CVE-2007-6699

Multiple buffer overflows in the AIM PicEditor 9.5.1.8 ActiveX control in YGPPicEdit.dll in AOL You've Got Pictures YGP Picture Editor allow remote attackers to cause a denial of service browser crash via a long string in the 1 DisplayName, 2 FinalSavePath, 3 ForceSaveTo, 4 HiddenControls, 5...

CVE-2007-6699

Multiple buffer overflows in the AIM PicEditor 9.5.1.8 ActiveX control in YGPPicEdit.dll in AOL You've Got Pictures YGP Picture Editor allow remote attackers to cause a denial of service browser crash via a long string in the 1 DisplayName, 2 FinalSavePath, 3 ForceSaveTo, 4 HiddenControls, 5...

Heap overflow

Heap-based buffer overflow in the FileUploader.FUploadCtl.1 ActiveX control in FileUploader.dll 2.0.0.2 in Lycos FileUploader Module allows remote attackers to execute arbitrary code via a long HandwriterFilename property value. NOTE: some of these details are obtained from third party informatio...

CVE-2008-0443

Heap-based buffer overflow in the FileUploader.FUploadCtl.1 ActiveX control in FileUploader.dll 2.0.0.2 in Lycos FileUploader Module allows remote attackers to execute arbitrary code via a long HandwriterFilename property value. NOTE: some of these details are obtained from third party informatio...

CVE-2008-0443

Heap-based buffer overflow in the FileUploader.FUploadCtl.1 ActiveX control in FileUploader.dll 2.0.0.2 in Lycos FileUploader Module allows remote attackers to execute arbitrary code via a long HandwriterFilename property value. NOTE: some of these details are obtained from third party informatio...

CVE-2008-0437

Multiple buffer overflows in the WebHPVCInstall.HPVirtualRooms14 ActiveX control in HPVirtualRooms14.dll 1.0.0.100, as used in the installation process for HP Virtual Rooms, allow remote attackers to execute arbitrary code via a long 1 AuthenticationURL, 2 PortalAPIURL, or 3 cabroot property valu...

CVE-2008-0437

Multiple buffer overflows in the WebHPVCInstall.HPVirtualRooms14 ActiveX control in HPVirtualRooms14.dll 1.0.0.100, as used in the installation process for HP Virtual Rooms, allow remote attackers to execute arbitrary code via a long 1 AuthenticationURL, 2 PortalAPIURL, or 3 cabroot property valu...

Buffer overflow

Buffer overflow in the Digital Data Communications RtspVaPgCtrl ActiveX control RtspVapgDecoder.dll 1.1.0.29 allows remote attackers to execute arbitrary code via a long MP4Prefix property...

CVE-2008-0380

Buffer overflow in the Digital Data Communications RtspVaPgCtrl ActiveX control RtspVapgDecoder.dll 1.1.0.29 allows remote attackers to execute arbitrary code via a long MP4Prefix property...

CVE-2008-0380

Buffer overflow in the Digital Data Communications RtspVaPgCtrl ActiveX control RtspVapgDecoder.dll 1.1.0.29 allows remote attackers to execute arbitrary code via a long MP4Prefix property...

Debian Security Advisory DSA 1425-1 (xulrunner)

The remote host is missing an update to xulrunner announced via advisory DSA 1425-1. OpenVAS Vulnerability Test $Id: deb14251.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1425-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Mozilla Firefox, SeaMonkey: Multiple vulnerabilities

Background Mozilla Firefox is a cross-platform web browser from Mozilla. SeaMonkey is a free, cross-platform Internet suite. Description Jesse Ruderman and Petko D. Petkov reported that the jar protocol handler in Mozilla Firefox and Seamonkey does not properly check MIME types CVE-2007-5947...

CVE-2007-6516

Buffer overflow in RavWare Software MAS Flic ActiveX Control masflc.ocx 1.0.0.1 allows remote attackers to execute arbitrary code via a long FileName property...

CVE-2007-6516

Buffer overflow in RavWare Software MAS Flic ActiveX Control masflc.ocx 1.0.0.1 allows remote attackers to execute arbitrary code via a long FileName property...

CVE-2007-6516: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in RavWare Software MAS Flic ActiveX Control masflc.ocx 1.0.0.1 allows remote attackers to execute arbitrary code via a long FileName property...

CVE-2007-5344: Improper Control of Generation of Code

Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via a crafted website using Javascript that creates, modifies, deletes, and accesses document objects using the tags property, which triggers heap corruption, related to uninitialized or deleted objects, ...

CVE-2007-6144

Heap-based buffer overflow in the PPlayer.XPPlayer.1 ActiveX control in pplayer.dll1work in Xunlei Thunder 5.7.4.401 allows remote attackers to execute arbitrary code via a long string in a FlvPlayerUrl property value. NOTE: some of these details are obtained from third party information...

CVE-2007-6144

Heap-based buffer overflow in the PPlayer.XPPlayer.1 ActiveX control in pplayer.dll1work in Xunlei Thunder 5.7.4.401 allows remote attackers to execute arbitrary code via a long string in a FlvPlayerUrl property value. NOTE: some of these details are obtained from third party information...

dxmsft-overflow.txt

There are multiple stack overflows in dxmsft.dll version 6.3.2900.3199Image DirectX Transforms. This DLL exposes DirectX Image Transform objects which are safe for scripting. The issue is with the Color property of certain objects, so I am assuming this property is inherited from a base interface...

Stack overflow

Multiple stack-based buffer overflows in the VSFlexGrid.VSFlexGridL ActiveX control in ComponentOne FlexGrid 7.1 Light allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long string in the 1 Text, 2 EditSelText, 3 EditText, and 4 CellFontName property...