CVE-2002-0622

The Office Web Components OWC package installer for Microsoft Commerce Server 2000 allows remote attackers to execute commands by passing the commands as input to the OWC package installer, aka "OWC Package Command Execution"...

CVE-2002-0621

Buffer overflow in the Office Web Components OWC package installer used by Microsoft Commerce Server 2000 allows remote attackers to cause the process to fail or run arbitrary code in the LocalSystem security context via certain input to the OWC package installer...

Microsoft SQLXML HTTP components vulnerable to cross-site scripting via root parameter

Overview A cross-site scripting vulnerability exists in the Microsoft SQLXML HTTP components. This vulnerability could allow an attacker to execute script on a victim's system with the victim's privileges. Description Microsoft SQL Server 2000 includes a feature called SQLXML that allows the serv...

Reading local files with OWC in IE (GM#006-IE)

GreyMagic Security Advisory GM006-IE ===================================== By GreyMagic Software, Israel. 08 Apr 2002. Available in HTML format at http://security.greymagic.com/adv/gm006-ie/. Topic: Reading local files with OWC in IE. Discovery date: 24 Feb 2002. Affected applications:...

Multiple local files detection issues with OWC in IE (GM#008-IE)

GreyMagic Security Advisory GM008-IE ===================================== By GreyMagic Software, Israel. 08 Apr 2002. Available in HTML format at http://security.greymagic.com/adv/gm008-ie/. Topic: Multiple local files detection issues with OWC in IE. Discovery date: 25 Feb 2002, 05 Mar 2002...

Scripting for the scriptless with OWC in IE (GM#005-IE)

GreyMagic Security Advisory GM005-IE ===================================== By GreyMagic Software, Israel. 08 Apr 2002. Available in HTML format at http://security.greymagic.com/adv/gm005-ie/. Topic: Scripting for the scriptless with OWC in IE. Discovery date: 10 Mar 2002. Affected applications:...

Controlling the clipboard with OWC in IE (GM#007-IE)

GreyMagic Security Advisory GM007-IE ===================================== By GreyMagic Software, Israel. 08 Apr 2002. Available in HTML format at http://security.greymagic.com/adv/gm007-ie/. Topic: Controlling the clipboard with OWC in IE. Discovery date: 24 Feb 2002. Affected applications:...

Multiple bugs in Office Web Components

Script execution, access to local files and clipboard...

CVE-2001-1127

Buffer overflow in Progress database 8.3D and 9.1C could allow a local user to execute arbitrary code via 1 proapsv, 2 mprosrv, 3 mprshut, 4 orarx, 5 sqlcpp, 6 probrkr, 7 sqlschema and 8 sqldump...

buffer overflow in mshtml.dll

Topic: buffer overflow in mshtml.dll Authors: ERRor and DarkZorro of domain Hell 3APA3A of SECURITY.NNOV Date: February, 13 2002 Vendor Informed: December, 20 2001 Software affected: Microsoft Internet Explorer 6.0 and prior Microsoft Outlook Express 6.0 and prior Microsoft Outlook 2000 and prior...

CVE-1999-1355

BMC Patrol component, when installed with Compaq Insight Management Agent 4.23 and earlier, or Management Agents for Servers 4.40 and earlier, creates a PFCUser account with a default password and potentially dangerous privileges...

ОБращение к реестру через IE5.5 (javascript execution)

Несколько ActiveX компонентов могут записывать разделы реестра...

Уязвимость ActiveX в Microsoft Outlook (code execution)

ActiveX компонент управляющий всей работой Outlook помечен как безопасный, что позволяет использовать его в Internet-страницах и письмах...

Очередная серьезная дырка в Internet Explorer (Microsoft VM ActiveX Component)

Один из встроенных JAVA-объектов позволяет выполнение любых ActiveX-компонент, в т.ч. не помеченные как безопасные...

Переполнения буфера в BEA Weblogic

Переполнения буфера во встраиваемых PROXY-компанентах...

SapporoWorks WinProxy 2.0/2.0.1 - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/1400/info Multiple unchecked buffers exist in the POP3 and HTTP Proxy components of SapporoWorks WinProxy which could open up the possibilities of denial of service attacks or remote execution of arbitrary code. Performing a "GET /" on port 8080 will...

CVE-1999-1011

The Remote Data Service RDS DataFactory component of Microsoft Data Access Components MDAC in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands...

CVE-1999-1011

CVE-1999-1011 affects the RDS DataFactory component of Microsoft MDAC used by IIS 3.x/4.x, enabling remote command execution via unsafe DataFactory methods in msadcs.dll. Public docs reference MS99-025 security bulletin and multiple advisories; exploit code and modules exist (e.g., Metasploit MSS...

CVE-2000-0256

Buffer overflows in htimage.exe and Imagemap.exe in FrontPage 97 and 98 Server Extensions allow a user to conduct activities that are not otherwise available through the web site, aka the "Server-Side Image Map Components" vulnerability...

microsoft-install.txt

Juan asked me to forward this message from him to the list. He has discovered that an ActiveX control shipped with IE can be used to install software components signed by Microsoft without prompting the user. This of curse raises trust issues. Someone, not necessarily Microsoft, could use this...