ie6ademco-overflow.txt

!-- IE 6 / Ademco, co., ltd. ATNBaseLoader100 Module ATNBaseLoader100.dll 5, 4, 0, 6 remote buffer overflow exploit / XP SP2 it version by rgod site: retrogod.altervista.org this activex is installed browsing some webcam pages try this google dork: intitle:"Browser Launch Page" dork credit: dragg...

zenturi-overwrite.txt

pre 2007/05/30 ------------------------------------------------------------------------------------------- Zenturi ProgramChecker ActiveX sasatl.dll Arbitrary file download/overwrite Exploit url: http://www.programchecker.com/activeintro.aspx author: shinnai mail: shinnaiatautisticidotorg site:...

Logitech VideoCall ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in the Logitech VideoCall ActiveX Control wcamxmp.dll 2.0.3470.448. By sending an overly long string to the "Start" method, an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/browser/logitechvideocall/start msf...

CVE-2007-2946

CVE-2007-2946 involves a buffer overflow in LeadTools Raster Dialog File_D Object (LTRDFD14e.DLL), an ActiveX control, version 14.5.0.44. The flaw can be triggered by a long DestinationPath property value, enabling remote code execution or a denial of service (causing Internet Explorer 7 to crash...

CVE-2007-2938

The CVE-2007-2938 entry affects the BaseRunner ActiveX control in the Ademco ATNBaseLoader100 Module (ATNBaseLoader100.dll) version 5.4.0.6. It describes a buffer overflow condition that, when Internet Explorer 6 is used, allows remote attackers to execute arbitrary code via a long argument to th...

EUVD-2007-2938

Buffer overflow in a certain ActiveX control in LeadTools Raster Dialog FileD Object LTRDFD14e.DLL 14.5.0.44 allows remote attackers to cause a denial of service Internet Explorer 7 crash or execute arbitrary code via a long DestinationPath property value...

Logitech VideoCall multiple ActiveX controls contain stack buffer overflows

Overview Logitech VideoCall ActiveX controls contain multiple stack buffer overflows, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Logitech VideoCall is video conferencing software for Windows. Logitech VideoCall includes...

Macrovision FLEXnet Connect Software Manager DWUpdateService ActiveX control contains dangerous methods

Overview The Macrovision FLEXnet Connect Software Manager DWUpdateService ActiveX control fails to restrict access to its methods, which can allow a remote, unauthenticated attacker to execute arbitrary commands on a vulnerable system. Description Macrovision FLEXnet Connect is a software package...

Authentium Command Antivirus odapi.dll multiple ActiveX buffer overflows

Overview Authentium Command Antivirus contains multiple ActiveX vulnerabilities, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Authentium Command Antivirus provides multiple ActiveX controls. Many of the ActiveX controls provided ...

SOL7528 - Heap-based buffer overflow vulnerability in ActiveX control

A heap-based buffer overflow vulnerability exists in the FirePass ActiveX control. This ActiveX control is installed in Microsoft Internet Explorer when a user logs on to FirePass. In some configurations, this control may be installed at the FirePass logon page prior to authentication. It is...

CVE-2007-2938: Undefined Security Weakness

Buffer overflow in the BaseRunner ActiveX control in the Ademco ATNBaseLoader100 Module ATNBaseLoader100.dll 5.4.0.6, when Internet Explorer 6 is used, allows remote attackers to execute arbitrary code via a long argument to the 1 Send485CMD method, and possibly the 2 SetLoginID, 3 AddSite, 4...

edraw-unsafe.txt

2007/05/28 ----------------------------------------------------------------------------------------------- EDraw Office Viewer Component edrawofficeviewer.ocx v. 4.0.5.20 Unsafe Method Vulnerability url: http://www.ocxt.com/officeviewer.php author: shinnai mail: shinnaiatautisticidotorg site:...

Buffer overflow

Buffer overflow in the HelpPopup method in the Microsoft Office 2000 Controllo UA di Microsoft Office ActiveX control OUACTRL.OCX 1.0.1.9 allows remote attackers to cause a denial of service probably winhlp32.exe crash via a long first argument. NOTE: it is not clear whether this issue crosses...

CVE-2007-2903

Buffer overflow in the HelpPopup method in the Microsoft Office 2000 Controllo UA di Microsoft Office ActiveX control OUACTRL.OCX 1.0.1.9 allows remote attackers to cause a denial of service probably winhlp32.exe crash via a long first argument. NOTE: it is not clear whether this issue crosses...

CVE-2007-2903

Buffer overflow in the HelpPopup method in the Microsoft Office 2000 Controllo UA di Microsoft Office ActiveX control OUACTRL.OCX 1.0.1.9 allows remote attackers to cause a denial of service probably winhlp32.exe crash via a long first argument. NOTE: it is not clear whether this issue crosses...

CVE-2007-2903

CVE-2007-2903 describes a buffer overflow in the HelpPopup method of the Microsoft Office 2000 Controllo UA di Microsoft Office ActiveX control (OUACTRL.OCX) 1.0.1.9. An attacker could trigger a denial-of-service (likely a winhlp32.exe crash) by supplying a long first argument. The note in the en...

Buffer overflow

Buffer overflow in a certain ActiveX control in LTRDF14e.DLL 14.5.0.44 in LeadTools Raster Dialog File Object allows remote attackers to execute arbitrary code via a long Directory property value...

CVE-2007-2895

Buffer overflow in a certain ActiveX control in LTRDF14e.DLL 14.5.0.44 in LeadTools Raster Dialog File Object allows remote attackers to execute arbitrary code via a long Directory property value...

CVE-2007-2895

Buffer overflow in a certain ActiveX control in LTRDF14e.DLL 14.5.0.44 in LeadTools Raster Dialog File Object allows remote attackers to execute arbitrary code via a long Directory property value...

CVE-2007-2885

CVE-2007-2885 (and related CVE-2007-4254) affect the MSVDT Database Designer 7.0 ActiveX control (VDT70.DLL). The NotSafe function argument can cause a denial of service (IE6 crash) per CVE-2007-2885, and CVE-2007-4254 describes a stack-based buffer overflow in the same control that could allow r...