Microsoft Visual Basic multiple ActiveX security vulnerabilities

Memory corruptions in DataGrid, FlexGrid, Hierarchical FlexGrid, Windows Common AVI, Charts, Masked Edit controls...

Microsoft Security Bulletin MS08-070 - Critical Vulnerabilities in Visual Basic 6.0 Runtime Extended Files (ActiveX Controls) Could Allow Remote Code Execution (932349)

Microsoft Security Bulletin MS08-070 - Critical Vulnerabilities in Visual Basic 6.0 Runtime Extended Files ActiveX Controls Could Allow Remote Code Execution 932349 Published: December 9, 2008 Version: 1.0 General Information Executive Summary This security update resolves five privately reported...

CVE-2008-4255: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in mscomct2.ocx aka Windows Common ActiveX control or Microsoft Animation ActiveX control in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, and Office Project 2003 SP3 and 2007 Gold and SP1 allows remote...

CVE-2008-4256: Undefined Security Weakness

The Charts ActiveX control in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not properly handle errors during access to incorrectly initialized objects, which allows remote attackers to execute arbitrary code via a crafted...

Secunia Research: Microsoft Hierarchical FlexGrid Control Integer Overflows

====================================================================== Secunia Research 09/12/2008 - Microsoft Hierarchical FlexGrid Control Integer Overflows - ====================================================================== Table of Contents Affected...

ZDI-08-083: Microsoft Animation ActiveX Control Malformed AVI Parsing Code Execution Vulnerability

ZDI-08-083: Microsoft Animation ActiveX Control Malformed AVI Parsing Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-083 December 9, 2008 -- CVE ID: CVE-2008-4255 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Windows XP -- TippingPointTM IPS...

EasyMail ActiveX (emmailstore.dll 6.5.0.3) Buffer Overflow Exploit

No description provided by source. EasyMail ActiveX Heap Spray Exploit By: e.wiZz! & shinnai Site: infected.blogger.ba & shinnai.net Info: CompanyName Quiksoft Corporation FileDescription EasyMail MailStore Object FileVersion 6, 5, 0, 3 Vulnerable file emmailstore.dll html script...

CVE-2008-5404

Insecure method vulnerability in the FlexCell.Grid ActiveX control in FlexCell.ocx 5.7.0.1 in FlexCell Grid ActiveX Component allows remote attackers to create and overwrite arbitrary files via the HttpDownloadFile method. NOTE: this could be leveraged for code execution by creating executable...

CVE-2008-5404

The CVE-2008-5404 issue concerns the FlexCell Grid ActiveX Control (FlexCell.ocx 5.7.0.1). The vulnerability arises in the HttpDownloadFile method, enabling a remote attacker to create and overwrite arbitrary files. This could enable code execution by placing executables in Startup folders or via...

Microsoft FlexGrid ActiveX Control Memory Corruption Vulnerability

Description Microsoft FlexGrid ActiveX control is prone to a remote memory-corruption vulnerability. Remote attackers can exploit this issue to execute arbitrary code in the context of the application using the ActiveX control typically Internet Explorer. Successful exploits will compromise the...

EasyMail Active-X Buffer Overflow Exploit

EasyMail ActiveX Heap Spray Exploit By: e.wiZz! & shinnai Site: infected.blogger.ba & shinnai.net Info: CompanyName Quiksoft Corporation FileDescription EasyMail MailStore Object FileVersion 6, 5, 0, 3 Vulnerable file emmailstore.dll var sCode =...

EasyMail - ActiveX 'emmailstore.dll 6.5.0.3' Remote Buffer Overflow

EasyMail ActiveX Heap Spray Exploit By: e.wiZz! & shinnai Site: infected.blogger.ba & shinnai.net Info: CompanyName Quiksoft Corporation FileDescription EasyMail MailStore Object FileVersion 6, 5, 0, 3 Vulnerable file emmailstore.dll var sCode =...

CVE-2008-4391

Stack-based buffer overflow in the SetSource method in the NetCamPlayerWeb11gv2 ActiveX control in NetCamPlayerWeb11gv2.ocx on the Cisco Linksys WVC54GC wireless video camera before firmware 1.25 allows remote attackers to execute arbitrary code via long invalid arguments...

Microsoft Charts ActiveX Control Memory Corruption Vulnerability

Description Microsoft Charts ActiveX control is prone to a remote memory-corruption vulnerability. Remote attackers can exploit this issue to execute arbitrary code in the context of the application using the ActiveX control typically Internet Explorer. Successful exploits will compromise the...

Microsoft DataGrid ActiveX Control Memory Corruption Vulnerability

Description Microsoft DataGrid ActiveX control is prone to a remote memory-corruption vulnerability. Remote attackers can exploit this issue to execute arbitrary code in the context of the application using the ActiveX control typically Internet Explorer. Successful exploits will compromise the...

Linksys WVC54GC NetCamPlayerWeb11gv2.ocx ActiveX控件栈溢出漏洞

BUGTRAQ ID: 32665 CVECAN ID: CVE-2008-4391 Linksys WVC54GC是一款支持802.11g协议的无线网络摄像头。 Linksys WVC54GC摄像头的NetCamPlayerWeb11gv2.ocx文件提供一个名为NetCamPlayerWeb11gv2的ActiveX控件，该控件没有正确地过滤对SetSource方式所传送的输入参数。如果用户受骗浏览了特制的HTML文档并向该方式提供了超长输入参数的话，就可以触发栈溢出，导致浏览器崩溃或执行任意指令。 0 Linksys WVC54GC 1.19 临时解决方法：...

EasyMail - ActiveX emmailstore.dll 6.5.0.3 Remote Buffer Overflow

EasyMail - ActiveX emmailstore.dll 6.5.0.3 Remote Buffer Overflow EasyMail ActiveX Heap Spray Exploit By: e.wiZz! & shinnai Site: infected.blogger.ba & shinnai.net Info: CompanyName Quiksoft Corporation FileDescription EasyMail MailStore Object FileVersion 6, 5, 0, 3 Vulnerable file emmailstore.d...

Microsoft Windows Common AVI ActiveX Control File Parsing Buffer Overflow Vulnerability

Description Microsoft Windows Common AVI ActiveX control is prone to a remote buffer-overflow vulnerability. Remote attackers can exploit this issue to execute arbitrary code in the context of the application using the ActiveX control typically Internet Explorer. Successful exploits will compromi...

CVE-2008-5404: Undefined Security Weakness

Insecure method vulnerability in the FlexCell.Grid ActiveX control in FlexCell.ocx 5.7.0.1 in FlexCell Grid ActiveX Component allows remote attackers to create and overwrite arbitrary files via the HttpDownloadFile method. NOTE: this could be leveraged for code execution by creating executable...

CVE-2008-4391

CVE-2008-4391 affects Linksys WVC54GC, specifically the NetCamPlayerWeb11gv2.ocx ActiveX control. The issue is a stack-based/buffer overflow in SetSource that can be triggered by long invalid arguments in a specially crafted HTML page, potentially allowing remote code execution with the user’s pr...