Code injection

Unspecified vulnerability in the HP HPeDiag aka eSupportDiagnostics ActiveX control in hpediag.dll in HP Software Update 4.000.009.002 and earlier allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors. NOTE: this might overlap CVE-2007-6513...

CVE-2008-0712

Unspecified vulnerability in the HP HPeDiag aka eSupportDiagnostics ActiveX control in hpediag.dll in HP Software Update 4.000.009.002 and earlier allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors. NOTE: this might overlap CVE-2007-6513...

CVE-2008-0712

CVE-2008-0712 affects HP Software Update HPeDiag ActiveX control (hpediag.dll) in Windows. A buffer overflow in the GetXmlFromIni method could allow remote code execution when a user loads a crafted INI file via an HTML page, under IE, on HP Software Update v4.000.009.002 or earlier. HP released ...

Path traversal

Absolute path traversal vulnerability in a certain ActiveX control in Zune allows user-assisted remote attackers to overwrite arbitrary files via the SaveToFile method. NOTE: the victim must explicitly allow the code to run...

CVE-2008-1933

Absolute path traversal vulnerability in a certain ActiveX control in Zune allows user-assisted remote attackers to overwrite arbitrary files via the SaveToFile method. NOTE: the victim must explicitly allow the code to run...

WatchFire Appscan 7.0 ActiveX Multiple Insecure Methods Exploit

Exploit for unknown platform in category remote exploits =============================================================== WatchFire Appscan 7.0 ActiveX Multiple Insecure Methods Exploit =============================================================== Multiple Insecure Methods in AppScan Watchfire W...

CVE-2008-0712: Undefined Security Weakness

Unspecified vulnerability in the HP HPeDiag aka eSupportDiagnostics ActiveX control in hpediag.dll in HP Software Update 4.000.009.002 and earlier allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors. NOTE: this might overlap CVE-2007-6513...

Watchfire Appscan 7.0 - ActiveX Multiple Insecure Methods

Watchfire Appscan 7.0 - ActiveX Multiple Insecure Methods Multiple Insecure Methods in AppScan Watchfire Web Application Security v 7.0 Remote: Yes An arbitrary file overwrite has been discovered in an ActiveX control installed with the WatchFire Appscan v 7.0. by callAX - Fr33d0m & Kn0wl3dg3 1s...

Watchfire Appscan 7.0 - ActiveX Multiple Insecure Methods

Multiple Insecure Methods in AppScan Watchfire Web Application Security v 7.0 Remote: Yes An arbitrary file overwrite has been discovered in an ActiveX control installed with the WatchFire Appscan v 7.0. by callAX - Fr33d0m & Kn0wl3dg3 1s th3 r341 P0w3r function Doit File = "c:\autoexec.bat"...

HP HPeDiag ActiveX Control Multiple Vulnerabilities

The remote host contains the HP Software Update software, installed by default on many HP notebooks to support automatic software updates and vulnerability patching. The version of this software on the remote host includes an ActiveX control, 'HpeDiag', that reportedly contains multiple insecure...

CVE-2008-1933

Absolute path traversal vulnerability in a certain ActiveX control in Zune allows user-assisted remote attackers to overwrite arbitrary files via the SaveToFile method. NOTE: the victim must explicitly allow the code to run...

CVE-2008-1933

The CVE-2008-1933 entry describes an absolute path traversal in a Zune ActiveX control, allowing user‑assisted remote attackers to overwrite arbitrary files via the SaveToFile method. The vulnerability requires the user to explicitly allow code execution. Affected component is an ActiveX control ...

Zune software - arbitrary file overwrite

Vulnerability class : Arbitrary file overwrite Discovery date : 21 April 2008 Remote : Yes Credits : J. Bachmann & B. Mariani from ilion Research Labs Vulnerable : Zune software: EncProfile2 Class An arbitrary file overwrite as been discovered in an ActiveX control installed with the Zune softwar...

Microsoft HeartbeatCtl ActiveX控件远程溢出漏洞

BUGTRAQ ID: 28882 CVECAN ID: CVE-2007-6255 Microsoft HeartbeatCtl ActiveX控件用于在MSN游戏站点玩多用户游戏。 HeartbeatCtl ActiveX控件在处理Host参数时存在缓冲区溢出漏洞，如果用户受骗浏览了特制的HTML文档的话，就可能触发这个溢出，导致执行任意指令。 Microsoft HeartbeatCtl ActiveX 临时解决方法： 在IE中为以下CLSID设置kill bit禁用有漏洞的ActiveX： E5D419D6-A846-4514-9FAD-97E826C84822...

CVE-2008-1933: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in a certain ActiveX control in Zune allows user-assisted remote attackers to overwrite arbitrary files via the SaveToFile method. NOTE: the victim must explicitly allow the code to run...

Zune software ActiveX unauthorized access

It's possible to save files to any location...

Buffer overflow

Buffer overflow in the Microsoft HeartbeatCtl ActiveX control in HRTBEAT.OCX allows remote attackers to execute arbitrary code via the Host argument to an unspecified method...

CVE-2007-6255

Buffer overflow in the Microsoft HeartbeatCtl ActiveX control in HRTBEAT.OCX allows remote attackers to execute arbitrary code via the Host argument to an unspecified method...

CVE-2007-6255

Buffer overflow in the Microsoft HeartbeatCtl ActiveX control in HRTBEAT.OCX allows remote attackers to execute arbitrary code via the Host argument to an unspecified method...

CVE-2007-6255

The CVE-2007-6255 issue affects the Microsoft HeartbeatCtl ActiveX control (HeartbeatCtl ActiveX in HRTBEAT.OCX). A buffer overflow occurs when processing the Host parameter, potentially allowing a remote attacker to execute arbitrary code. Exploitation is possible if a user is convinced to view ...