Buffer overflow

Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilities.dll in the web console in Symantec Altiris Deployment Solution 6.9.x, Altiris Notification Server 6.0.x, and Management Platform 7.0.x allows remote attackers to execute...

DSquare Exploit Pack: D2SEC_ALTIRISRC

Name| d2secaltirisrc ---|--- CVE| CVE-2009-3033 Exploit Pack| D2ExploitPack Description| Symantec Altiris Products ActiveX Stack Overflow Vulnerability Notes|...

CVE-2009-3033

Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilities.dll in the web console in Symantec Altiris Deployment Solution 6.9.x, Altiris Notification Server 6.0.x, and Management Platform 7.0.x allows remote attackers to execute...

CVE-2009-3033

Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilities.dll in the web console in Symantec Altiris Deployment Solution 6.9.x, Altiris Notification Server 6.0.x, and Management Platform 7.0.x allows remote attackers to execute...

Code injection

Autodesk Softimage 7.x and Softimage XSI 6.x allow remote attackers to execute arbitrary JavaScript code via a scene package containing a Scene Table of Contents aka .scntoc file with a ScriptContent element, as demonstrated by code that loads the WScript.Shell ActiveX control...

Symantec’s Altiris Deployment and Notification Management Web Console RunCmd Vulnerability

SUMMARY Symantecs Altiris Deployment Solution, Notification Server and Symantec Management Platform web consoles install a vulnerable ActiveX control. Exploitation of one of the methods used by this control could possibly lead to unauthorized information disclosure, system information corruption ...

Buffer overflow

Multiple buffer overflows in a certain ActiveX control in ActiveDom.ocx in HP OpenView Network Node Manager OV NNM 7.53 might allow remote attackers to cause a denial of service memory corruption or have unspecified other impact via a long string argument to the 1 DisplayName, 2 AddGroup, 3...

CVE-2009-3977

Multiple buffer overflows in a certain ActiveX control in ActiveDom.ocx in HP OpenView Network Node Manager OV NNM 7.53 might allow remote attackers to cause a denial of service memory corruption or have unspecified other impact via a long string argument to the 1 DisplayName, 2 AddGroup, 3...

CVE-2009-3977

Multiple buffer overflows in a certain ActiveX control in ActiveDom.ocx in HP OpenView Network Node Manager OV NNM 7.53 might allow remote attackers to cause a denial of service memory corruption or have unspecified other impact via a long string argument to the 1 DisplayName, 2 AddGroup, 3...

CVE-2009-3977

CVE-2009-3977 affects the ActiveX control ActiveDom.ocx in HP OpenView Network Node Manager (OV NNM) 7.53. The vulnerability comprises multiple buffer overflows exploitable via long string arguments to the DisplayName, AddGroup, InstallComponent, or Subscribe methods, potentially leading to memor...

Adobe AcroPDF.dll Denial Of Service

Adobe browser document ActiveX DoS vulnerablity File: AcroPDF.dll Affected version : 7.0.5 . Later versions are also effected Description: RegKey Safe for Script: True RegKey Safe for Init: True POC: Create a HTML file with following Code and test it on IE Test Exploit page targetFile = "C:\Progr...

Internet Explorer daxctle.ocx KeyFrame Method Memory Corruption (MS06-067; CVE-2006-4777)

Microsoft Internet Explorer IE is a web browser application that is capable rendering both static and dynamic contents. The application supports the ActiveX technology, which is a feature extension framework. IE is installed with a set of ActiveX controls including the DirectAnimation package...

Yahoo! Messenger 9 Denial Of Service

Product: Yahoo Messenger 9.0.0.2162 Vulnerability: ActiveX Null Pointer - Denial of Service Description: Yahoo Messenger is prone to a denial-of-service cause of null pointer vulnerability. Vulnerability is in YahooBridgeLib.dll Activex Control An attacker can exploit this vulnerability by entici...

EasyMail IMAP4 ActiveX Control LicenseKey buffer overflow

Added: 11/16/2009 OSVDB: 59938 Background QuikSoft EasyMail Objects is a set of ActiveX controls which provide e-mail functionality. QuikSoft EasyMail Objects is included with Oracle Document Capture among other products. Problem A buffer overflow vulnerability in the EasyMail IMAP4 ActiveX...

EasyMail IMAP4 ActiveX Control LicenseKey buffer overflow

Added: 11/16/2009 OSVDB: 59938 Background QuikSoft EasyMail Objects is a set of ActiveX controls which provide e-mail functionality. QuikSoft EasyMail Objects is included with Oracle Document Capture among other products. Problem A buffer overflow vulnerability in the EasyMail IMAP4 ActiveX...

EasyMail IMAP4 ActiveX Control LicenseKey buffer overflow

Added: 11/16/2009 OSVDB: 59938 Background QuikSoft EasyMail Objects is a set of ActiveX controls which provide e-mail functionality. QuikSoft EasyMail Objects is included with Oracle Document Capture among other products. Problem A buffer overflow vulnerability in the EasyMail IMAP4 ActiveX...

EasyMail IMAP4 ActiveX Control LicenseKey buffer overflow

Added: 11/16/2009 OSVDB: 59938 Background QuikSoft EasyMail Objects is a set of ActiveX controls which provide e-mail functionality. QuikSoft EasyMail Objects is included with Oracle Document Capture among other products. Problem A buffer overflow vulnerability in the EasyMail IMAP4 ActiveX...

AwingSoft Winds3D Player 3.5 SceneURL Download and Execute

This module exploits an untrusted program execution vulnerability within the Winds3D Player from AwingSoft. The Winds3D Player is a browser plugin for IE ActiveX, Opera DLL and Firefox XPI. By setting the 'SceneURL' parameter to the URL to an executable, an attacker can execute arbitrary code...

雅虎通9.0.0.2162 YahooBridgeLib.dll ActiveX控件空指针引用拒绝服务漏洞

BUGTRAQ ID: 37007 雅虎通是一款非常流行的即时通讯工具。 雅虎通所安装的YahooBridgeLib.dll Activex控件没有正确地验证用户所传送的超长参数。如果用户受骗访问了恶意网页并传送了超长参数，就可能触发空指针引用，导致浏览器崩溃。 Yahoo! Messenger 9.0.0.2162 临时解决方法： 为clsid 58916BE6-BAFF-4F33-AEFE-B2AA03FE4C86设置kill-bit。 厂商补丁： Yahoo! ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Yahoo Messenger 9 ActiveX DoS (Null Pointer) Vulnerability

Product: Yahoo Messenger 9.0.0.2162 Vulnerability: ActiveX Null Pointer - Denial of Service Description: Yahoo Messenger is prone to a denial-of-service cause of null pointer vulnerability. Vulnerability is in YahooBridgeLib.dll Activex Control An attacker can exploit this vulnerability by entici...