9232 matches found
Adobe Document Server for Reader Extensions < 6.1 Multiple Vulnerabilities
The remote host is running Adobe Document Server, a server that dynamically creates and manipulates PDF documents as well as graphic images. The version of Adobe Document Server installed on the remote host includes the Adobe Document Server for Reader Extensions component, which itself is affect...
CVE-2006-1186
Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via by instantiating the 1 Mdt2gddr.dll, 2 Mdt2dd.dll, and 3 Mdt2gddo.dll COM objects as ActiveX controls, which leads to memory corruption...
CVE-2006-1186
CVE-2006-1186 is a remote-code-execution vulnerability in Microsoft Internet Explorer 5.01–6 caused by instantiating certain COM objects (Mdt2gddr.dll, Mdt2dd.dll, Mdt2gddo.dll) as ActiveX controls, leading to memory corruption. Connected MS docs describe that the issue is addressed by the MS06-0...
Microsoft Internet Explorer COM Object Instantiation Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability that is related to the instantiation of COM objects. This issue results from a design error. The vulnerability arises because of the way Internet Explorer tries to instantiate certain COM objects as ActiveX...
Microsoft Internet Explorer HTML Tag Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability. This is related to the handling of certain HTML tags. Attackers could exploit this issue via a malicious web page to execute arbitrary code in the context of the currently logged-in user. They could also use HT...
Microsoft Internet Explorer Persistent Window Content Address Bar Spoofing Vulnerability
Description Microsoft Internet Explorer is prone to address-bar spoofing. Attackers may exploit this via a malicious web page to spoof the contents of a page that the victim may trust. This vulnerability may be useful in phishing or other attacks that rely on content spoofing. Technologies Affect...
Microsoft Security Bulletin MS06-013 Cumulative Security Update for Internet Explorer (912812)
Microsoft Security Bulletin MS06-013 Cumulative Security Update for Internet Explorer 912812 Published: April 11, 2006 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Critical...
Internet Explorer COM object instantiation vulnerability
Added: 02/24/2006 CVE: CVE-2005-1990 BID: 14511 OSVDB: 18612 Background Windows operating systems use the Component Object Model COM to allow various program components to be run within different applications. Problem Improper instantiation of certain COM objects as ActiveX controls by Internet...
Internet Explorer COM object instantiation vulnerability
Added: 02/24/2006 CVE: CVE-2005-1990 BID: 14511 OSVDB: 18612 Background Windows operating systems use the Component Object Model COM to allow various program components to be run within different applications. Problem Improper instantiation of certain COM objects as ActiveX controls by Internet...
Internet Explorer COM object instantiation vulnerability
Added: 02/24/2006 CVE: CVE-2005-1990 BID: 14511 OSVDB: 18612 Background Windows operating systems use the Component Object Model COM to allow various program components to be run within different applications. Problem Improper instantiation of certain COM objects as ActiveX controls by Internet...
Internet Explorer COM object instantiation vulnerability
Added: 02/24/2006 CVE: CVE-2005-1990 BID: 14511 OSVDB: 18612 Background Windows operating systems use the Component Object Model COM to allow various program components to be run within different applications. Problem Improper instantiation of certain COM objects as ActiveX controls by Internet...
Authentication flaw
profile.php in Reamday Enterprises Magic News Lite 1.2.3, when registerglobals is enabled, allows remote attackers to modify program behavior, potentially bypassing authentication controls, via modified 1 action, 2 passwd, 3 adminpassword, 4 newpasswd, and 5 confirmpasswd variables, which are not...
CVE-2006-0724
profile.php in Reamday Enterprises Magic News Lite 1.2.3, when registerglobals is enabled, allows remote attackers to modify program behavior, potentially bypassing authentication controls, via modified 1 action, 2 passwd, 3 adminpassword, 4 newpasswd, and 5 confirmpasswd variables, which are not...
CVE-2006-0722
CVE-2006-0722 affects Reamday Enterprises’ Magic Downloads 1.1.3. When register_globals is ON, the vulnerable settings.php allows remote attackers to modify program behavior via uninitialized variables (action, passwd, admin_password, new_passwd, confirm_passwd), potentially bypassing authenticat...
Microsoft Windows Web Client Buffer Overflow Vulnerability
Description Microsoft Windows Web Client is prone to a buffer overflow. Successful exploitation could allow arbitrary code execution with System privileges. Technologies Affected Microsoft Windows Server 2003 Datacenter Edition Microsoft Windows Server 2003 Datacenter Edition Itanium Microsoft...
Microsoft Windows privilege escalation vulnerability
Overview Microsoft Windows access controls may be improperly configured potentially allowing a local attacker to gain elevated privileges on a vulnerable system. Description Microsoft Windows provides numerous, fine grained permissions and privileges to control access to Windows components, such ...
Design/Logic Flaw
Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to bypass the Kill bit settings for dangerous ActiveX controls via unknown vectors involving crafted HTML, which can expose the browser to attacks that would otherwise be prevented by the Kill bit setting. NOTE: CERT/CC claims...
CVE-2006-0057
Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to bypass the Kill bit settings for dangerous ActiveX controls via unknown vectors involving crafted HTML, which can expose the browser to attacks that would otherwise be prevented by the Kill bit setting. NOTE: CERT/CC claims...
CVE-2006-0057: Undefined Security Weakness
Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to bypass the Kill bit settings for dangerous ActiveX controls via unknown vectors involving crafted HTML, which can expose the browser to attacks that would otherwise be prevented by the Kill bit setting. NOTE: CERT/CC claims...
Microsoft Internet Explorer does not honor ActiveX kill bit
Overview Internet Explorer fails to properly check the kill bit for ActiveX controls, which may allow a remote attacker to execute arbitrary code on a vulnerable system. Description Microsoft COMMicrosoft COM is a technology that allows programmers to create reusable software components that can ...