Memory corruption

The ActiveX Control yNotifier.dll in Yahoo! Assistant 3.6 and earlier allows remote attackers to execute arbitrary code via unspecified vectors in the Ynoifier COM object that trigger memory corruption...

CVE-2008-2111: Undefined Security Weakness

The ActiveX Control yNotifier.dll in Yahoo! Assistant 3.6 and earlier allows remote attackers to execute arbitrary code via unspecified vectors in the Ynoifier COM object that trigger memory corruption...

Microsoft IE URLMON.DLL COM对象实例化无效内存访问漏洞（MS07-033）

Internet Explorer是一款非常流行的WEB浏览器。 Internet Explorer在创建某些COM对象时存在内存破坏漏洞，成功利用此漏洞的攻击者可能完全控制受影响的系统。 如果调用了IObjectSafety函数的话，可能会访问未初始化的内存，导致执行任意代码。 攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 Microsoft Internet Explorer 5.0.1 SP4 临时解决方...

mso-dos.txt

MSODataSourceControl.DeleteRecordSourceIfUnused COM-object B0F POC Tested on full patched XP/SP2, IE7, MSO2003 var b = 'AAAA'; while b.length...

Microsoft Office MSODataSourceControl COM-object BoF PoC (0day)

No description provided by source. MSODataSourceControl.DeleteRecordSourceIfUnused COM-object B0F POC Tested on full patched XP/SP2, IE7, MSO2003 html object id=ctl classid="clsid:0002E55B-0000-0000-C000-000000000046"/object script language="javascript" var b = 'AAAA'; while b.length = 256 b+=b;...

Microsoft Office - MSODataSourceControl COM-object Buffer Overflow (PoC)

Microsoft Office - MSODataSourceControl COM-object Buffer Overflow PoC MSODataSourceControl.DeleteRecordSourceIfUnused COM-object B0F POC Tested on full patched XP/SP2, IE7, MSO2003 var b = 'AAAA'; while b.length milw0rm.com 2007-06-13...

iDefense Security Advisory 06.12.07: Microsoft License Manager and urlmon.dll COM Object Interaction Invalid Memory Access Vulnerability

Microsoft License Manager and urlmon.dll COM Object Interaction Invalid Memory Access Vulnerability iDefense Security Advisory 06.12.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jun 12, 2007 I. BACKGROUND Internet Explorer is a set of core technologies in Microsoft Windows operating...

CVE-2007-0218

CVE-2007-0218 affects Microsoft Internet Explorer 5.01, 6, and 7. The vulnerability arises when IE instantiates certain COM objects from urlmon.dll, causing memory corruption during IObjectSafety calls and enabling remote code execution. Microsoft’s MS07-033 security update mitigates this by upda...

Microsoft Internet Explorer Speech API 4 COM Object Instantiation Buffer Overflow Vulnerabilities

Description Microsoft Internet Explorer is prone to multiple buffer-overflow vulnerabilities when instantiating certain COM objects. An attacker may exploit these issues by enticing victims into opening a maliciously crafted webpage. Successfully exploiting these issues allows remote attackers to...

CVE-2005-4843

The CVE-2005-4843 vulnerability affects the SmartConnect Class control. It allows remote attackers to cause an Internet Explorer crash by creating a COM object of the control’s CLSID that is not intended for use within Internet Explorer. The issue is described across multiple sources (Red Hat, CV...

CVE-2005-4841

Technical details about CVE-2005-4841 are not publicly available in the provided documents. Monitor for updates from Red Hat, NVD, CVE listings, and related advisories.

CVE-2005-4845

CVE-2005-4845 concerns the Java Plug-in versions 1.4.2_03 and 1.4.2_04, including the associated applet redirector controls. The issue is that creating a COM object linked to the control’s CLSID (not intended for use within Internet Explorer) can crash Internet Explorer, resulting in a denial of ...

CVE-2005-4842

The System Monitor Source Properties control allows remote attackers to cause a denial of service Internet Explorer crash by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer...

CVE-2005-4842

The CVE-2005-4842 entry describes a vulnerability in the System Monitor Source Properties control that can cause a denial-of-service (Internet Explorer crash) when a remote attacker creates a COM object of the control’s CLSID, which IE does not intend to use. Multiple sources (NVD, CVE list, Red ...

CVE-2005-4842: Undefined Security Weakness

The System Monitor Source Properties control allows remote attackers to cause a denial of service Internet Explorer crash by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer...

CVE-2005-4844: Undefined Security Weakness

The CLSIDApprenticeICW control allows remote attackers to cause a denial of service Internet Explorer crash by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer...

CVE-2005-4841: Undefined Security Weakness

The Outlook Progress Ctl control allows remote attackers to cause a denial of service Internet Explorer crash by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer...

CVE-2005-4843: Undefined Security Weakness

The SmartConnect Class control allows remote attackers to cause a denial of service Internet Explorer crash by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer...

CVE-2005-4845: Undefined Security Weakness

The Java Plug-in 1.4.203 and 1.4.204 controls, and the 1.4.203 and 1.4.204 redirector controls, allow remote attackers to cause a denial of service Internet Explorer crash by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet...

LeadTools JPEG 2000 - COM Object Remote Stack Overflow

2007/05/18 ----------------------------------------------------------------------------------------------- LeadTools JPEG 2000 COM Objejct LTJ2K14.ocx v. 14.5.0.35 Remote Stack-Based Buffer Overflow url: http://www.leadtools.com/ peice: eheheh, take a look at thier site : author: shinnai mail:...