Microsoft Agent ActiveX buffer overflow

Buffer overflow on oversized URL...

Callisto PhotoParade Player PhPInfo ActiveX control buffer overflow

Overview The Callisto PhotoParade Player PhPInfo ActiveX control contains a buffer overflow, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Callisto PhotoParade Player includes an ActiveX control called PhPinfo. The ActiveX control...

iDefense Security Advisory 09.11.07: Microsoft Windows 2000 Agent URL Canonicalizing Stack Based Buffer Overflow Vulnerability

Microsoft Windows 2000 Agent URL Canonicalizing Stack Based Buffer Overflow Vulnerability iDefense Security Advisory 09.11.07 http://labs.idefense.com/intelligence/vulnerabilities/ Sep 11, 2007 I. BACKGROUND Microsoft Agent allows websites and programs to display animated characters that speak an...

3DGreetings Player ActiveX Multiple Buffer Overflows

The remote host contains the 3DGreetings Player ActiveX control from Broderbund / Expressit.com used to display 3D greeting cards. The version of this control installed on the remote host reportedly contains multiple stack-based buffer overflows. If an attacker can trick a user on the affected ho...

Microsoft Visual Studio PDWizard.ocx ActiveX控件多个不安全方式漏洞

BUGTRAQ ID: 25638 Microsoft Visual Studio是微软公司的开发工具套件系列产品，是一个基本完整的开发工具集，包括了软件整个生命周期中所需要的大部分工具。 Visual Studio所安装的PDWizard.ocx ActiveX控件没有正确的验证对StartProcess、SyncShell、SaveAs、CABDefaultURL、 CABFileName、CABRunFile等方式的输入参数，如果用户受骗访问了恶意网页并向这些方式传送了超长参数的话，就可能导致执行任意代码。 Microsoft Visual Studio 6.0...

Buffer overflow

Buffer overflow in a certain ActiveX control in officeviewer.ocx 5.2.218.1 in EDraw Office Viewer Component 5.2 allows remote attackers to execute arbitrary code via a long first argument to the HttpDownloadFileToTempDir method, a different vulnerability than CVE-2007-3169...

Buffer overflow

Multiple buffer overflows in the BaoFeng2 storm ActiveX control in Mps.dll allow remote attackers to have an unknown impact via a long 1 URL, 2 backImage, or 3 titleImage property value; 4 a long first argument to the advancedOpen method; a long argument to the 5 isDVDPath or 6 rawParse method; o...

CVE-2007-4816

Multiple buffer overflows in the BaoFeng2 storm ActiveX control in Mps.dll allow remote attackers to have an unknown impact via a long 1 URL, 2 backImage, or 3 titleImage property value; 4 a long first argument to the advancedOpen method; a long argument to the 5 isDVDPath or 6 rawParse method; o...

CVE-2007-4821

Buffer overflow in a certain ActiveX control in officeviewer.ocx 5.2.218.1 in EDraw Office Viewer Component 5.2 allows remote attackers to execute arbitrary code via a long first argument to the HttpDownloadFileToTempDir method, a different vulnerability than CVE-2007-3169...

CVE-2007-4814

Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL sqldmo.dll 2000.085.2004.00 in Microsoft SQL Server Enterprise Manager 8.05.2004 allows remote attackers to execute arbitrary code via a long second argument to the Start method...

CVE-2007-4814

CVE-2007-4814 affects the SQL Server Distributed Management Objects (DMO) ActiveX control sqldmo.dll. A buffer overflow in the Start method is triggered by a long argument, enabling remote code execution. Exploitation details are documented in SAINT references, with note that exploits exist for M...

CVE-2007-4821

Buffer overflow in a certain ActiveX control in officeviewer.ocx 5.2.218.1 in EDraw Office Viewer Component 5.2 allows remote attackers to execute arbitrary code via a long first argument to the HttpDownloadFileToTempDir method, a different vulnerability than CVE-2007-3169...

CVE-2007-4816

CVE-2007-4816 corresponds to multiple buffer overflows in the BaoFeng2 storm ActiveX control (Mps.dll). The provided documents indicate that remote attackers can exploit excessively long values in various properties and method arguments (URL, backImage, titleImage, advancedOpen, isDVDPath, rawPar...

CVE-2007-4816

Multiple buffer overflows in the BaoFeng2 storm ActiveX control in Mps.dll allow remote attackers to have an unknown impact via a long 1 URL, 2 backImage, or 3 titleImage property value; 4 a long first argument to the advancedOpen method; a long argument to the 5 isDVDPath or 6 rawParse method; o...

CVE-2007-4802

Multiple heap-based buffer overflows in GlobalLink 2.7.0.8 allow remote attackers to execute arbitrary code via 1 a long eighth argument to the SetInfo method in a certain ActiveX control in glItemCom.dll or 2 a long second argument to the SetClientInfo method in a certain ActiveX control in...

Heap overflow

Multiple heap-based buffer overflows in GlobalLink 2.7.0.8 allow remote attackers to execute arbitrary code via 1 a long eighth argument to the SetInfo method in a certain ActiveX control in glItemCom.dll or 2 a long second argument to the SetClientInfo method in a certain ActiveX control in...

CVE-2007-4802

CVE-2007-4802 affects GlobalLink 2.7.0.8 (glItemCom.dll, glitemflat.dll). The issue is multiple heap-based buffer overflows that allow remote attackers to execute arbitrary code via: (1) a long eighth argument to SetInfo in glItemCom.dll and (2) a long second argument to SetClientInfo in glitemfl...

Microsoft Agent agentdpv.dll ActiveX Control Malformed URL Stack Buffer Overflow Vulnerability

Description Microsoft Agent agentsvr.exe is prone to a stack-based buffer-overflow vulnerability because the application fails to adequately bounds-check user-supplied data. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the currently...

Microsoft Agent fails to properly handle specially crafted URLs

Overview Microsoft Agent fails to properly handle specially crafted URLs, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system Description Microsoft Agent is software that provides animated characters to enhance interaction with computer systems...

Assurent VR - Microsoft Agent Crafted URL Stack Buffer Overflow

Microsoft Agent Crafted URL Stack Buffer Overflow Assurent ID: FSC20070911-11 1. Affected Software Microsoft Agent, version 2.0.0.3425 bundled with Windows 2000 Service Pack 4 Reference: http://www.microsoft.com/msagent/ 2. Vulnerability Summary The Microsoft Agent ActiveX control contains a buff...