CVE-2009-4171

Vulnerability: Yahoo! Messenger’s YahooBridgeLib.dll ActiveX control (9.0.x) is affected by a denial-of-service via a NULL pointer dereference when the RegisterMe method is called with a long argument. Root cause: improper handling in the ActiveX method leading to crash (partial availability impa...

CVE-2009-4171

An ActiveX control in YahooBridgeLib.dll for Yahoo! Messenger 9.0.0.2162, and possibly other 9.0 versions, allows remote attackers to cause a denial of service NULL pointer dereference and application crash by calling the RegisterMe method with a long argument...

Lateral Arts Photobox ActiveX buffer overflows

Buffer overflows in different object's properties...

Secunia Research: Lateral Arts Photobox uploader ActiveX Control Buffer Overflow

====================================================================== Secunia Research 02/12/2009 - Lateral Arts uploader ActiveX Control Buffer Overflow - ====================================================================== Table of Contents Affected...

Altiris ConsoleUtilities ActiveX RunCmd Method Overflow

A vulnerable version of the Altiris ConsoleUtilities ActiveX control is installed on the remote host. This control comes with Altiris Deployment Solution, Altiris Notification Server, and Symantec Management Platform. There is a stack-based buffer overflow in the 'RunCmd' function. A remote...

海海软件全能播放器MyActiveX.ocx ActiveX控件栈溢出漏洞

BUGTRAQ ID: 37151 海海软件全能播放器是一款支持多种媒体格式的万能播放器。 海海软件全能播放器所安装的MyActiveX.ocx ActiveX控件没有正确地验证用户传送给URL属性的参数字符串，用户受骗访问了恶意网页并向该属性传送了超长参数就可以触发栈溢出，导致执行任意代码。 Haihaisoft Universal Player 1.4.8.0 临时解决方法： 为clsid 1A01FF01-EA62-4702-B837-1E07158145FA设置kill-bit。 厂商补丁： Haihaisoft ----------...

HaiHaiSoft Universal Player Buffer Overflow

Haihaisoft Universal Player is prone to an unspecified buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Successful exploits allow remote attackers to execute arbitrary code in the context of the application using the ActiveX...

Haihaisoft Universal Player 1.4.8.0 'URL' Property ActiveX Buffer Overflow

No description provided by source. Haihaisoft Universal Player is prone to an unspecified buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Successful exploits allow remote attackers to execute arbitrary code in the context of t...

Haihaisoft Universal Player 1.4.8.0 - 'URL' Property ActiveX Buffer Overflow

Haihaisoft Universal Player is prone to an unspecified buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Successful exploits allow remote attackers to execute arbitrary code in the context of the application using the ActiveX...

Symantec Norton AntiVirus 2004 ActiveX Denial of Service (CVE-2004-0487)

Symantec Norton Anti-Virus 2004 is an anti-virus solution for both the Enterprise and the Desktop. There exists a vulnerability within Symantec Norton Anti-virus 2004 that allows a remote attacker to cause a denial of service condition on a target system through a malicious call to a certain meth...

Internet Explorer MSWebDVD Class Null Pointer Assignment

The Microsoft MSWebDVD ActiveX library can be used to create a script-based DVD application. This library is included with all versions of Windows XP. There exists a vulnerability within a member function of the MSWebDVD class which is defined in the mswebdvd.dll library. A NULL pointer dereferen...

Haihaisoft Universal Player 1.4.8.0 - URL Property ActiveX Buffer Overflow

Haihaisoft Universal Player 1.4.8.0 - URL Property ActiveX Buffer Overflow Haihaisoft Universal Player is prone to an unspecified buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Successful exploits allow remote attackers to...

Symantec AeXNSConsoleUtilities RunCmd buffer overflow

Added: 11/27/2009 CVE: CVE-2009-3033 BID: 37092 OSVDB: 60496 Background Symantec Altiris Deployment Solution provides tools to deploy software on desktops and servers. Problem A buffer overflow vulnerability in the AeXNSConsoleUtilities ActiveX control allows command execution when a user loads a...

Symantec多个产品AeXNSConsoleUtilities.dll ActiveX控件远程溢出漏洞

BUGTRAQ ID: 37092 CVECAN ID: CVE-2009-3033 Altiris Notification Server、Management Platform和Altiris Deployment Solution都是Symantec的网管和部署解决方案。 在初次连接到Altiris Deployment Solution等产品管理服务器的Web控制台时会安装一个Altiris eXpress NS Console Utilities...

Symantec AeXNSConsoleUtilities RunCmd buffer overflow

Added: 11/27/2009 CVE: CVE-2009-3033 BID: 37092 OSVDB: 60496 Background Symantec Altiris Deployment Solution provides tools to deploy software on desktops and servers. Problem A buffer overflow vulnerability in the AeXNSConsoleUtilities ActiveX control allows command execution when a user loads a...

Symantec AeXNSConsoleUtilities RunCmd buffer overflow

Added: 11/27/2009 CVE: CVE-2009-3033 BID: 37092 OSVDB: 60496 Background Symantec Altiris Deployment Solution provides tools to deploy software on desktops and servers. Problem A buffer overflow vulnerability in the AeXNSConsoleUtilities ActiveX control allows command execution when a user loads a...

EMC ApplicationXtender (KeyWorks) ActiveX Control Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' class Metasploit3 'EMC...

FlipViewer FViewerLoading ActiveX Control Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'FlipViewer...

McAfee Remediation Client ActiveX Control Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' class Metasploit3 'McAfee...

SonicWall SSL-VPN NetExtender ActiveX Control Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'SonicWall...