11682 matches found
CVE-2007-3983
CVE-2007-3983 describes an absolute path traversal vulnerability in the Data Dynamics DDActiveReports2.ActiveReport.2 (ActiveReports) ActiveX control contained in arpro2.dll, part of ActiveReports 2.0 Professional Edition 2.5.0.1308 (SP5 RC). The flaw allows a remote attacker to create or overwri...
CVE-2007-3679
CVE-2007-3679 affects the Citrix EPA ActiveX control (CCAOControl Object) in npCtxCAO.dll, used by Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1. The ActiveX control is vulnerable to remote code execution via arbitrary program download/execution on a clie...
CVE-2007-3982
The CVE-2007-3982 entry concerns the Data Dynamics ActiveReport (ActiveReports) ActiveX control (actrpt2.dll) version 2.5 and earlier. The vulnerability is an absolute path traversal in which a full pathname passed as the first argument to the SaveLayout method can be used to create or overwrite ...
CVE-2007-3984
CVE-2007-3984 describes a buffer overflow in Zenturi ProgramChecker’s ActiveX control (NixonMyPrograms class in sasatl.dll 1.5.0.531). A long argument to the Scan method can allow remote code execution. Note this is stated as potentially a different issue from CVE-2007-2987. No remediation detail...
CVE-2007-3983
Absolute path traversal vulnerability in the Data Dynamics DDActiveReports2.ActiveReport.2 ActiveReports ActiveX control in arpro2.dll in ActiveReports 2.0 Professional Edition 2.5.0.1308 SP5 RC allows remote attackers to create or overwrite arbitrary files via a full pathname in an argument to t...
CVE-2007-3679
The Citrix EPA ActiveX control aka the "endpoint checking control" or CCAOControl Object before 4.5.0.0 in npCtxCAO.dll in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 allows remote attackers to download and execute arbitrary programs onto a client syste...
CVE-2007-3984
Buffer overflow in a certain ActiveX control in the NixonMyPrograms class in sasatl.dll 1.5.0.531 in Zenturi ProgramChecker allows remote attackers to execute arbitrary code via a long argument to the Scan method. NOTE: this is probably a different issue than CVE-2007-2987...
CVE-2007-3679: Undefined Security Weakness
The Citrix EPA ActiveX control aka the "endpoint checking control" or CCAOControl Object before 4.5.0.0 in npCtxCAO.dll in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 allows remote attackers to download and execute arbitrary programs onto a client syste...
Clever Internet ActiveX Suite 6.2 - Arbitrary File Download/Overwrite
------------------------------------------------------------------------------------------------- Clever Internet ActiveX Suite 6.2 CLINETSUITEX6.OCX Arbitrary file download/overwrite Exploit url: http://www.clevercomponents.com/home/news.asp author: shinnai mail: shinnaiatautisticidotorg site:...
[Full-disclosure] [CAID 35524]: CA eTrust Intrusion Detection caller.dll Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: CAID 35524: eTrust Intrusion Detection caller.dll Vulnerability CA Vuln ID CAID: 35524 CA Advisory Date: 2007-07-24 Reported By: Sebastian Apelt working with the iDefense VCP Impact: A remote attacker can execute arbitrary code. Summary: CA...
iDefense Security Advisory 07.24.07: Computer Associates eTrust Intrusion Detection CallCode ActiveX Control Code Execution Vulnerability
Computer Associates eTrust Intrusion Detection CallCode ActiveX Control Code Execution Vulnerability iDefense Security Advisory 07.24.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 24, 2007 I. BACKGROUND Computer Associates eTrust Intrusion Detection is a network intrusion manageme...
Clever Internet ActiveX Suite 6.2 - Arbitrary File DownloadOverwrite
Clever Internet ActiveX Suite 6.2 - Arbitrary File DownloadOverwrite ------------------------------------------------------------------------------------------------- Clever Internet ActiveX Suite 6.2 CLINETSUITEX6.OCX Arbitrary file download/overwrite Exploit url:...
Clever Internet ActiveX Suite 6.2 Arbitrary File Download/Overwrite
Exploit for unknown platform in category remote exploits =================================================================== Clever Internet ActiveX Suite 6.2 Arbitrary File Download/Overwrite ===================================================================...
Computer Associates eTrust Intrusion Detection code execution
CallCode ActiveX allows access to unsafe functions...
Clever Internet ActiveX Suite 6.2 Arbitrary File Download/Overwrite
No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"------------------------------------------------------------------------------------------------- bClever Internet ActiveX Suite 6.2 CLINETSUITEX6.OCX Arbitrary file download/overwrite...
CVE-2007-3955
Buffer overflow in the IEToolbar.IEContextMenu.1 ActiveX control in LinkedInIEToolbar.dll in the LinkedIn Toolbar 3.0.2.1098 allows remote attackers to execute arbitrary code via a long second argument varBrowser argument to the search method. NOTE: some of these details are obtained from third...
Buffer overflow
Buffer overflow in the IEToolbar.IEContextMenu.1 ActiveX control in LinkedInIEToolbar.dll in the LinkedIn Toolbar 3.0.2.1098 allows remote attackers to execute arbitrary code via a long second argument varBrowser argument to the search method. NOTE: some of these details are obtained from third...
CVE-2007-3955
Buffer overflow in the IEToolbar.IEContextMenu.1 ActiveX control in LinkedInIEToolbar.dll in the LinkedIn Toolbar 3.0.2.1098 allows remote attackers to execute arbitrary code via a long second argument varBrowser argument to the search method. NOTE: some of these details are obtained from third...
CVE-2007-3955
The CVE-2007-3955 issue is a buffer overflow in the LinkedIn Toolbar’s IEToolbar.IEContextMenu.1 ActiveX control (LinkedInIEToolbar.dll in LinkedIn Toolbar 3.0.2.1098). The flaw occurs when a very long second argument (varBrowser argument) is passed to the search method, allowing remote code exec...