10868 matches found
BitDefender在线扫描器OScan.OCX ActiveX控件堆溢出漏洞
BUGTRAQ ID: 26210 CVECAN ID: CVE-2007-5775 BitDefender Online Scanner是一款免费的在线杀毒软件。 BitDefender在线扫描器所捆绑的OScan.ocx控件中存在远程代码执行漏洞，远程攻击者可能利用此漏洞在用户系统上执行任意指令。 OScan.ocx的有漏洞函数为InitX，该函数取得了bstrLocation的字符串参数值用于确认调用域。InitX的IDL类似于以下： Function InitX ByVal bstrLocation as String As Boolean...
Aurigma Image Uploader 4.x - ActiveX Control Multiple Remote Stack Buffer Overflow Vulnerabilities
source: https://www.securityfocus.com/bid/26537/info Aurigma Image Uploader ActiveX control is prone to multiple stack-based buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data. Successfully exploiting these issues allows remote attackers to...
[Full-disclosure] Aurigma ImageUploader 4.1 Multiple stack overflows
There are multiple stack overflows in the Aurigma ImageUploader 4.1 ActiveX control. I believe this control was installed by www.dotphoto.com. PoC as follows: ----------------------- !-- written by e.b. -- html head script language="JavaScript" DEFER function Check var s = "AAAA"; while s.length...
EEYE: BitDefender Online Scanner 8 Double Decode Heap Overflow
BitDefender Online Scanner 8 Double Decode Heap Overflow Release Date: November 20, 2007 Date Reported: October 24, 2007 Severity: High Remote Code Execution Vendor: BitDefender / SOFTWIN - http://www.bitdefender.com Systems Affected: BitDefender Online Scan Users Overview: eEye Digital Security...
Stack overflow
Multiple stack-based buffer overflows in the VSFlexGrid.VSFlexGridL ActiveX control in ComponentOne FlexGrid 7.1 Light allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long string in the 1 Text, 2 EditSelText, 3 EditText, and 4 CellFontName property...
CVE-2007-6028
The CVE-2007-6028 entry describes multiple stack-based buffer overflows in the VSFlexGrid.VSFlexGridL ActiveX control from ComponentOne FlexGrid 7.1 Light. An attacker can trigger by providing long strings in the Text, EditSelText, EditText, or CellFontName properties, enabling remote exploitatio...
CVE-2007-6028
Multiple stack-based buffer overflows in the VSFlexGrid.VSFlexGridL ActiveX control in ComponentOne FlexGrid 7.1 Light allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long string in the 1 Text, 2 EditSelText, 3 EditText, and 4 CellFontName property...
Microsoft Forms 2.0 ActiveX控件内存访问冲突拒绝服务漏洞
BUGTRAQ ID: 26414 CNCAN ID:CNCAN-2007111603 Microsoft Forms 2.0 ActiveX Control Memory Access Violation Denial of Service Vulnerabilities Microsoft Forms 2.0是一款微软提供的表单控件。 Microsoft Forms包含的ActiveX控件存在设计错误，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 构建恶意的WEB页，诱使用户访问，可导致使用Microsoft Forms的应用程序崩溃。 Microsoft Forms...
Microsoft Office Web Component Memory Access Violation Denial of Service Vulnera
Microsoft Office Web组件一款基与Web的数据透视表控件。 Microsoft Office Web包含的ActiveX控件存在设计错误，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 构建恶意的EWB页，诱使用户访问，可导致对应用程序进行拒绝服务攻击。 Microsoft Office Web Components 2003 0 + Microsoft BizTalk Server 2002 Developer Edition + Microsoft BizTalk Server 2002 Enterprise Edition + Microsoft Commer...
Xunlei Thunder PPLAYER.DLL_1_WORK ActiveX Control Buffer Overflow Vulnerability
Description Xunlei Thunder PPlayer ActiveX Control is prone a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the applicati...
ComponentOne FlexGrid ActiveX multiple buffer overflows
Buffer overflows on different object properties...
CVE-2007-6005
Unspecified vulnerability in the GpcContainer.GpcContainer.1 ActiveX control in WebEx allows remote attackers to cause a denial of service memory access violation and crash via 1 an invalid argument to the InitParam method or 2 an unspecified vector involving the SetParam method...
Design/Logic Flaw
Unspecified vulnerability in the GpcContainer.GpcContainer.1 ActiveX control in WebEx allows remote attackers to cause a denial of service memory access violation and crash via 1 an invalid argument to the InitParam method or 2 an unspecified vector involving the SetParam method...
CVE-2007-6005
CVE-2007-6005 affects WebEx via the GpcContainer.1 ActiveX control and can cause denial of service through a memory access violation triggered by an invalid InitParam argument or an unspecified vector in SetParam. Exploitation and affected versions are not specified in the provided documents; no ...
The next is you! PPlive 0Day net horse exposure! - Vulnerability warning-the black bar safety net
According to a recent malicious URL detection results, and found there part of the network Marley with the latest PPlive 0Day vulnerabilities in the spread, although the current number is not much, but I believe will soon become a net Horse the main force, and with the thunder, Baidu search PA,...
ComponentOne FlexGrid 7.1 - ActiveX Control Multiple Buffer Overflow Vulnerabilities
source: https://www.securityfocus.com/bid/26467/info ComponentOne FlexGrid ActiveX Control is prone to multiple stack-based buffer-overflow vulnerabilities because the application fails to adequately check boundaries on user-supplied input. An attacker can exploit these issues to cause denial...
ComponentOne FlexGrid 7.1 - ActiveX Control Multiple Buffer Overflow Vulnerabilities
ComponentOne FlexGrid 7.1 - ActiveX Control Multiple Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/26467/info ComponentOne FlexGrid ActiveX Control is prone to multiple stack-based buffer-overflow vulnerabilities because the application fails to adequately check...
webex-mem.txt
Typo in the original PoC. It should read as follows: --------------------- function Check var obj = new ActiveXObject"GpcContainer.GpcContainer.1"; obj.InitParam"A"; --------------------- Elazar...
Stack overflow
Multiple stack-based buffer overflows in the AOL AmpX ActiveX control in AmpX.dll 2.6.1.11 in AOL Radio allow remote attackers to execute arbitrary code via long arguments to unspecified methods...
CVE-2007-5755
Multiple stack-based buffer overflows in the AOL AmpX ActiveX control in AmpX.dll 2.6.1.11 in AOL Radio allow remote attackers to execute arbitrary code via long arguments to unspecified methods...