10874 matches found
Microsoft Office OWC10.Spreadsheet ActiveX BorderAround() Heap Corruption Vulnerability
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Microsoft Office. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific vulnerability exists in the OWC10.Spreadsheet.10 ActiveX control...
Microsoft Office Web Components ActiveX Control Memory Allocation Code Execution Vulnerability
Description Microsoft Office Web Components OWC10 ActiveX control is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to visit a maliciously crafted webpage. Successfully exploiting this issue will allow the attacker to execute arbitrary co...
Microsoft Office Web Components ActiveX Control Stack Buffer Overflow Code Execution Vulnerability
Description The Microsoft Office Web Components ActiveX control is prone to a remote stack-based buffer-overflow vulnerability. An attacker could exploit this issue by enticing a victim to visit a maliciously crafted webpage. Successful exploits will allow the attacker to execute arbitrary code...
Microsoft Office OWC10 ActiveX Control Loading and Unloading Heap Corruption Vulnerability
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Microsoft Office. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists when loading and unloading the vulnerable control...
Microsoft Office OWC10.Spreadsheet ActiveX msDataSourceObject() Heap Corruption Vulnerability
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Microsoft Office. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists during the processing of malicious parameters to the...
Stack overflow
Multiple stack-based buffer overflows in CMailCOM.dll in CMailServer 5.4.6 allow remote attackers to execute arbitrary code via a long argument to the 1 CreateUserPath, 2 Logout, 3 DeleteMailByUID, 4 MoveToInbox, 5 MoveToFolder, 6 DeleteMailEx, 7 GetMailDataEx, 8 SetReplySign, 9 SetForwardSign, a...
CVE-2008-6898
Buffer overflow in the XHTTP Module 4.1.0.0 in the ActiveX control for SaschArt SasCam Webcam Server 2.6.5 allows remote attackers to cause a denial of service crash or execute arbitrary code via a long argument to the Get method and other unspecified methods...
CVE-2008-6898
Buffer overflow in the XHTTP Module 4.1.0.0 in the ActiveX control for SaschArt SasCam Webcam Server 2.6.5 allows remote attackers to cause a denial of service crash or execute arbitrary code via a long argument to the Get method and other unspecified methods...
CVE-2008-6898
CVE-2008-6898 affects SasCam Webcam Server 2.6.5 via the ActiveX SaschArt SasCam control. The vulnerability is a buffer overflow in the XHTTP Module 4.1.0.0 that can be triggered by a long argument to the Get method (and other unspecified methods), allowing remote code execution or a crash. Publi...
Sun Java JRE Multiple Vulnerabilities (263408 / 263409 / 263428 ..)
The version of Sun Java Runtime Environment JRE installed on the remote host is earlier than 6 Update 15 / 5.0 Update 20 / 1.4.222 / 1.3.126. Such version are potentially affected by the following security issues : - A vulnerability in the JRE audio system may allow system properties to be...
US-CERT Technical Cyber Security Alert TA09-209A -- Microsoft Windows, Internet Explorer, and Active Template Library (ATL) Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA09-209A Microsoft Windows, Internet Explorer, and Active Template Library ATL Vulnerabilities Original release date: July 28, 2009 Last revised: -- Source: US-CERT Systems Affected Microsoft...
Microsoft Visual Studio ATL 'VariantClear()' Remote Code Execution Vulnerability
Description Microsoft Visual Studio is prone to a remote code-execution vulnerability in the Active Template Library ATL. Remote attackers can exploit this issue to execute arbitrary code with the privileges of the user running an application built with the affected library. Technologies Affected...
ActiveX controls built with Microsoft ATL fail to properly handle initialization data
Overview ActiveX controls that are built using a Microsoft ATL template may fail to properly handle initialization data, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft Active Template Library ATL is a set of C++ classes...
Researcher Shows Killbit is No Defense on MsVidCtl Flaw
Ryan Smith, one of the researchers who found the bug in the Microsoft MsVidCtl DLL that the vendor is rushing to patch this week, has posted a short video demonstration of a technique that bypasses the stop-gap solution of preventing the vulnerable ActiveX control from loading. In the demo, Smith...
VMSA-2008-0014 : Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX, VMware VCB address information disclosure, privilege escalation and other security issues.
I Security Issues a. Setting ActiveX kill bit Starting from this release, VMware has set the kill bit on its ActiveX controls. Setting the kill bit ensures that ActiveX controls cannot run in Internet Explorer IE, and avoids security issues involving ActiveX controls in IE. See the Microsoft KB...
Akamai Download Manager ActiveX Control < 2.2.4.8 Buffer Overflow
The Windows remote host contains the Download Manager ActiveX control from Akamai, which helps users download content. The version of this ActiveX control on the remote host reportedly is affected by a buffer overflow vulnerability in 'manager.exe' when handling Redswoosh downloads. If an attacke...
Akamai Technologies Security Advisory 2009-0001 (Download Manager)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------- Akamai Technologies Security Advisory 2009-0001 Akamai ID: 2009-0001 Date: 2009/23/20 Product Name: Download Manager Affected Versions: 2.2.4.8 Fixed Version: 2.2.4.8 CVE IDs: TBD CVSS Base Score:...
Akamai Download Manager ActiveX code execution
It's possible to download and execute code without user intervation...
Stack overflow
Stack-based buffer overflow in the Symantec.FaxViewerControl.1 ActiveX control in WinFax\DCCFAXVW.DLL in Symantec WinFax Pro 10.03 allows remote attackers to execute arbitrary code via a long argument to the AppendFax method...
CVE-2009-2570
CVE-2009-2570: A stack-based buffer overflow in the Symantec.FaxViewerControl.1 ActiveX control (WinFax\DCCFAXVW.DLL) in Symantec WinFax Pro 10.03 allows remote attackers to execute arbitrary code via a long argument to the AppendFax method. The connected Nessus/NASL entries confirm the affected ...