10868 matches found
CVE-2007-6530
Buffer overflow in the XUpload.ocx ActiveX control in Persits Software XUpload 2.1.0.1, and probably other versions before 3.0, as used by HP Mercury LoadRunner and Groove Virtual Office, allows remote attackers to execute arbitrary code via a long argument to the AddFolder function...
Stack overflow
Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll, and dwa7w.dll, in Domino 6.x and 7.x allow remote attackers to execute arbitrary code, as demonstrated by an overflow from a long GeneralServerName propert...
CVE-2007-6530
Buffer overflow in the XUpload.ocx ActiveX control in Persits Software XUpload 2.1.0.1, and probably other versions before 3.0, as used by HP Mercury LoadRunner and Groove Virtual Office, allows remote attackers to execute arbitrary code via a long argument to the AddFolder function...
DSquare Exploit Pack: D2SEC_XUPLOAD
Name| d2secxupload ---|--- CVE| CVE-2007-6530 Exploit Pack| D2ExploitPack Description| Persits Software XUpload ActiveX Stack Overflow Notes|...
CVE-2007-6530
CVE-2007-6530 : Buffer overflow in Persits Software XUpload ActiveX control (AddFolder method) allows remote code execution via a long argument. Affected: XUpload 2.1.0.1 and likely earlier versions (pre-3.0). Products listed in description include HP Mercury LoadRunner and Groove Virtual Office....
CVE-2007-4474
CVE-2007-4474 involves multiple stack-based buffer overflows in IBM Lotus Domino Web Access ActiveX controls (inotes6.dll, inotes6w.dll, dwa7.dll, dwa7w.dll) used by Domino 6.x/7.x. The root cause is a boundary/overflow vulnerability when handling a long General_ServerName property value in the U...
Mercury LoadRunner XUpload ActiveX控件缓冲区溢出漏洞
BUGTRAQ ID: CNCAN ID:CNCAN-2007122709 Mercury LoadRunner是一款预测系统行为和性能的负载测试工具。 Mercury LoadRunner包含的XUpload ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 XUpload ActiveX控件对"AddFolder"方法缺少正确的边界错误，构建恶意的WEB页，诱使用户访问，可触发缓冲区溢出，精心构建提交数据可能以应用程序进程权限执行任意指令。 HP LoadRunner 9.x Mercury LoadRunner 8.x --------...
Groove Virtual Office XUpload ActiveX控件缓冲区溢出漏洞
Groove Virtual Office是一款协同办公处理文档的应用程序。 Groove Virtual Office包含的XUpload ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 XUpload ActiveX控件对"AddFolder"方法缺少正确的边界错误，构建恶意的WEB页，诱使用户访问，可触发缓冲区溢出，精心构建提交数据可能以应用程序进程权限执行任意指令。 Groove Virtual Office 3.x Office Groove 2007不受此漏洞影响：...
WebEx Downloader插件远程代码执行漏洞
BUGTRAQ ID: 18860 CVECAN ID: CVE-2006-3423 WebEx是全球最大的网络通信服务供应商，可提供电信级网络会议解决方案。 WebEx在处理组件下载操作时存在漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意命令。 WebEx在召开或加入网络会议时需要使用Downloader插件来下载一些额外的组件。在下载时由于对各种ActiveX/Java控件参数和配置指令缺少验证，GpcUrlRoot和GpcIniFileName...
Microsoft IE navcancl.htm跨站脚本执行漏洞（MS07-033）
BUGTRAQ ID: 22966 CVECAN ID: CVE-2007-1499 Internet Explorer是微软发布的非常流行的WEB浏览器。 IE在处理页面导航的操作上存在漏洞，远程攻击者可能利用此漏洞实现跨站脚本执行。 如果由于某种原因取消了到特定页面的导航的话，IE 7浏览器会使用navcancl.htm本地资源，在取消导航时特定页面的URL在“”符号后提供给了navcancl.htm，如res://ieframe.dll/navcancl.htmhttp://www.site.com...
Microsoft IE StructuredGraphicsControl远程拒绝服务漏洞
BUGTRAQ ID: 18855 Microsoft IE是微软发布的非常流行的WEB浏览器。 Microsoft IE在处理ActiveX对象时存在漏洞，远程攻击者可能利用此漏洞导致用户的IE崩溃。 IE在调用URLOpenBlockingStream处理ActiveX控件时，ppStream参数会触发空指针应用，如果用户受骗访问了恶意的WEB页面的话就会导致拒绝服务。 Microsoft Internet Explorer 6.0 SP2 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 厂商补丁...
AOL AIM YGP Picture Editor ActiveX control buffer overflow
Buffer overflows in different properties...
Microsoft Internet Explorer ADODB.Recordset空指针引用拒绝服务漏洞
BUGTRAQ ID: 18773 Microsoft Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer在处理ADODB.Recordset ActiveX对象时存在拒绝服务漏洞，远程攻击者可能利用此漏洞导致用户IE浏览器崩溃。 ADODB.Recordset ActiveX对象的属性被三次赋与不同的值时会触发空指针引用问题，如果用户受骗访问了包含畸形ActiveX引用代码的恶意WEB页面的话就会导致IE拒绝服务。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet...
Macrovision InstallShield ActiveX code execution
Unsafe Update Service ActiveX method allows code execution...
IBM Lotus Domino Web Access ActiveX Control Buffer Overflow Vulnerabilities
The remote host contains the Domino Web Access or iNotes6 Class ActiveX control, which is used by IBM Lotus Domino for uploading files and clearing the cache on logout. The version of this control on the remote host reportedly contains multiple stack-based buffer overflows. If a remote attacker c...
AOL Picture Editor 'YGPPicEdit.dll' ActiveX Control 9.5.1.8 - Multiple Buffer Overflow Vulnerabilities
source: https://www.securityfocus.com/bid/27026/info AOL Picture Editor 'YGPPicEdit.dll' ActiveX control is prone to multiple vulnerabilities that attackers can exploit to crash the application. The issues stem from various buffer-overflow conditions. An attacker can exploit these issues by...
AOL Picture Editor YGPPicEdit.dll ActiveX Control 9.5.1.8 - Multiple Buffer Overflow Vulnerabilities
AOL Picture Editor YGPPicEdit.dll ActiveX Control 9.5.1.8 - Multiple Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/27026/info AOL Picture Editor 'YGPPicEdit.dll' ActiveX control is prone to multiple vulnerabilities that attackers can exploit to crash the application. T...
HP Software Update RulesEngine.dll控件远程文件覆盖漏洞
BUGTRAQ ID: 26950 HP Software Update是HP笔记本中默认安装的自动升级和补丁软件。 HP Software Updates所带的ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞访问或破坏用户系统上的任意文件。 HP Software Updates所安装的RulesEngine.dll控件（CLSID：7CB9D4F5-C492-42A4-93B1-3F7D6946470D，默认路径C:\Program...
HP Software Update HPRulesEngine.ContentCollection ActiveX (RulesEngine.dll) Multiple Insecure Methods
The remote host contains the HP Software Update software, installed by default on many HP notebooks to support automatic software updates and vulnerability patching. The version of this software on the remote host includes an ActiveX control, 'RulesEngineLib', that reportedly contains two insecur...