252 matches found
iDefense Security Advisory 05.08.07: McAfee Security Center IsOldAppInstalled ActiveX Buffer Overflow Vulnerability
McAfee Security Center IsOldAppInstalled ActiveX Buffer Overflow Vulnerability iDefense Security Advisory 05.08.07 http://labs.idefense.com/intelligence/vulnerabilities/ May 08, 2007 I. BACKGROUND McAfee Security Center is a centralized configuration GUI utilized to control and monitor McAfee...
Arbitrary file deletion
Unspecified vulnerability in the mdsauth.dll COM object in Microsoft Windows Media Server in the Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; or 7 on Windows Vista allows remote attackers to...
Code injection
Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; and possibly 7 on Windows Vista does not properly "instantiate certain COM objects as ActiveX controls," which allows remote attackers to execute...
CVE-2007-2221
CVE-2007-2221 corresponds to a vulnerability in the mdsauth.dll ActiveX control used by Microsoft Windows Media Services within Internet Explorer. The mdsauth.dll COM object can be instantiated via IE, enabling an attacker to overwrite arbitrary files on a vulnerable system, potentially allowing ...
Internet Explorer IMJPCKSI COM对象实例化内存破坏漏洞（MS07-016）
Internet Explorer是微软发表的非常流行的WEB浏览器。 Internet Explorer使用某些Imjpcksid.dll的COM对象作为ActiveX控件。攻击者可能通过构建特制网页来利用此漏洞，如果用户查看了该网页，则可能允许远程执行代码。成功利用此漏洞的攻击者可以完全控制受影响的系统。 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 Microsoft Internet Explorer 5.0.1 SP4...
Microsoft Internet Explorer多个COM对象颜色属性拒绝服务漏洞
Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer在处理多个COM对象（dxtmsft.dll/dxtmsft3.dll）的颜色属性输入方式时，如果将颜色属性设置为超长字符串的话，就会导致Internet Explorer崩溃。 Microsoft Internet Explorer 6.0 SP1 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.microsoft.com/windows/ie/default.asp ===============...
Microsoft Windows 2000多个COM对象实例化内存破坏漏洞
Microsoft Windows是微软发布的非常流行的操作系统。 在Windows 2000上当Internet Explorer试图将ciodm.dll、MyInfo.dll、msdxm.ocx、Creator.dll（Media player 9）COM对象实例化为ActiveX控件时，就可能破坏系统内存，导致拒绝服务或执行任意代码。 Microsoft Internet Explorer 6.0 SP1 - Microsoft Windows 2000 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
Microsoft IE IMSKDIC.DLL COM对象实例化拒绝服务漏洞
Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer在试图将IMSKDIC.DLL（Microsoft IME）COM对象实例化为ActiveX控件时可能会破坏系统内存，导致拒绝服务。 Microsoft Internet Explorer 6.0 SP2 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
Microsoft IE CHTSKDIC.DLL COM对象实例化拒绝服务漏洞
Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer在试图将CHTSKDIC.DLL（Microsoft IME）COM对象实例化为ActiveX控件时可能会破坏系统内存，导致拒绝服务。 Microsoft Internet Explorer 6.0 SP2 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
Microsoft Windows Shell COM对象处理远程代码执行漏洞（MS06-015）
Microsoft Windows是微软发布的非常流行的操作系统。 Windows资源管理器处理COM对象的方式存在远程代码执行漏洞，成功利用这个漏洞的攻击者可以完全控制受影响系统。 攻击者必须诱骗用户访问强制到远程文件服务器连接的站点，然后这个远程文件服务器就可以导致Windows资源管理器失效，可能允许代码执行。 Microsoft Windows XP SP2 Microsoft Windows XP SP1 Microsoft Windows Server 2003 SP1 Microsoft Windows Server 2003 Microsoft Windows ME...
Internet Explorer COM Object Heap Overflow Download Exec Exp
No description provided by source. / ----------------------------------------------------------------------- daxctle2.c - Internet Explorer COM Object Heap Overflow Download Exec Exploit !!! 0day !!! Public Version !!! Copyright C 2006 XSec All Rights Reserved. Author : nop : nopxsec.org :...
Internet Explorer VML Rect Fill Method Buffer Overflow (MS06-055; CVE-2006-4868)
Microsoft Internet Explorer is the most widely used Internet browser. Microsoft Internet Explorer fails to handle Vector Markup Language VML tags. VML is a set of XML tags for drawing vector graphics. A remote attacker may trigger this vulnerability to execute arbitrary code on the target system...
Microsoft Internet Explorer - COM Object Remote Heap Overflow
/ ----------------------------------------------------------------------- daxctle2.c - Internet Explorer COM Object Heap Overflow Download Exec Exploit !!! 0day !!! Public Version !!! Copyright C 2006 XSec All Rights Reserved. Author : nop : nopxsec.org : http://www.xsec.org : Tested : Windows 20...
Microsoft Internet Explorer - COM Object Remote Heap Overflow
Microsoft Internet Explorer - COM Object Remote Heap Overflow / ----------------------------------------------------------------------- daxctle2.c - Internet Explorer COM Object Heap Overflow Download Exec Exploit !!! 0day !!! Public Version !!! Copyright C 2006 XSec All Rights Reserved. Author :...
Microsoft Windows Server 2000 - Multiple COM Object Instantiation Code Execution Vulnerabilities
source: https://www.securityfocus.com/bid/19636/info Microsoft Windows 2000 is prone to multiple memory-corruption vulnerabilities that are related to the instantiation of COM objects. These issues may be remotely triggered through Internet Explorer. The vulnerabilities arise because of the way...
Microsoft Internet Explorer - Multiple COM Object Color Property Denial of Service Vulnerabilities
var i =0; var Objects = new Array // CLSID: 3A04D93B-1EDD-4f3f-A375-A03EC19572C4 // Info: MaskFilter // ProgID: DXImageTransform.Microsoft.MaskFilter.1 // InprocServer32: C:\WINNT\system32\dxtmsft.dll "DXImageTransform.Microsoft.MaskFilter.1", // CLSID: 421516C1-3CF8-11D2-952A-00C04FA34F05 // Inf...
Microsoft Internet Explorer 6 - Multiple COM Object Color Property Denial of Service Vulnerabilities
source: https://www.securityfocus.com/bid/19640/info Microsoft Internet Explorer is prone to multiple denial-of-service vulnerabilities that occur when instantiating COM objects. The vulnerabilities arise because of the way Internet Explorer tries to instantiate certain COM objects as ActiveX...
Microsoft Internet Explorer 6 - Multiple COM Object Color Property Denial of Service Vulnerabilities
Microsoft Internet Explorer 6 - Multiple COM Object Color Property Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/19640/info Microsoft Internet Explorer is prone to multiple denial-of-service vulnerabilities that occur when instantiating COM objects. The vulnerabiliti...
MS Internet Explorer Multiple COM Object Color Property DoS
No description provided by source. !-- // Internet Explorer Multiple COM Object Color Property DoS Vulnerability // tested on Windows 2000 SP4/XP SP2 // http://www.xsec.org // nop nopxsec.org --! html head title/title /head /body script var i =0; var Objects = new Array // CLSID:...
Microsoft Windows Server 2000 - Multiple COM Object Instantiation Code Execution Vulnerabilities
Microsoft Windows Server 2000 - Multiple COM Object Instantiation Code Execution Vulnerabilities source: https://www.securityfocus.com/bid/19636/info Microsoft Windows 2000 is prone to multiple memory-corruption vulnerabilities that are related to the instantiation of COM objects. These issues ma...