CVE-2006-3456

The Symantec NAVOPTS.DLL ActiveX control aka Symantec.Norton.AntiVirus.NAVOptions 12.2.0.13, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, is designed for use only in application-embedded web browsers, which allows remote attackers to "crash the control" via...

CVE-2007-2604

Unspecified vulnerability in the FlexLabel ActiveX control allows remote attackers to cause a denial of service unstable behavior via an improper initialization, as demonstrated by a certain value of the Caption property...

CVE-2006-3456

CVE-2006-3456 concerns the Symantec NAVOPTS.DLL ActiveX control (NAVOptions) in Norton AntiVirus/Internet Security/System Works 2005–2006 (NAVOptions 12.2.0.13). The control, intended for application-embedded web browsers, can be loaded in a standard browser window, causing initialization errors ...

CVE-2007-2604

CVE-2007-2604 concerns the FlexLabel ActiveX control. The issue is an unspecified vulnerability that allows remote attackers to cause a denial of service (unstable behavior) through improper initialization of the Caption property. Connected documents confirm the same description across multiple s...

CVE-2007-2603

CVE-2007-2603 concerns the Audio CD Ripper OCX (AudioCDRipperOCX.ocx) 1.0 ActiveX control. The issue is an unspecified vulnerability in the Init function that allows remote attackers to cause a denial of service (NULL dereference and Internet Explorer crash) via unspecified vectors. Connected rec...

CVE-2007-2601

CVE-2007-2601 is tied to a buffer overflow in the GDivX Zenith Player’s AviFixer ActiveX control (the fix.dll 1.0.0.1 component). The vulnerability allows remote attackers to execute arbitrary code by supplying a long value to the SetInputFile property. This is supported by multiple connected sou...

McAfee Security Center IsOldAppInstalled ActiveX BoF Exploit

No description provided by source. / McAfee Security Center IsOldAppInstalled ActiveX Buffer Overflow Vulnerability Peel the frame from axis,Thanks Test on Windows2000 and dll version Mcsubmgr.dll 6.0.0.15 Greetz to OYXin, sowhat, Winny Thomas and 0x557 team / include stdio.h include stdlib.h...

BarCodeWiz ActiveX Control 2.52 (BarcodeWiz.dll) SEH Overwrite Exploit

No description provided by source. !-- =============================================================================================== BarCodeWiz ActiveX Control 2.52 BarcodeWiz.dllStack Overflow SEH Overwrite Exploit By Parveen Vashishtha...

McAfee ePolicy Orchestrator SiteManager ExportSiteList buffer overflow

Added: 05/11/2007 CVE: CVE-2007-1498 BID: 22952 OSVDB: 33796 Background ePolicy Orchestrator is a centralized security configuration and monitoring application. It includes the SiteManager ActiveX control which is implemented by sitemanager.dll. Problem A buffer overflow vulnerability in the...

Morovia Barcode ActiveX Professional 3.3.1304 Arbitrary File Overwrite

Exploit for unknown platform in category remote exploits ====================================================================== Morovia Barcode ActiveX Professional 3.3.1304 Arbitrary File Overwrite ====================================================================== 2007/05/11...

Microsoft IE HTML对象脚本错误远程代码执行漏洞（MS07-027）

Internet Explorer是微软发布的非常流行的操作系统。 IE在处理内存访问的方式上存在漏洞，远程攻击者可能利用此漏洞控制用户机器。 Internet Explorer尝试访问未初始化的内存。因此，内存可能以一种攻击者可以在登录用户的上下文中执行任意代码的方式受到破坏。攻击者者可以通过构建特制的网页来利用这些漏洞。 如果用户查看网页，这些漏洞可能允许远程执行代码。成功利用这些漏洞的攻击者可以完全控制受影响的系统。 Microsoft Internet Explorer 7.0 - Microsoft Windows XP SP2 - Microsoft Windows Vist...

BarCodeWiz ActiveX Control 2.0 (BarcodeWiz.dll) Remote BoF PoC

No description provided by source. span style="font: 14pt Courier New;"p align="center"b2007/05/09/b/p/span pre codespan style="font: 10pt Courier New;"span class="general1-symbol"--------------------------------------------------------------------------------...

McAfee VirusScan 10.0.21 ActiveX control Stack Overflow PoC

No description provided by source. html headtitle Prove of Concept - Mc Afee Viruscan Stack Overflow v10.0.21/title /head h4Prove of Concept - Mc Afee Viruscan Stack Overflow v10.0.21 http://download.mcafee.com/fr/ author - callAX mail - [email protected]...

Morovia Barcode ActiveX Professional 3.3.1304 - Arbitrary File Overwrite

Morovia Barcode ActiveX Professional 3.3.1304 - Arbitrary File Overwrite 2007/05/11 -------------------------------------------------------------------------------- Morovia Barcode ActiveX Professional 3.3 build 1304 Arbitrary file overwrite url: http://www.morovia.com/ price: $129 author: shinna...

Microsoft IE属性方法远程代码执行漏洞（MS07-027）

Internet Explorer是微软发布的非常流行的操作系统。 Internet Explorer的内部调用方法的实现上存在漏洞，远程攻击者可能利用此漏洞控制用户机器。 当Internet Explorer调用属性方法时，可能以一种攻击者可以执行任意代码的方式来破坏内存。攻击者可能通过构建特制网页来利用此漏洞，如果用户查看了该网页，则可能允许远程执行代码。成功利用此漏洞的攻击者可以完全控制受影响的系统。 Microsoft Internet Explorer 6.0 - Microsoft Windows XP SP2 - Microsoft Windows Server 2003...

Hewlett Packard 1.0.0.309 hpqvwocx.dll ActiveX Magview Overflow PoC

Exploit for unknown platform in category dos / poc =================================================================== Hewlett Packard 1.0.0.309 hpqvwocx.dll ActiveX Magview Overflow PoC =================================================================== Proof of Concept - Hewlett Packard Stack...

McAfee ePolicy Orchestrator SiteManager ExportSiteList buffer overflow

Added: 05/11/2007 CVE: CVE-2007-1498 BID: 22952 OSVDB: 33796 Background ePolicy Orchestrator is a centralized security configuration and monitoring application. It includes the SiteManager ActiveX control which is implemented by sitemanager.dll. Problem A buffer overflow vulnerability in the...

CVE-2007-2603: Undefined Security Weakness

Unspecified vulnerability in the Init function in the Audio CD Ripper OCX AudioCDRipperOCX.ocx 1.0 ActiveX control allows remote attackers to cause a denial of service NULL dereference and Internet Explorer crash via unspecified vectors...

CVE-2007-2604: Undefined Security Weakness

Unspecified vulnerability in the FlexLabel ActiveX control allows remote attackers to cause a denial of service unstable behavior via an improper initialization, as demonstrated by a certain value of the Caption property...

Microsoft Capicom ActiveX控件远程代码执行漏洞（MS07-028）

CAPICOM.Certificates是一种ActiveX控件，允许脚本程序根据安全的基本Windows CryptoAPI功能加密数据。 CAPICOM.Certificates实现上存在输入验证漏洞，远程攻击者可能利用此漏洞控制用户机器。 Microsoft CAPICOM和BizTalk Server中的加密API组件对象模型证书ActiveX控件（CAPICOM.dll）处理某些用户输入时存在漏洞。如果传递了意外数据，则ActiveX控件可能失败，并允许远程执行代码。 Microsoft CAPICOM Microsoft BizTalk Server 2004 SP2...