RealNetworks RealPlayer ActiveX Illegal Resource Reference Vulnerability

CVE-2008-3064 An illegal resource reference vulnerability exists in the ActiveX Control of RealNetworks RealPlayer. For exploiting the vulnerability, the attacker may build a special web page and entrap the victim into visiting it, if the local system has installed RealPlayer, the local resources...

Anzio Web Print Object 3.2.30 - ActiveX Buffer Overflow

Anzio Web Print Object 3.2.30 - ActiveX Buffer Overflow -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Anzio Web Print Object Buffer Overflow Advisory Information Title: Anzio Web Print Object Buffer Overflow...

Microsoft Windows Messenger Remote Illegal Access Vulnerability

CVE-2008-0082 When installing Windows XP, an old edition of MSN Messenger is installed automatically. The old edition opens the MSN API to develop as an ActiveX Control, and marks it with "safe". By using this ActiveX Control, we can control the local MSN Messenger, for instance: change state, ga...

Anzio Web Print Object 3.2.30 - ActiveX Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Anzio Web Print Object Buffer Overflow Advisory Information Title: Anzio Web Print Object Buffer Overflow Advisory ID: CORE-2008-0624 Advisory URL:...

Microsoft Access Snapshot Viewer ActiveX Control Vulnerability

Microsoft Access Snapshot in Microsoft Office Access is prone to ActiveX control vulnerabilities. OpenVAS Vulnerability Test $Id: secpodmsaccesssnapshotvieweractvxvuln900004.nasl 6382 2017-06-20 15:08:09Z cfischer $ Description: Microsoft Access Snapshot Viewer ActiveX Control Vulnerability...

Microsoft IE HTML组件处理多个内存破坏漏洞（MS08-045）

BUGTRAQ ID: 30614,30611,30612 CVECAN ID: CVE-2008-2254,CVE-2008-2256,CVE-2008-2259 Internet Explorer是微软操作系统中默认捆绑的WEB浏览器。 IE访问尚未正确初始化或已被删除的对象的方式中存在远程执行代码漏洞，在打印预览处理过程中处理参数验证的方式中存在另一个远程执行代码漏洞。攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。成功利用此漏洞的攻击者可以获得与登录用户相同的用户权限。 Microsoft Internet Explorer 7.0...

Microsoft Access Snapshot Viewer ActiveX Control Vulnerability

Microsoft Access Snapshot in Microsoft Office Access is prone to ActiveX control vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Windows Messenger Could Allow Information Disclosure Vulnerability (955702)

This host is missing a critical security update according to Microsoft Bulletin MS08-050. OpenVAS Vulnerability Test $Id: secpodms08-050900034.nasl 5863 2017-04-05 07:38:11Z antu123 $ Description: Windows Messenger Could Allow Information Disclosure Vulnerability 955702 Authors: Chandan S...

Heap overflow

Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in Microsoft Visual Studio 6.0, Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allows remote attackers t...

CVE-2008-3704

Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in Microsoft Visual Studio 6.0, Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allows remote attackers t...

CVE-2008-3704

A heap-based buffer overflow exists in the MaskedEdit ActiveX control within Msmask32.ocx (versions 6.0.81.69 and potentially others prior to 6.0.84.18). The vulnerability stems from a failure to perform boundary checks on property values, specifically the Mask parameter . Affected products inclu...

Cisco WebEx Meeting Manager ActiveX buffer overflow

atucfobj.dll buffer overflow...

Cisco WebEx Meeting Manager ActiveX Control Buffer Overflow (CVE-2008-3558)

The Webex Meeting Manager is a client-side program that is provided by the Cisco Webex meeting service, an online collaboration suite. A buffer overflow vulnerability has been reported in the Cisco Webex Meeting Manager application.The vulnerability is due to a boundary error in a Cisco Webex...

Cisco Security Advisory: Vulnerability in Cisco WebEx Meeting Manager ActiveX Control

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Vulnerability in Cisco WebEx Meeting Manager ActiveX Control Advisory ID: cisco-sa-20080814-webex Revision 1.0 For Public Release 2008 August 14 2230 UTC GMT +-------------------------------------------------------------------...

VulnCheck KEV: CVE-2008-3704

Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in Microsoft Visual Studio 6.0, Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allows remote attackers t...

Stack overflow

Multiple stack-based buffer overflows in the Animation GIF ActiveX control in JComSoft AniGIF.ocx 1.12 and 2.47, as used in products such as SpeedBit Download Accelerator Plus DAP 8.6, allow remote attackers to execute arbitrary code via a long argument to the 1 ReadGIF or 2 ReadGIF2 method...

CVE-2008-3702

Multiple stack-based buffer overflows in the Animation GIF ActiveX control in JComSoft AniGIF.ocx 1.12 and 2.47, as used in products such as SpeedBit Download Accelerator Plus DAP 8.6, allow remote attackers to execute arbitrary code via a long argument to the 1 ReadGIF or 2 ReadGIF2 method...

CVE-2008-3702

CVE-2008-3702 concerns the Animation GIF ActiveX control (AniGIF.ocx) used in JComSoft AniGIF 1.12 and 2.47, and in SpeedBit Download Accelerator Plus 8.6. It describes multiple stack-based buffer overflows that allow remote code execution via a long argument to the ReadGIF or ReadGIF2 methods. T...

Microsoft Windows Messenger ActiveX控件信息泄露漏洞（MS08-050）

BUGTRAQ ID: 30551 CVECAN ID: CVE-2008-0082 Windows Messenger是Windows操作系统中默认捆绑的即时聊天工具。 在安装Windows XP的时候会自动安装旧版本的MSN Messenger，这个版本打开MSN API运行ActiveX控件Messenger.UIAutomation.1并标记为safe。对这个控件执行脚本操作可能导致以登录用户的环境泄露信息。攻击者可以在登录用户不知情的情况下更改状态、获取联系人信息以及启动音频和视频聊天会话，还可以捕获用户的登录ID并以该用户的身份远程登录用户的Messenger客户端。...

Microsoft IE XHTML渲染内存破坏漏洞（MS08-045）

BUGTRAQ ID: 30613,30610 CVECAN ID: CVE-2008-2258,CVE-2008-2257 Internet Explorer是微软操作系统中默认捆绑的WEB浏览器。 IE没有正确地处理HTML文档对象，如果以特定顺序附加对象的话，在渲染对象时会导致访问未初始化的内存，成功利用这个漏洞允许以当前登录用户的权限执行任意代码。 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 Microsoft Interne...