CVE-2008-4132

Stack-based buffer overflow in the VSFlexGrid.VSFlexGridL ActiveX control in ComponentOne VSFlexGrid 7.0.1.151 and 8.0.20072.239 allows remote attackers to execute arbitrary code via a long first argument to the Archive method. NOTE: the provenance of this information is unknown; the details are...

CVE-2008-4132

Stack-based buffer overflow in the VSFlexGrid.VSFlexGridL ActiveX control in ComponentOne VSFlexGrid 7.0.1.151 and 8.0.20072.239 allows remote attackers to execute arbitrary code via a long first argument to the Archive method. NOTE: the provenance of this information is unknown; the details are...

CVE-2008-4132

The CVE-2008-4132 issue affects the VSFlexGrid ActiveX control (VSFlexGridL) in ComponentOne VSFlexGrid 7.0.1.151 and 8.0.20072.239. It is a stack-based buffer overflow triggered by a long first argument to the Archive method, enabling remote code execution as described in the NVD entry. The vuln...

CVE-2008-4132: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the VSFlexGrid.VSFlexGridL ActiveX control in ComponentOne VSFlexGrid 7.0.1.151 and 8.0.20072.239 allows remote attackers to execute arbitrary code via a long first argument to the Archive method. NOTE: the provenance of this information is unknown; the details are...

Stack overflow

Multiple stack-based buffer overflows in the VSFlexGrid.VSFlexGridL ActiveX control in ComponentOne FlexGrid 7.1 Light allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long string in the 1 Text, 2 EditSelText, 3 EditText, and 4 CellFontName property...

CVE-2007-6028

Multiple stack-based buffer overflows in the VSFlexGrid.VSFlexGridL ActiveX control in ComponentOne FlexGrid 7.1 Light allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long string in the 1 Text, 2 EditSelText, 3 EditText, and 4 CellFontName property...

CVE-2007-6028

The CVE-2007-6028 entry describes multiple stack-based buffer overflows in the VSFlexGrid.VSFlexGridL ActiveX control from ComponentOne FlexGrid 7.1 Light. An attacker can trigger by providing long strings in the Text, EditSelText, EditText, or CellFontName properties, enabling remote exploitatio...

CVE-2007-6028: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in the VSFlexGrid.VSFlexGridL ActiveX control in ComponentOne FlexGrid 7.1 Light allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long string in the 1 Text, 2 EditSelText, 3 EditText, and 4 CellFontName property...

ComponentOne FlexGrid ActiveX Control Multiple Buffer Overflow Vulnerabilities

ComponentOne FlexGrid是一款创建各种用户界面表格的控件。 ComponentOne FlexGrid包含的ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 ComponentOne FlexGrid包含的ActiveX控件对多个方法调用缺少正确的边界检查，构建恶意WEB页，诱使用户访问，可导致触发缓冲区溢出，可能导致任意代码执行。 ComponentOne FlexGrid 7.1 Light 目前没有解决方案提供： http://www.componentone.com/ html head script...

[Full-disclosure] ComponentOne FlexGrid 7.1 Light Multiple Stack Overflows

The ComponentOne FlexGrid 7.1 VSFlexGrid.VSFlexGridL has multiple stack overflows. I have not tested code execution nor do I remember what this component was installed with. PoC as follows: -------------------- !-- written by e.b. -- html head script language="JavaScript" DEFER function Check var...

ComponentOne FlexGrid ActiveX multiple buffer overflows

Buffer overflows on different object properties...

flexgrid-overflow.txt

The ComponentOne FlexGrid 7.1 VSFlexGrid.VSFlexGridL has multiple stack overflows. I have not tested code execution nor do I remember what this component was installed with. PoC as follows: -------------------- function Check var s = "AAAA"; while s.length -------------------- Elazar...

ComponentOne FlexGrid 7.1 - ActiveX Control Multiple Buffer Overflow Vulnerabilities

ComponentOne FlexGrid 7.1 - ActiveX Control Multiple Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/26467/info ComponentOne FlexGrid ActiveX Control is prone to multiple stack-based buffer-overflow vulnerabilities because the application fails to adequately check...

ComponentOne FlexGrid 7.1 - ActiveX Control Multiple Buffer Overflow Vulnerabilities

source: https://www.securityfocus.com/bid/26467/info ComponentOne FlexGrid ActiveX Control is prone to multiple stack-based buffer-overflow vulnerabilities because the application fails to adequately check boundaries on user-supplied input. An attacker can exploit these issues to cause denial...