Input validation

Multiple unspecified vulnerabilities in CycloMedia CycloScopeLite 2.50.3.0 allow remote attackers to execute arbitrary code via the ReturnConnection method in 1 CMADOConnection.dll, 2 CMAddressInfoDBC.dll, and 3 CMRecordingLocationDBC.dll, related to improper dereferencing. NOTE: the provenance o...

CycloMedia CycloScopeLite ActiveX控件内存破坏漏洞

Bugraq ID: 34912 CNCAN ID：CNCAN-2009051301 CycloMedia CycloScopeLite包含的ActiveX控件存在内存破坏问题，远程攻击者可以利用漏洞以应用程序权限执行任意代码。 问题存在于CMADOConnection.dll, CMAddressInfoDBC.dll和CMRecordingLocationDBC.dll中，当解析"ReturnConnection"方法时存在错误，可导致引用非法对象而造成任意代码执行 CycloMedia CycloScopeLite 2.50.3 目前没有详细解决方案提供：...