exploit (2)

No description provided by source. !-- Yahoo! Music Jukebox 2.2 AddImage ActiveX BOF Discovered by Krystian Kloskowski - [email protected] Written by exceed code ripped from here and there... Tested on Windows XP SP3 English / IE6 SP3 / datagrid.dll v2.2.2.56 -- html object...

CVE-2007-5602

The connected documents confirm a vulnerability in SwiftView Viewer (and SwiftSend) prior to version 8.3.5, caused by stack-based overflows in the svocx.ocx ActiveX control and the npsview.dll browser plug‑in used by Mozilla/Firefox. This allows remote code execution with the user’s privileges vi...

Yahoo! JukeBox MediaGrid ActiveX mediagrid.dll AddBitmap() BOF Exploit

No description provided by source. !-- Yahoo! JukeBox MediaGrid ActiveX Control mediagrid.dll AddBitmap Buffer Overflow Exploit written by e.b. Tested on Windows XP SP2fully patched English, IE6, mediagrid.dll version 2.2.2.56 Thanks to h.d.m. and the Metasploit crew -- html head titleYahoo!...