11682 matches found
SYMSA-2007-006: Citrix EPA ActiveX Control Design Flaw
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2007-006 Advisory Title: Citrix EPA ActiveX Control Design Flaw Author: Michael White / [email protected] Release Date: 19-07-2007 Applicatio...
Citrix Access Gateway Citrix EPA ActiveX code execution
ActiveX control allows to download and execute any executable module...
Data Dynamics ActiveReport ActiveX (actrpt2.dll <= 2.5) Inscure Method
Exploit for unknown platform in category remote exploits ====================================================================== Data Dynamics ActiveReport ActiveX actrpt2.dll ----------------------------------------------------------------------------------------------- Data Dynamics ActiveReport...
Data Dynamics ActiveReport - ActiveX actrpt2.dll 2.5 Insecure Method
Data Dynamics ActiveReport - ActiveX actrpt2.dll 2.5 Insecure Method ----------------------------------------------------------------------------------------------- Data Dynamics ActiveReport ActiveX Control actrpt2.dll url: http://www.datadynamics.com/default.aspx author: shinnai mail:...
Data Dynamics ActiveReport - ActiveX 'actrpt2.dll 2.5' Insecure Method
----------------------------------------------------------------------------------------------- Data Dynamics ActiveReport ActiveX Control actrpt2.dll url: http://www.datadynamics.com/default.aspx author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written...
CVE-2007-3883
The Data Dynamics ActiveBar ActiveX control actbar3.ocx 3.2 and earlier allows remote attackers to create or overwrite files via a full pathname in 1 the second argument to the Save method, or the first argument to the 2 SaveLayoutChanges or 3 SaveMenuUsageData method...
Security feature bypass
The Data Dynamics ActiveBar ActiveX control actbar3.ocx 3.2 and earlier allows remote attackers to create or overwrite files via a full pathname in 1 the second argument to the Save method, or the first argument to the 2 SaveLayoutChanges or 3 SaveMenuUsageData method...
CVE-2007-3883
The Data Dynamics ActiveBar ActiveX control actbar3.ocx 3.2 and earlier allows remote attackers to create or overwrite files via a full pathname in 1 the second argument to the Save method, or the first argument to the 2 SaveLayoutChanges or 3 SaveMenuUsageData method...
CVE-2007-3883
CVE-2007-3883 affects the Data Dynamics ActiveBar ActiveX control (actbar3.ocx) version 3.2 and earlier. The vulnerability allows remote attackers to create or overwrite files by providing a full pathname as an argument to the Save method, or to the first argument of SaveLayoutChanges or SaveMenu...
CVE-2007-3883: Undefined Security Weakness
The Data Dynamics ActiveBar ActiveX control actbar3.ocx 3.2 and earlier allows remote attackers to create or overwrite files via a full pathname in 1 the second argument to the Save method, or the first argument to the 2 SaveLayoutChanges or 3 SaveMenuUsageData method...
InterActual Player IAMCE和IAKey控件远程栈溢出漏洞
BUGTRAQ ID: 24919 InterActual是一款DVD播放器。 InterActual播放器的IAMCE（IAMCE.dll）ActiveX控件在处理超过256字节的超长FailURL属性时存在栈溢出漏洞；IAKey（IAKey.dll）ActiveX控件在处理超过900字节的超长URLCode属性时存在另一个栈溢出漏洞，如果用户受骗加载了恶意媒体文件的话，就可能触发这些溢出，导致执行任意指令。 Roxio CinePlayer 3.2 InterActual Technologies InterActual Player 2.60.12.0717 厂商补丁：...
Stack overflow
Multiple stack-based buffer overflows in a InterActual Player 2.60.12.0717 and b Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via a 1 long FailURL attribute in the IAMCE ActiveX Control IAMCE.dll or a 2 long URLCode attribute in the IAKey ActiveX Control IAKey.dll. NOTE:...
CVE-2007-3829
Multiple stack-based buffer overflows in a InterActual Player 2.60.12.0717 and b Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via a 1 long FailURL attribute in the IAMCE ActiveX Control IAMCE.dll or a 2 long URLCode attribute in the IAKey ActiveX Control IAKey.dll. NOTE:...
CVE-2007-3829
The CVE-2007-3829 issue affects InterActual Player and Roxio CinePlayer due to stack-based buffer overflows in ActiveX controls IAKey (IAKEY.dll) and IAMCE (IAMCE.dll). Vendors describe a remote code execution risk when a user is convinced to view specially crafted HTML (e.g., web page or HTML em...
CVE-2007-3829
Multiple stack-based buffer overflows in a InterActual Player 2.60.12.0717 and b Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via a 1 long FailURL attribute in the IAMCE ActiveX Control IAMCE.dll or a 2 long URLCode attribute in the IAKey ActiveX Control IAKey.dll. NOTE:...
Data Dynamics ActiveBar ActiveX (actbar3.ocx <= 3.1) Insecure Methods
Exploit for unknown platform in category remote exploits ===================================================================== Data Dynamics ActiveBar ActiveX actbar3.ocx --------------------------------------------------------------------------------------- Data Dynamics ActiveBar ActiveX Contro...
Data Dynamics ActiveBar ActiveX (actbar3.ocx <= 3.1) Insecure Methods
No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"--------------------------------------------------------------------------------------- bData Dynamics ActiveBar ActiveX Control actbar3.ocx = 3.1 Multiple Inscure Methods/b url:...
Data Dynamics ActiveBar - ActiveX actbar3.ocx 3.1 Insecure Methods
Data Dynamics ActiveBar - ActiveX actbar3.ocx 3.1 Insecure Methods --------------------------------------------------------------------------------------- Data Dynamics ActiveBar ActiveX Control actbar3.ocx url: http://www.datadynamics.com/default.aspx author: shinnai mail: shinnaiatautisticidoto...
Data Dynamics ActiveBar - ActiveX 'actbar3.ocx 3.1' Insecure Methods
--------------------------------------------------------------------------------------- Data Dynamics ActiveBar ActiveX Control actbar3.ocx url: http://www.datadynamics.com/default.aspx author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for...
Windows MDAC RDS.Dataspace ActiveX control vulnerability
Added: 07/16/2007 CVE: CVE-2006-0003 BID: 17462 OSVDB: 24517 Background Microsoft Data Access Components MDAC enable Universal Data Access in Windows applications deployed over a network. Problem A cross-zone scripting vulnerability in the RDS.Dataspace ActiveX control in MDAC allows command...