23367 matches found
Microsoft Internet Explorer 5/6 JavaScript Interface Spoofing Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3469/info It is reported that Microsoft Internet Explorer may permit aspects of the Internet Explorer interface to be spoofed. This could facilitate numerous attacks against users of the browser, including spoofing of bot...
Microsoft Internet Explorer 6.0 OutlookExpress.AddressBook Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18771/info Microsoft Internet Explorer is prone to a denial-of-service condition when processing the 'OutlookExpress.AddressBook' COM object. A successful attack may cause the browser to fail due to a null-pointer...
eSellerate SDK 3.6.5 eSellerateControl365.DLL ActiveX Control Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24300/info eSellerate SDK ActiveX control is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. Successfully...
Microsoft Internet Explorer 5.0.1 Content Advisor File Handling Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13117/info Microsoft Internet Explorer is prone to a remote buffer overflow vulnerability when handling malformed Content Advisor files. An attacker can exploit this issue by crafting a Content Advisor file with excessive...
Microsoft Outlook2000/Express 6.0 Arbitrary Program Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6923/info Microsoft Outlook and Outlook Express may execute arbitrary programs through objects embedded in HTML email messages. When an email message or newsgroup message is viewed using Outlook, a temporary object is...
Microsoft Internet Explorer 6.0 ' ' Address Bar URI Spoofing Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31960/info Internet Explorer is affected by a URI-spoofing vulnerability because it fails to adequately handle specific combinations of the non-breaking space character ''. An attacker may leverage this issue to spoof the...
SmartVMD 1.3 ActiveX Control 'VideoMovementDetection.dll' Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/36217/info SmartVMD ActiveX control is prone to a buffer-overflow vulnerability because the application fails to adequately check boundaries on user-supplied input. An attacker can exploit this issue to execute arbitrary...
Microsoft Internet Explorer 5/6 MSXML XML File Parsing Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7938/info A vulnerability has been reported for the Microsoft Internet Explorer that may result in cross-site scripting attacks. If IE, using the MSXML parser, is unable to parse the requested XML file, it will display a...
HP Instant Support 1.0.22 - 'HPISDataManager.dll' 'StartApp' ActiveX Control Insecure Method Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29533/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to an insecure-method vulnerability. Successfully exploiting this issue allows remote attackers to launch arbitrary applications with the...
Microsoft Internet Explorer 7.0 HTML Form Value Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/33494/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability because it fails to perform adequate boundary checks on user-supplied data. Successfully exploiting this issue may allow an attacker to...
IBM Tivoli Provisioning Manager Express for Software Distribution Isig.isigCtl.1 ActiveX RunAndUploadFile() Method Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Viscom VideoEdit Gold ActiveX 8.0 - Remote Code Execution Exploit
No description provided by source. !-- Title: Viscom VideoEdit Gold ActiveX 8.0 Remote Code Execution Exploit Date: Dec 5, 2010 Author: Rew Email: rew splat leethax.info Link: http://www.viscomsoft.com/products/videoeditgold/index.html Version: 8.0.0.0 Tested on: WinXP - IE 6 CVE: NA 0day Impact ...
Apple MacOS Internet Explorer 3/4/5 File Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3935/info A vulnerability has been discovered in MacOS systems running Internet Explorer 5.1 and earlier. MacOS X is not affected by this issue. File URLs may be used by a malicious webmaster to execute programs on a web...
Internet Download Accelerator 5.2 - Remote Buffer Overflow PoC
No description provided by source. !--========================== ================================================== Internet Explorer ver 6.0 , 7.0 Tested On Winados SP2 DeltahackingSecurityTEAM Bug discovered by Dr.Pantagon Affected Software: idaiehlp.dll IE 4.x-6.x BHO for Internet Download...
Microsoft Outlook 2002 Mailto Parameter Quoting Zone Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9827/info Microsoft Outlook is prone to a vulnerability that may permit execution of arbitrary code on client systems. This issue is exposed through Outlook, but will reportedly cause Internet Explorer to load malicious...
LeadTools Raster ISIS Object (LTRIS14e.DLL 14.5.0.44) - Remote BoF
No description provided by source. pre span style=font: 14pt Courier New;p align=centerb2007/05/27/b/p/span codespan style=font: 10pt Courier New;span class=general1-symbol----------------------------------------------------------------------------------------- bLeadTools Raster ISIS Object...
Microsoft Internet Explorer 6.0 ADODB.Stream Object File Installation Weakness
No description provided by source. source: http://www.securityfocus.com/bid/10514/info Microsoft Internet Explorer is prone to a security weakness that may permit malicious HTML documents to create or overwrite files on a victim file system when interpreted from the Local Zone or other Security...
Data Dynamics ActiveReport ActiveX (actrpt2.dll <= 2.5) Inscure Method
No description provided by source. pre codespan style=font: 10pt Courier New;span class=general1-symbol----------------------------------------------------------------------------------------------- bData Dynamics ActiveReport ActiveX Control actrpt2.dll = 2.5 SaveLayout Inscure Method/b url:...
Microsoft Works 7 WkImgSrv.dll WKsPictureInterface() ActiveX Exploit
No description provided by source. $Id: msworkswkspictureinterface.rb 10477 2010-09-25 11:59:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
MS Windows XP/2000/NT 4 Help Facility ActiveX Control Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/5874/info The ActiveX control that provides much of the functionality for the Windows Help Center contains an unchecked buffer. Successful exploitation could result in execution of arbitrary code in the security context o...