10879 matches found
Microsoft Internet Explorer DoS
DoS with ListWidth property of Forms.ListBox / Forms.ComboBox ActiveX...
SupportSoft DNA Editor Module ActiveX控件不安全函数调用漏洞
BUGTRAQ ID: 34004 SupportSoft是美国的一家实时服务管理软件供货商。 SupportSoft产品中所提供的DNA Editor Module ActiveX控件（dnaedit.dll，CLSID: 01110800-3E00-11D2-8470-0060089874ED）没有正确地过滤对Packagefiles、SaveDna、AddFile、SetIdentity等方式所传送的参数，如果用户受骗访问了恶意网页并向上述方式传送了特制参数的话，就可能导致拒绝服务、向用户系统下载恶意文件或执行任意代码。 SupportSoft DNA Editor Module...
CVE-2009-0813
Insecure method vulnerability in the ImeraIEPlugin ActiveX control ImeraIEPlugin.dll 1.0.2.54 in Imera TeamLinks Client allows remote attackers to force the download and execution of arbitrary URLs via modified DownloadProtocol, DownloadHost, DownloadPort, and DownloadURI parameters...
CVE-2009-0813
Insecure method vulnerability in the ImeraIEPlugin ActiveX control ImeraIEPlugin.dll 1.0.2.54 in Imera TeamLinks Client allows remote attackers to force the download and execution of arbitrary URLs via modified DownloadProtocol, DownloadHost, DownloadPort, and DownloadURI parameters...
CVE-2009-0813
Imera TeamLinks Client's ImeraIEPlugin.dll ActiveX (version 1.0.2.54) is affected by CVE-2009-0813 due to an insecure method vulnerability in how DownloadProtocol, DownloadHost, DownloadPort, and DownloadURI are handled. This allows a remote attacker to force the download and execution of arbitra...
SupportSoft DNA Editor Module - dnaedit.dll Code Execution
SupportSoft DNA Editor Module - dnaedit.dll Code Execution !-- SupportSoft DNA Editor Module dnaedit.dll v6.9.2205 remote code execution exploit IE6/7 by Nine:Situations:Group::bruiser vendor url: http://www.supportsoft.com/ our site: http://retrogod.altervista.org/ details: CLSID:...
SupportSoft DNA Editor Module Code Execution
OBJECT classid='clsid:01110800-3E00-11D2-8470-0060089874ED...
Dissect ActiveX hung it: to install the name of the invasion-bug warning-the black bar safety net
Once Upon a time, the use of ActiveX is a rogue software“kill”the main technical means of nowadays malware mostly all dead now, can ActiveX and do not exit People's field of vision, web hang horse took a fancy to it, so ActiveX hung it to pop up and become the important several hung it. The North...
Imera ImeraIEPlugin ActiveX控件任意文件下载漏洞
Imera TeamLinks是桌面客户端软件，允许物理分不断组成员之间进行协作。 TeamLinks客户端的ImeraIEPlugin.dll库所提供的ImeraIEPlugin.Pilot.1 ActiveX控件没有正地的处理DownloadHost属性参数，如果用户受骗访问了恶意站点并向该属性传送了恶意参数的话，就可能导致向用户系统下载并执行任意文件。 Imera ImeraIEPlugin.dll 1.0.2.54 临时解决方法： 为CLSID 75CC8584-86D4-4A50-B976-AA72618322C6设置kill-bit。 厂商补丁： Imera -----...
SupportSoft DNA Editor Module - 'dnaedit.dll' Code Execution
!-- SupportSoft DNA Editor Module dnaedit.dll v6.9.2205 remote code execution exploit IE6/7 by Nine:Situations:Group::bruiser vendor url: http://www.supportsoft.com/ our site: http://retrogod.altervista.org/ details: CLSID: 01110800-3E00-11D2-8470-0060089874ED Progid: Tioga.Editor.1 Binary Path:...
SupportSoft DNA Editor Module (dnaedit.dll) Code Execution Exploit
Exploit for unknown platform in category remote exploits ================================================================== SupportSoft DNA Editor Module dnaedit.dll Code Execution Exploit ================================================================== !-- SupportSoft DNA Editor Module...
CVE-2009-0811
Insecure method vulnerability in the SopCast SopCore ActiveX control in sopocx.ocx 3.0.3.501 allows remote attackers to execute arbitrary programs via an executable file name in the argument to the SetExternalPlayer method...
Design/Logic Flaw
Insecure method vulnerability in the SopCast SopCore ActiveX control in sopocx.ocx 3.0.3.501 allows remote attackers to execute arbitrary programs via an executable file name in the argument to the SetExternalPlayer method...
CVE-2009-0811
CVE-2009-0811 describes an insecure method vulnerability in the SopCast SopCore ActiveX control (sopocx.ocx 3.0.3.501). The vulnerability allows remote attackers to cause arbitrary code execution by supplying an executable file name to the SetExternalPlayer method. Affected product: SopCast SopCo...
CVE-2009-0811
Insecure method vulnerability in the SopCast SopCore ActiveX control in sopocx.ocx 3.0.3.501 allows remote attackers to execute arbitrary programs via an executable file name in the argument to the SetExternalPlayer method...
Microsoft explains how ActiveX in Office is abused by attackers
On the Microsoft Secure Windows Iniative blog, software engineer Chengyun discusses the default behaviour of ActiveX controls embedded in Office documents. The software giant also provides information on how can an attacker abuse ActiveX and how Office users can change the behavior of ActiveX...
Imera ImeraIEPlugin ActiveX Control Remote Code Execution Exploit
No description provided by source. Who: Imerahttp://www.imera.com Imera TeamLinks Clienthttp://teamlinks.imera.com/install.html What: ImeraIEPlugin.dll Version 1.0.2.54 Dated 12/02/2008 75CC8584-86D4-4A50-B976-AA72618322C6 http://teamlinks.imera.com/ImeraIEPlugin.cab How: This control is used to...
Imera ImeraIEPlugin - ActiveX Control Remote Code Execution
Imera ImeraIEPlugin - ActiveX Control Remote Code Execution Who: Imerahttp://www.imera.com Imera TeamLinks Clienthttp://teamlinks.imera.com/install.html What: ImeraIEPlugin.dll Version 1.0.2.54 Dated 12/02/2008 75CC8584-86D4-4A50-B976-AA72618322C6 http://teamlinks.imera.com/ImeraIEPlugin.cab How:...
Imera ImeraIEPlugin ActiveX Control Remote Code Execution Exploit
Exploit for unknown platform in category remote exploits ================================================================= Imera ImeraIEPlugin ActiveX Control Remote Code Execution Exploit ================================================================= Who: Imerahttp://www.imera.com Imera...
"Imera ImeraIEPlugin ActiveX Control Remote Code Execution Exploit"
No description provided by source. Who: Imerahttp://www.imera.com Imera TeamLinks Clienthttp://teamlinks.imera.com/install.html What: ImeraIEPlugin.dll Version 1.0.2.54 Dated 12/02/2008 75CC8584-86D4-4A50-B976-AA72618322C6 http://teamlinks.imera.com/ImeraIEPlugin.cab How: This control is used to...