Yahoo Messenger AudioConf ActiveX Control Buffer Overflow (CVE-2007-1680)

Yahoo! Messenger is an instant messaging communicating application developed by Yahoo! Inc. One of the features that Yahoo! Messenger provides is the ability to create conference rooms. Yahoo! Messenger users can create a conference room and invite other users to join the conference. The conferen...

VulnCheck KEV: CVE-2008-3008

Stack-based buffer overflow in the WMEncProfileManager ActiveX control in wmex.dll in Microsoft Windows Media Encoder 9 Series allows remote attackers to execute arbitrary code via a long first argument to the GetDetailsString method, aka "Windows Media Encoder Buffer Overrun Vulnerability."...

VulnCheck KEV: CVE-2008-1490

Buffer overflow in a certain Aurigma ActiveX control in ImageUploader4.ocx 4.1.36.0, as used with Piczo aka Pizco and possibly other online services, allows remote attackers to execute arbitrary code via unspecified vectors, possibly involving a long Action property, a different CLSID than...

VulnCheck KEV: CVE-2006-6027

Adobe Reader Adobe Acrobat Reader 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument string to the LoadFile method in an AcroPDF ActiveX control...

VulnCheck KEV: CVE-2007-3148

Buffer overflow in the Yahoo! Webcam Viewer ActiveX control in ywcvwr.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the receive method...

VulnCheck KEV: CVE-2007-2987

Multiple buffer overflows in certain ActiveX controls in sasatl.dll in Zenturi ProgramChecker allow remote attackers to execute arbitrary code via unspecified vectors, possibly involving the 1 DebugMsgLog or 2 DoFileProperties methods...

VulnCheck KEV: CVE-2007-2496

The WordOCX ActiveX control in WordViewer.ocx 3.2.0.5 allows remote attackers to cause a denial of service Internet Explorer 7 crash via a long 1 DoOleCommand, 2 FTPDownloadFile, 3 FTPUploadFile, 4 HttpUploadFile, 5 GotoPage, 6 Save, 7 SaveWebFile, 8 HttpDownloadFile, 9 Open, 10 OpenWebFile, 11...

VulnCheck KEV: CVE-2006-0003

Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects ADO and distributed in Microsoft Data Access Components MDAC 2.7 and 2.8, allows remote attackers to execute arbitrary code via unknown attack vectors...

VulnCheck KEV: CVE-2007-6250

Stack-based buffer overflow in AOL AOLMediaPlaybackControl AOLMediaPlaybackControl.exe, as used by AmpX ActiveX control AmpX.dll, might allow remote attackers to execute arbitrary code via the AppendFileToPlayList method...

VulnCheck KEV: CVE-2007-3147

Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the send method. NOTE: some of these details are obtained from third party information...

Microsoft Internet Explorer - Tabular Data Control ActiveX Memory Corruption (MS10-018) (Metasploit)

$Id: ms10018ietabularactivex.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

HP Mercury Quality Center - ActiveX Control ProgColor Buffer Overflow (Metasploit)

$Id: hpmqcprogcolor.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

BaoFeng Storm - 'mps.dll' ActiveX OnBeforeVideoDownload Buffer Overflow (Metasploit)

$Id: baofengstormonbeforevideodownload.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Autodesk IDrop - ActiveX Control Heap Memory Corruption (Metasploit)

$Id: autodeskidrop.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Roxio CinePlayer - ActiveX Control Buffer Overflow (Metasploit)

$Id: roxiocineplayer.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

Webmoney Advisor - ActiveX Remote Denial of Service

Pwnage Page targetFile = "C:\Program Files\WebMoney Advisor\wmadvisor.dll" prototype = "Sub Redirect ByVal url As String " memberName = "Redirect" progid = "TOOLBAR3Lib.ToolbarObj" argCount = 1 arg1=String1337, "A" target.Redirect arg1...

Webmoney Advisor ActiveX Remote DoS Exploit

Exploit for windows platform in category dos / poc =========================================== Webmoney Advisor ActiveX Remote DoS Exploit =========================================== Pwnage Page targetFile = "C:\Program Files\WebMoney Advisor\wmadvisor.dll" prototype = "Sub Redirect ByVal url As...

Webmoney Advisor - ActiveX Remote Denial of Service

Webmoney Advisor - ActiveX Remote Denial of Service Pwnage Page targetFile = "C:\Program Files\WebMoney Advisor\wmadvisor.dll" prototype = "Sub Redirect ByVal url As String " memberName = "Redirect" progid = "TOOLBAR3Lib.ToolbarObj" argCount = 1 arg1=String1337, "A" target.Redirect arg1...

Adobe下载管理器gp.ocx ActiveX控件缓冲区溢出漏洞

BUGTRAQ ID: 39615 CVE ID: CVE-2010-1278 Adobe Download Manager直接与Adobe服务器配合工作, 可帮助控制Adobe Reader、Adobe Acrobat及其他Adobe文件的下载过程。 Adobe Download Manager所安装的gp.ocx ActiveX控件在初始化期间将两个参数值拷贝到了固定长度的缓冲区，如果用户受骗访问了恶意网页并传送了超长参数就可以触发缓冲区溢出，导致执行任意代码。 Adobe Acrobat 9.x Adobe Acrobat 8.x Adobe Download Manager...

Update Protection against Novell iPrint Client ienipp.ocx target-frame Stack Buffer Overflow

A buffer overflow vulnerability exists in Novell iPrint Client, an application that allows users to install and manage printers, or submit print jobs from a web browser. The vulnerability is due to a boundary error in the ActiveX control when parsing target-frame parameter values. A remote attack...