10874 matches found
CVE-2009-2507
A certain ActiveX control in the Indexing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly process URLs, which allows remote attackers to execute arbitrary programs via unspecified vectors that cause a "vulnerable binary" to load and run, aka "Memory...
CVE-2009-2507
CVE-2009-2507 describes a remote code execution via an ActiveX control in the Microsoft Windows Indexing Service. The vulnerability arises because the Indexing Service ActiveX component does not properly handle specially crafted URLs, enabling a remote attacker to load/execute arbitrary code on a...
CVE-2009-2507
A certain ActiveX control in the Indexing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly process URLs, which allows remote attackers to execute arbitrary programs via unspecified vectors that cause a "vulnerable binary" to load and run, aka "Memory...
MS09-060: Vulnerabilities in Microsoft Active Template Library (ATL) ActiveX Controls for Microsoft Office Could Allow Remote Code Execution (973965)
One or more ActiveX controls included in Microsoft Outlook or Visio and installed on the remote Windows host was compiled with a version of Microsoft Active Template Library ATL that is affected by potentially several vulnerabilities : - An issue in the ATL headers could allow an attacker to forc...
Adobe Reader < 9.2 / 8.1.7 / 7.1.4 Multiple Vulnerabilities (APSB09-15)
The version of Adobe Reader installed on the remote host is earlier than 9.2 / 8.1.7 / 7.1.4. Such versions are potentially affected by multiple vulnerabilities : - A heap overflow vulnerability. CVE-2009-3459 - A memory corruption issue. CVE-2009-2985 - Multiple heap overflow vulnerabilities...
Microsoft ATL ActiveX Controls for MS Office Could Allow Remote Code Execution (973965)
This host is missing a critical security update according to Microsoft Bulletin MS09-060. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Adobe Acrobat < 9.2 / 8.1.7 / 7.1.4 Multiple Vulnerabilities (APSB09-15)
The version of Adobe Acrobat installed on the remote host is earlier than 9.2 / 8.1.7 / 7.1.4. Such versions are reportedly affected by multiple vulnerabilities : - A heap overflow vulnerability. CVE-2009-3459 - A memory corruption issue. CVE-2009-2985 - Multiple heap overflow vulnerabilities...
Microsoft Ships Largest Batch of Security Patches
Microsoft today released its largest ever batch of Patch Tuesday updates to fix a whopping 34 security holes in a wide range of widely deployed software products. The latest patch batch covers critical vulnerabilities in software products that are bundled with Microsoft’s dominant Windows operati...
DSquare Exploit Pack: D2SEC_XUPLOAD2
Name| d2secxupload2 ---|--- CVE| CVE-2009-3693 Exploit Pack| D2ExploitPack Description| HP LoadRunner XUpload.ocx ActiveX Arbitrary File Download Vulnerability Notes|...
Directory traversal
Directory traversal vulnerability in the Persits.XUpload.2 ActiveX control XUpload.ocx in HP LoadRunner 9.5 allows remote attackers to create arbitrary files via .. backwards slash dot dot sequences in the third argument to the MakeHttpRequest method...
CVE-2009-3693
Directory traversal vulnerability in the Persits.XUpload.2 ActiveX control XUpload.ocx in HP LoadRunner 9.5 allows remote attackers to create arbitrary files via .. backwards slash dot dot sequences in the third argument to the MakeHttpRequest method...
CVE-2009-3693
CVE-2009-3693 involves a directory traversal in Persits.XUpload.2 ActiveX control (XUpload.ocx) shipped with HP LoadRunner 9.5. The flaw arises in the MakeHttpRequest method, where sequences like "..\" can cause arbitrary files to be created on the target. Public details describe this as a write-...
Microsoft Indexing Service ActiveX Memory Corruption (MS09-057; CVE-2009-2507)
The Microsoft Windows Indexing Service is a base service that extracts content from files and constructs an indexed catalog to facilitate efficient and rapid searching. A remote code execution vulnerability has been reported in the Microsoft Indexing Service. The vulnerability is caused by an...
Microsoft Windows Indexing Service ActiveX memory corruption
No description provided...
Microsoft Indexing Service ActiveX Control Remote Code Execution Vulnerability
Description The Microsoft Indexing Service ActiveX control is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting to view a malicious webpage. Successful exploits will allow the attacker to execute arbitrary code within the context of an...
Microsoft Security Bulletin MS09-055 - Critical Cumulative Security Update of ActiveX Kill Bits (973525)
Microsoft Security Bulletin MS09-060 - Critical Vulnerabilities in Microsoft Active Template Library ATL ActiveX Controls for Microsoft Office Could Allow Remote Code Execution 973965 Published: October 13, 2009 Version: 1.0 General Information Executive Summary This security update resolves...
Microsoft Security Bulletin MS09-055 - Critical Cumulative Security Update of ActiveX Kill Bits (973525)
Microsoft Security Bulletin MS09-055 - Critical Cumulative Security Update of ActiveX Kill Bits 973525 Published: October 13, 2009 Version: 1.0 General Information Executive Summary This security update addresses a privately reported vulnerability that is common to multiple ActiveX controls and i...
MS09-057: Vulnerability in Indexing Service Could Allow Remote Code Execution (969059)
The remote host contains the ixsso.dll ActiveX control. This control is included with the Indexing Service. The version of this control installed on the remote host reportedly has an arbitrary code execution vulnerability. A remote attacker could exploit this by tricking a user into requesting a...
MS09-055: Cumulative Security Update of ActiveX Kill Bits (973525)
Microsoft ActiveX controls that were compiled using the vulnerable Active Template Library described in Microsoft Security Bulletin MS09-035 have remote code execution vulnerabilities. A remote attacker could exploit them to execute arbitrary code by tricking a user into requesting a maliciously...
KeyWorks keyhelp.ocx ActiveX控件栈溢出漏洞
BUGTRAQ ID: 36546 KeyHelp是一个免费的ActiveX控件，在线帮助作者和程序员可使用这个控件增强Microsoft HTML帮助系统的功能和控制帮助系统的行为。 KeyHelp.KeyCtrl.1 ActiveX控件（KeyHelp.ocx）的JumpMappedID和JumpURL方式没有正确地验证用户所传送的参数。如果用户受骗访问了恶意网页并向上述方式传送了超过537字节的超长参数，就可以触发栈溢出，导致执行任意指令。 KeyWorks keyhelp.ocx 1.2.3120.0 EMC Captiva QuickScan Pro 4.6 sp1 临时解决方...