CVE-2007-6513

HP eSupportDiagnostics ActiveX control hpediag.dll 1.0.11.0 exports dangerous methods, which allows remote attackers to 1 read arbitrary files via the ReadTextFile method, or 2 read arbitrary registry values via the ReadValue method...

Security feature bypass

HP eSupportDiagnostics ActiveX control hpediag.dll 1.0.11.0 exports dangerous methods, which allows remote attackers to 1 read arbitrary files via the ReadTextFile method, or 2 read arbitrary registry values via the ReadValue method...

CVE-2007-6516

Buffer overflow in RavWare Software MAS Flic ActiveX Control masflc.ocx 1.0.0.1 allows remote attackers to execute arbitrary code via a long FileName property...

Buffer overflow

Buffer overflow in RavWare Software MAS Flic ActiveX Control masflc.ocx 1.0.0.1 allows remote attackers to execute arbitrary code via a long FileName property...

CVE-2007-6513

HP eSupportDiagnostics ActiveX control (hpediag.dll) version 1.0.11.0 contains exported methods ReadTextFile and ReadValue that allow a remote attacker to read arbitrary files and read arbitrary registry values. This constitutes an information disclosure vulnerability in the HP eSupportDiagnostic...

CVE-2007-6516

Buffer overflow in RavWare Software MAS Flic ActiveX Control masflc.ocx 1.0.0.1 allows remote attackers to execute arbitrary code via a long FileName property...

CVE-2007-6516

The CVE-2007-6516 entry describes a buffer overflow in RavWare Software MAS Flic ActiveX Control (masflc.ocx) version 1.0.0.1, exploitable by sending a long FileName property to enable remote code execution. The vulnerability is documented by multiple sources (NVD, CVE list). The provided connect...

CVE-2007-6513

HP eSupportDiagnostics ActiveX control hpediag.dll 1.0.11.0 exports dangerous methods, which allows remote attackers to 1 read arbitrary files via the ReadTextFile method, or 2 read arbitrary registry values via the ReadValue method...

IBM Domino Web Access Upload Control ActiveX buffer overflow

Buffer overflow in InstallBrowserHelperDll with GeneralServerName property...

Adobe Flash Player ActiveX控件通用跨站脚本漏洞

Adobe Flash Player是一款流行的FLASH播放程序。 Adobe Flash Player包含的ActiveX控件处理navigateToURL API存在缺陷，远程攻击者可以利用漏洞进行跨站脚本攻击，可获得敏感信息或进行其他攻击。 navigateToURL API函数接收两个参数，URL和要浏览的帧名，SWF动画可在javascript: URI中传递而帧名可是其他域的帧名，这可导致URI执行在其他帧安全上下文中执行，攻击者可以构建恶意WEB页，诱使用户访问来触发。 RedHat Enterprise Linux Supplementary v.5 server...

Yahoo工具条YShortcut.dll控件缓冲区溢出漏洞

CNCAN ID:CNCAN-2007122011 Yahoo toolbar是一款嵌入到浏览器的工具条。 Yahoo toolbar包含的ActiveX YShortcut.dll存在缓冲区溢出，远程攻击者可以利用漏洞可能以应用程序进程权限执行任意指令。 YShortcut是Yahoo工具栏允许映射URL为快捷方式的工具，其中IsTaggedBM函数在WEB浏览器地址栏上输入任何东西时调用，如果传递超过3000字符的数据，可导致缓冲区溢出。相对于自身的边界检查，Yahoo依靠IE浏览器上的2083最大URL长度来控制，此对象没有被标记为安全脚本： YShortcut.dll,...

IBM Lotus Domino Web Access ActiveX control stack buffer overflows

Overview The IBM Lotus Domino Web Access ActiveX control contains multiple stack buffer overflow vulnerabilities, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description IBM Lotus Domino includes an ActiveX control called Domino Web Access,...

CVE-2007-6506

The HPRulesEngine.ContentCollection.1 ActiveX Control in RulesEngine.dll for HP Software Update 4.000.005.007 and earlier, including 3.0.8.4, allows remote attackers to 1 overwrite and corrupt arbitrary files via arguments to the SaveToFile method, and possibly 2 access arbitrary files via the...

CVE-2007-6506

The HPRulesEngine.ContentCollection.1 ActiveX Control in RulesEngine.dll for HP Software Update 4.000.005.007 and earlier, including 3.0.8.4, allows remote attackers to 1 overwrite and corrupt arbitrary files via arguments to the SaveToFile method, and possibly 2 access arbitrary files via the...

CVE-2007-6506

The HPRulesEngine.ContentCollection.1 ActiveX Control in RulesEngine.dll for HP Software Update 4.000.005.007 and earlier, including 3.0.8.4, allows remote attackers to 1 overwrite and corrupt arbitrary files via arguments to the SaveToFile method, and possibly 2 access arbitrary files via the...

CVE-2007-6506

CVE-2007-6506 affects HP Software Update via the HPRulesEngine.ContentCollection ActiveX (RulesEngine.dll) in versions 4.000.005.007 and earlier (including 3.0.8.4). The ActiveX control exposes SaveToFile and LoadDataFromFile methods that enable remote attackers to overwrite/corrupt arbitrary fil...

Security feature bypass

The IMWeb.IMWebControl.1 ActiveX control in IMWeb.dll 7.0.0.x, and possibly IMWebControl.dll, in iMesh 7.1.0.x and earlier allows remote attackers to cause a denial of service Internet Explorer 7 crash via an empty string in the argument to the ProcessRequestEx method...

CVE-2007-6492

The IMWeb.IMWebControl.1 ActiveX control in IMWeb.dll 7.0.0.x, and possibly IMWebControl.dll, in iMesh 7.1.0.x and earlier allows remote attackers to cause a denial of service Internet Explorer 7 crash via an empty string in the argument to the ProcessRequestEx method...

CVE-2007-6493

The IMWeb.IMWebControl.1 ActiveX control in IMWeb.dll 7.0.0.x, and possibly IMWebControl.dll, in iMesh 7.1.0.x and earlier allows remote attackers to execute arbitrary code via a certain argument to the SetHandler method...

Security feature bypass

The IMWeb.IMWebControl.1 ActiveX control in IMWeb.dll 7.0.0.x, and possibly IMWebControl.dll, in iMesh 7.1.0.x and earlier allows remote attackers to execute arbitrary code via a certain argument to the SetHandler method...