CVE-2007-2564

Affected software: Sienzo Digital Music Mentor (DMM) 2.6.0.4; ActiveX control DSKernel2.dll. Vulnerability: multiple stack-based buffer overflows in the control, exploited by a long argument to the (1) LockModules or (2) UnlockModule function. Impact: remote code execution potential. Exploitation...

CVE-2007-2567

The CVE-2007-2567 entry describes a buffer overflow in the SaveBarCode function of the Taltech Tal Bar Code ActiveX control, enabling remote code execution via unspecified vectors. Affected component is the Tal Bar Code ActiveX control; root cause is a buffer overflow in SaveBarCode. The vulnerab...

BarCodeWiz ActiveX Control 2.0 (BarcodeWiz.dll) Remote BoF PoC

Exploit for unknown platform in category dos / poc ============================================================== BarCodeWiz ActiveX Control 2.0 BarcodeWiz.dll Remote BoF PoC ============================================================== 2007/05/09...

Internet Explorer Multiple COM Objects Memory Corruption (MS07-027; CVE-2007-0942; CVE-2007-0944; CVE-2007-0945; CVE-2007-2221)

Microsoft Internet Explorer is the most widely used Internet browser. Multiple remote code execution vulnerabilities have been reported in Microsoft Internet Explorer. The vulnerabilities are due to several memory corruption errors in Microsoft Internet Explorer when instantiating the vulnerable...

Barcodewiz ActiveX Control 2.0 - Barcodewiz.dll Remote Buffer Overflow (PoC)

Barcodewiz ActiveX Control 2.0 - Barcodewiz.dll Remote Buffer Overflow PoC 2007/05/09 -------------------------------------------------------------------------------- BarCodeWiz ActiveX Control 2.0 BarcodeWiz.dll Remote Buffer Overflow Exploit url: http://www.barcodewiz.com/ price: from $139 to...

Symantec Norton Antivirus NAVOPTS.DLL ActiveX Control Remote Code Execution Vulnerability

Description Symantec Norton Antivirus ActiveX control is prone to a remote code-execution vulnerability. An attacker may exploit this issue by enticing victims into opening a maliciously crafted HTML document. Successful exploits will allow attackers to execute arbitrary code in the context of th...

BarCodeWiz ActiveX Control 2.52 (BarcodeWiz.dll) SEH Overwrite Exploit

Exploit for unknown platform in category remote exploits ====================================================================== BarCodeWiz ActiveX Control 2.52 BarcodeWiz.dll SEH Overwrite Exploit ======================================================================...

Barcodewiz ActiveX Control 2.52 - Barcodewiz.dll Overwrite (SEH)

Barcodewiz ActiveX Control 2.52 - Barcodewiz.dll Overwrite SEH shellcode=unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49%49%51%5a%56%54%58%36%33%30%56%58%34%41%30%42%36"...

McAfee VirusScan 10.0.21 - ActiveX control Stack Overflow (PoC)

McAfee VirusScan 10.0.21 - ActiveX control Stack Overflow PoC Proof of Concept - Mc Afee Viruscan Stack Overflow v10.0.21 Proof of Concept - Mc Afee Viruscan Stack Overflow v10.0.21 http://download.mcafee.com/fr/ author - callAX mail - [email protected] Url - http://www.shellcode.com.ar /...

CVE-2007-2584: Undefined Security Weakness

Buffer overflow in the IsOldAppInstalled function in the McSubMgr.McSubMgr Subscription Manager ActiveX control MCSUBMGR.DLL in McAfee SecurityCenter before 6.0.25 and 7.x before 7.2.147 allows remote attackers to execute arbitrary code via a crafted argument...

CVE-2007-2585: Undefined Security Weakness

Stack-based buffer overflow in the Verify function in the BarCodeWiz ActiveX control 2.0 and 2.52 BarcodeWiz.dll allows remote attackers to execute arbitrary code via a long argument...

CVE-2007-2566: Undefined Security Weakness

The SaveBarCode function in the Taltech Tal Bar Code ActiveX control allows remote attackers to cause a denial of service disk consumption by uploading multiple bar codes, as demonstrated by a WSF package...

Microsoft CAPICOM Certificates ActiveX Control Code Execution (MS07-028; CVE-2007-0940)

CAPICOM Certificates CAPICOM.dll is an ActiveX control that provides a method for encrypting data based on secure underlying Windows CryptoAPI functionality.A remote code execution vulnerability has been reported in Cryptographic API Component Object Model CAPICOM Certificates.A remote attacker...

CVE-2007-2567: Undefined Security Weakness

Buffer overflow in the SaveBarCode function in the Taltech Tal Bar Code ActiveX control allows remote attackers to execute arbitrary code via unspecified vectors...

McAfee VirusScan 10.0.21 - ActiveX control Stack Overflow (PoC)

Proof of Concept - Mc Afee Viruscan Stack Overflow v10.0.21 Proof of Concept - Mc Afee Viruscan Stack Overflow v10.0.21 http://download.mcafee.com/fr/ author - callAX mail - [email protected] Url - http://www.shellcode.com.ar / http://www.securenetworks.ch sub CrAsHm3 Arg0 =...

Barcodewiz ActiveX Control 2.52 - 'Barcodewiz.dll' Overwrite (SEH)

shellcode=unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49%49%51%5a%56%54%58%36%33%30%56%58%34%41%30%42%36" shellcode=shellcode+unescape"%48%48%30%42%33%30%42%43%56%58%32%42%44%42%48%34%41%32%41%44%30%41%44%54%42%44%51%42%30%41%44%41"...

Heap overflow

Heap-based buffer overflow in the ConnectAsyncEx function in VNC Viewer ActiveX control scvncctrl.dll in the SmartCode VNC Manager 3.6 allows remote attackers to execute arbitrary code via a long argument...

CVE-2007-0323

Buffer overflow in the SetLanguage function in Research In Motion RIM TeamOn Import Object ActiveX control TOImport.dll allows remote attackers to execute arbitrary code via unspecified vectors...

Design/Logic Flaw

Unspecified vulnerability in the Cryptographic API Component Object Model Certificates ActiveX control CAPICOM.dll in Microsoft CAPICOM and BizTalk Server 2004 SP1 and SP2 allows remote attackers to execute arbitrary code via unspecified vectors, aka the "CAPICOM.Certificates Vulnerability."...

CVE-2007-2526

CVE-2007-2526 describes a heap-based buffer overflow in the ConnectAsyncEx function of the VNC Viewer ActiveX control (scvncctrl.dll) used by SmartCode VNC Manager 3.6, enabling remote code execution via a long argument. The connected sources confirm the vulnerable component and impact but do not...