Security feature bypass

Insecure method vulnerability in the ActiveX control PAWWeb11.ocx in Peachtree Accounting 2004 allows remote attackers to execute arbitrary programs via the ExecutePreferredApplication method...

CVE-2008-4699

The CVE-2008-4699 entry concerns Peachtree Accounting 2004, specifically the ActiveX control PAWWeb11.ocx. The vulnerability arises in the ExecutePreferredApplication method, enabling remote attackers to execute arbitrary programs. The available connected documents affirm this insecure method vul...

CVE-2008-4699

Insecure method vulnerability in the ActiveX control PAWWeb11.ocx in Peachtree Accounting 2004 allows remote attackers to execute arbitrary programs via the ExecutePreferredApplication method...

CVE-2008-4652

Buffer overflow in the ActiveX control DartFtp.dll in Dart Communications PowerTCP FTP for ActiveX 2.0.2 0 allows remote attackers to execute arbitrary code via a long SecretKey property...

Buffer overflow

Buffer overflow in the ActiveX control DartFtp.dll in Dart Communications PowerTCP FTP for ActiveX 2.0.2 0 allows remote attackers to execute arbitrary code via a long SecretKey property...

Heap overflow

Heap-based buffer overflow in QvodInsert.QvodCtrl.1 ActiveX control QvodInsert.dll in QVOD Player before 2.1.5 build 0053 allows remote attackers to execute arbitrary code via a long URL property. NOTE: some of these details are obtained from third party information...

Microsoft IE多个跨域信息泄露和内存破坏漏洞（MS08-058）

BUGTRAQ ID: 31615,31616,31654,31618 CVECAN ID: CVE-2008-3472,CVE-2008-3473,CVE-2008-3474,CVE-2008-3476 Internet Explorer是Windows操作系统中捆绑的非常流行的WEB浏览器。 Internet Explorer中的多个安全漏洞可能允许恶意攻击者执行跨站脚本攻击，完全入侵用户的系统。 1 处理某些HTML元素或事件时的漏洞可能导致Internet Explorer错误的解释脚本来源，导致以其他域或安全区的环境执行脚本代码，或允许脚本访问另一个域或Internet...

CVE-2008-4664

CVE-2008-4664 affects QVOD Player prior to 2.1.5 build 0053, via the QvodInsert.dll ActiveX control (QvodInsert.QvodCtrl.1) where a heap-based buffer overflow can be triggered by a long URL property to allow remote code execution. Details are taken from NVD/NVD-linked references; no explicit expl...

LPViewer ActiveX Control Multiple Buffer Overflow Vulnerabilities

The remote host contains the LPViewer ActiveX control, initially created by MGI Software but later taken over by Roxio and then again by iseemedia. This control reportedly has stack-based buffer overflows in its 'url', 'toolbar', and 'enableZoomPastMax' methods. If an attacker can trick a user on...

CVE-2008-4699: Undefined Security Weakness

Insecure method vulnerability in the ActiveX control PAWWeb11.ocx in Peachtree Accounting 2004 allows remote attackers to execute arbitrary programs via the ExecutePreferredApplication method...

CVE-2008-4652

CVE-2008-4652 affects Dart Communications PowerTCP FTP for ActiveX 2.0.2.0: the ActiveX control DartFtp.dll contains a buffer overflow vulnerability triggered by a long SecretKey property, enabling remote code execution. Impact is remote compromise; exact affected environments are not further det...

Hummingbird HostExplorer ActiveX Control BOF Vulnerability

This host has Hummingbird HostExplorer ActiveX Control installed and is prone to stack based buffer overflow vulnerability. The flaw is due to error in Hummingbird.XWebHostCtrl.1 ActiveX control in hclxweb.dll file when handling the 'PlainTextPassword' function, which can be exploited by assignin...

Hummingbird HostExplorer ActiveX Control BOF Vulnerability

Hummingbird HostExplorer ActiveX Control is prone to a stack based buffer overflow vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Dart Communications PowerTCP FTP module Remote BOF Exploit

No description provided by source. html pre Author: Intel Discovered by: Intel Software: PowerTCP ActiveX Vulnerable Component: DartFtp.dll Version: 2.0.2.0 Website: www.dart.com Description: "PowerTCP tools from Dart Communications are comprehensive tools you can include in your programs to...

CVE-2008-4652: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the ActiveX control DartFtp.dll in Dart Communications PowerTCP FTP for ActiveX 2.0.2 0 allows remote attackers to execute arbitrary code via a long SecretKey property...

Dart Communications PowerTCP FTP module - Remote Buffer Overflow

Author: Intel Discovered by: Intel Software: PowerTCP ActiveX Vulnerable Component: DartFtp.dll Version: 2.0.2.0 Website: www.dart.com Description: "PowerTCP tools from Dart Communications are comprehensive tools you can include in your programs to perform common TCP/IP functions, including FTP,...

Instant Expert Analysis ActiveX控件任意代码下载和执行漏洞

BUGTRAQ ID: 31752 CVECAN ID: CVE-2008-4385 Instant Expert Analysis允许站点通过单击方式快速分析用户的软硬件。 Instant Expert Analysis对Firefox或Netscape浏览器使用签名的Java Applet（SRLApplet.class，由sysreqlab2.jar或sysreqlab.jar提供），对Internet Explorer使用签名的ActiveX控件（sysreqlab.dll、sysreqlabsli.dll或sysreqlab2.dll）。...

dart-overflow.txt

Author: Intel Discovered by: Intel Software: PowerTCP ActiveX Vulnerable Component: DartFtp.dll Version: 2.0.2.0 Website: www.dart.com Description: "PowerTCP tools from Dart Communications are comprehensive tools you can include in your programs to perform common TCP/IP functions, including FTP,...

Dart Communications PowerTCP FTP module Remote BOF Exploit

Exploit for unknown platform in category remote exploits ========================================================== Dart Communications PowerTCP FTP module Remote BOF Exploit ========================================================== Author: Intel Discovered by: Intel Software: PowerTCP ActiveX...

Dart Communications PowerTCP FTP module - Remote Buffer Overflow

Dart Communications PowerTCP FTP module - Remote Buffer Overflow Author: Intel Discovered by: Intel Software: PowerTCP ActiveX Vulnerable Component: DartFtp.dll Version: 2.0.2.0 Website: www.dart.com Description: "PowerTCP tools from Dart Communications are comprehensive tools you can include in...