CVE-2006-6410

Buffer overflow in an ActiveX control in VMWare 5.5.1 allows local users to execute arbitrary code via a long VmdbDb parameter to the Initialize function...

CVE-2006-6410

The CVE-2006-6410 entry describes a buffer overflow in an ActiveX control in VMware 5.5.1 that allows local users to execute arbitrary code by passing a long VmdbDb parameter to the Initialize function. The NVD entry corroborates this description and lists a CVSSv2 base score of 4.6 (Medium) with...

CVE-2006-6410

Buffer overflow in an ActiveX control in VMWare 5.5.1 allows local users to execute arbitrary code via a long VmdbDb parameter to the Initialize function...

[SA23043] AOL CDDBControl ActiveX Control "SetClientInfo()" Buffer Overflow

TITLE: AOL CDDBControl ActiveX Control "SetClientInfo" Buffer Overflow SECUNIA ADVISORY ID: SA23043 VERIFY ADVISORY: http://secunia.com/advisories/23043/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: AOL 9.x http://secunia.com/product/6840/ AOL 8.x...

Microsoft Internet Explorer IMSKDIC.DLL拒绝服务漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer实例化IMSKDIC.DLL COM对象存在问题，远程攻击者可以利用漏洞进行内存破坏攻击，可能以进程权限执行任意指令。 当Microsoft Internet Explorer尝试以ActiveX控件实例化IMSKDIC.DLLMicrosoft IME COM对象，可能破坏系统内存造成拒绝服务，可能导致任意代码执行。 Microsoft Internet Explorer 6.0 SP2 Microsoft Internet Explorer 6.0...

Newtone ImageKit ActiveX buffer overflow

Buffer overflow in Newtone ImageKit ActiveX Control...

AOL ActiveX element buffer overflow

Buffer overflow in CDDBControlAOL.CDDBAOLControl ActiveX control...

Microsoft Internet Explorer CHTSKDIC.DLL拒绝服务漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer实例化CHTSKDIC.DLL COM对象存在问题，远程攻击者可以利用漏洞进行内存破坏攻击，可能以进程权限执行任意指令。 当Microsoft Internet Explorer尝试以ActiveX控件实例化CHTSKDIC.DLLMicrosoft IME COM对象，可能破坏系统内存造成拒绝服务，可能导致任意代码执行。 Microsoft Internet Explorer 6.0 SP2 Microsoft Internet Explorer 6....

DSquare Exploit Pack: D2SEC_WFICA

Name| d2secwfica ---|--- CVE| CVE-2006-6334 Exploit Pack| D2ExploitPack Description| Citrix Metaframe Presentation Server Client - ActiveX Heap Overflow Notes|...

Microsoft IE dxtmsft3.dll Multiple ActiveX COM Object DoS

Microsoft Internet Explorer contains a flaw that may allow a remote denial of service. The issue is triggered when a user accesses a malicious web site that contains scripting code calling a number of ActiveX COM objects in the dxtmsft3.dll library, and will result in loss of availability for the...

Microsoft IE dxtmsft.dll Multiple ActiveX COM Object DoS

Microsoft Internet Explorer contains a flaw that may allow a remote denial of service. The issue is triggered when a user accesses a malicious web site that contains scripting code calling a number of ActiveX COM objects in the dxtmsft.dll library, and will result in loss of availability for the...

Adobe Reader < 8.0 AcroPDF ActiveX Control Multiple Vulnerabilities

The remote host contains a version of the 'AcroPDF' ActiveX control included with Adobe Reader and Acrobat. The version of this ActiveX control on the remote host reportedly exposes several methods that fail to handle malformed arguments. If an attacker can trick a user on the affected host into...

TSRT-06-15: Citrix Presentation Server Client ActiveX Heap Overflow Vulnerability

TSRT-06-15: Citrix Presentation Server Client ActiveX Heap Overflow Vulnerability http://www.tippingpoint.com/security/advisories/TSRT-06-15.html December 6, 2006 -- CVE ID: CVE-2006-6334 -- Affected Vendor: Citrix -- Affected Products: Citrix Presentation Server Client for Windows v9.230 --...

Citrix Presentation Server client for Windows buffer overflow

Buffer overflow in Wfica.ocx ActiveX SendChannelData function...

InterActual Player ITIRecorder.MicRecorder ActiveX远程缓冲区溢出漏洞

InterActual Player是一款可以使用户播放Shockwave技术和语音识别技术的最新DVD多媒体节目。 InterActual Player ITIRecorder.MicRecorder ActiveX控件存在缓冲区溢出攻击，远程攻击者可以利用漏洞以进程权限执行任意指令。 通过构建恶意页，诱使用户访问来触发，目前没有详细漏洞细节提供。 InterActual Technologies InterActual Player 2.60.12 InterActual Player 2.6已经修正此漏洞：...

CVE-2006-3893

Multiple buffer overflows in the ActiveX controls in Newtone ImageKit 5 before Fix 30 and 6 before Fix 40, as used in CASIO Photo Loader software before 3.01 and possibly other software, allow remote attackers to execute arbitrary code via a crafted HTML document...

CVE-2006-3893

CVE-2006-3893 involves multiple buffer overflows in the ActiveX controls of Newtone ImageKit (used by CASIO Photo Loader) that allow remote code execution via a crafted HTML document. Affected: Newtone ImageKit 5 before Fix 30 and ImageKit 6 before Fix 40; CASIO Photo Loader before 3.01. Exploita...

CVE-2006-3893

Multiple buffer overflows in the ActiveX controls in Newtone ImageKit 5 before Fix 30 and 6 before Fix 40, as used in CASIO Photo Loader software before 3.01 and possibly other software, allow remote attackers to execute arbitrary code via a crafted HTML document...

CVE-2006-6236

Adobe Reader Adobe Acrobat Reader 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument string to the 1 src, 2 setPageMode, 3 setLayoutMode, and 4 setNamedDest methods in an AcroPDF ActiveX control, a different set of vector...

CVE-2006-6236

Adobe Reader Adobe Acrobat Reader 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument string to the 1 src, 2 setPageMode, 3 setLayoutMode, and 4 setNamedDest methods in an AcroPDF ActiveX control, a different set of vector...