Dranzer: Fuzzing for ActiveX vulnerabilities

The United States Computer Emergency Response Team US-CERT has released a new ActiveX fuzzer to help developers pinpoint browser-based security vulnerabilities. The tool, called Dranzer, lets software developers test ActiveX controls for vulnerabilities before the software is released to the...

Symantec Norton Ghost 'EasySetupInt.dll' ActiveX控件远程拒绝服务漏洞

BUGTRAQ ID: 34696 CNCAN ID：CNCAN-2009042404 Symantec Norton Ghost是一款提供备份恢复功能的软件。 Symantec Norton Ghost包含的ActiveX控件存在安全问题，远程攻击者可以利用漏洞使应用程序崩溃。 Symantec Norton Ghost包含的'EasySetupInt.dll' ActiveX控件对SetupDeleteVolume方法缺少正确处理，构建恶意WEB页，诱使用户打开，可导致应用程序崩溃。 Symantec Norton Ghost 14.0 Symantec Norton Ghost...

Danske Bank Danske e-Sec ActiveX控件缓冲区溢出漏洞

BUGTRAQ ID: 34549 CVE ID：CVE-2008-1107 CNCVE ID：CNCVE-20081107 Danske Bank Danske e-Sec控制模块ActvieX控件存在安全漏洞，远程攻击者可以利用漏洞以应用程序安全上下文执行任意指令。 DanskeSikker.ocx中的日志函数存在边界错误，当ActiveX控件在部分行为下初始化时提交超长输入给部分方法，可导致基于栈的缓冲区溢出。 成功利用该漏洞可以以应用程序安全上下文执行任意指令。 Danske Bank DanskeSikker.ocx 3.1 48 目前没有解决方案提供：...

CVE-2008-1107

Multiple stack-based buffer overflows in the Danske Bank e-Sec Control Module ActiveX control DanskeSikker.ocx 3.1.0.48, and possibly earlier versions, allow remote attackers to execute arbitrary code via long arguments to unspecified methods, which are not properly handled by a logging function...

Stack overflow

Multiple stack-based buffer overflows in the Danske Bank e-Sec Control Module ActiveX control DanskeSikker.ocx 3.1.0.48, and possibly earlier versions, allow remote attackers to execute arbitrary code via long arguments to unspecified methods, which are not properly handled by a logging function...

Danske Bank Danske e-Sec ActiveX buffer overflow

Buffer overflow in logging function...

Secunia Research: SAP GUI KWEdit ActiveX Control "SaveDocumentAs()" Insecure Method

====================================================================== Secunia Research 15/04/2009 - SAP GUI KWEdit ActiveX Control "SaveDocumentAs" Insecure Method - ====================================================================== Table of Contents Affected...

Versalsoft HTTP Image Uploader ActiveX Vulnerability

Versalsoft HTTP Image Uploader is prone to ActiveX vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-1107

Multiple stack-based buffer overflows in the Danske Bank e-Sec Control Module ActiveX control DanskeSikker.ocx 3.1.0.48, and possibly earlier versions, allow remote attackers to execute arbitrary code via long arguments to unspecified methods, which are not properly handled by a logging function...

SAP GUI unauthorized access

KWEdit ActiveX has unsafe SaveDocumentAs method...

Versalsoft HTTP Image Uploader ActiveX Vulnerability

This host is installed with Versalsoft HTTP Image Uploader and is prone to ActiveX vulnerability. OpenVAS Vulnerability Test $Id: gbversalsofthttpimageupldractvxvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ Versalsoft HTTP Image Uploader ActiveX Vulnerability Authors: Nikita MR Copyright: Copyright c...

CVE-2008-1107

CVE-2008-1107 affects Danske Bank Danske e-Sec Control Module ActiveX control DanskeSikker.ocx 3.1.0.48 (and possibly earlier). The vulnerability is a boundary error in the error-logging function of DanskeSikker.ocx that can be triggered by overly long inputs to certain methods during initialisat...

CVE-2008-4830

Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 KWEDIT.DLL 6400.1.1.41 and 7.10 Patch 5 KWEDIT.DLL 7100.1.1.43 allows remote attackers to 1 overwrite arbitrary files via the SaveDocumentAs method or 2 read or execute arbitrary files via the OpenDocument method...

CVE-2007-2238

Multiple stack-based buffer overflows in the Whale Client Components ActiveX control WhlMgr.dll, as used in Microsoft Intelligent Application Gateway IAG before 3.7 SP2, allow remote attackers to execute arbitrary code via long arguments to the 1 CheckForUpdates or 2 UpdateComponents methods...

Stack overflow

Multiple stack-based buffer overflows in the Whale Client Components ActiveX control WhlMgr.dll, as used in Microsoft Intelligent Application Gateway IAG before 3.7 SP2, allow remote attackers to execute arbitrary code via long arguments to the 1 CheckForUpdates or 2 UpdateComponents methods...

DSquare Exploit Pack: D2SEC_MSIAG

Name| d2secmsiag ---|--- CVE| CVE-2007-2238 Exploit Pack| D2ExploitPack Description| Microsoft IAG 2007 ActiveX Stack Overflow Vulnerability Notes|...

Security feature bypass

Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 KWEDIT.DLL 6400.1.1.41 and 7.10 Patch 5 KWEDIT.DLL 7100.1.1.43 allows remote attackers to 1 overwrite arbitrary files via the SaveDocumentAs method or 2 read or execute arbitrary files via the OpenDocument method...

CVE-2008-4830

CVE-2008-4830 is an insecure method vulnerability in SAP GUI’s KWEdit ActiveX control (KWEDIT.DLL 6400.1.1.41 and 7100.1.1.43). The SaveDocumentAs method can allow an attacker to overwrite arbitrary files, and the OpenDocument method can read or execute arbitrary files on a remote host. Affected ...

CVE-2008-4830

Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 KWEDIT.DLL 6400.1.1.41 and 7.10 Patch 5 KWEDIT.DLL 7100.1.1.43 allows remote attackers to 1 overwrite arbitrary files via the SaveDocumentAs method or 2 read or execute arbitrary files via the OpenDocument method...

CVE-2007-2238

Multiple stack-based buffer overflows in the Whale Client Components ActiveX control WhlMgr.dll, as used in Microsoft Intelligent Application Gateway IAG before 3.7 SP2, allow remote attackers to execute arbitrary code via long arguments to the 1 CheckForUpdates or 2 UpdateComponents methods...