CVE-2007-2848

Stack-based buffer overflow in the SetPath function in the shComboBox ActiveX control shcmb80.ocx in Sky Software Shell MegaPack ActiveX 8.0 allows remote attackers to execute arbitrary code via a long argument. NOTE: the provenance of this information is unknown; the details are obtained solely...

Stack overflow

Stack-based buffer overflow in the SetPath function in the shComboBox ActiveX control shcmb80.ocx in Sky Software Shell MegaPack ActiveX 8.0 allows remote attackers to execute arbitrary code via a long argument. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2007-2848

Stack-based buffer overflow in the SetPath function in the shComboBox ActiveX control shcmb80.ocx in Sky Software Shell MegaPack ActiveX 8.0 allows remote attackers to execute arbitrary code via a long argument. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2007-1895

PHP remote file inclusion vulnerability in chat.php in Sky GUNNING MySpeach 3.0.7 and earlier, when used with PHP 5, allows remote attackers to execute arbitrary PHP code via an ftp URL in a mymsroot cookie, a different vector than CVE-2007-0491 and CVE-2006-4630...

Remote file inclusion

PHP remote file inclusion vulnerability in chat.php in Sky GUNNING MySpeach 3.0.7 and earlier, when used with PHP 5, allows remote attackers to execute arbitrary PHP code via an ftp URL in a mymsroot cookie, a different vector than CVE-2007-0491 and CVE-2006-4630...

CVE-2007-1896

Directory traversal vulnerability in chat.php in Sky GUNNING MySpeach 3.0.7 and earlier allows remote attackers to include arbitrary local files via a .. dot dot and trailing %00 NULL in a mymsroot cookie...

CVE-2007-1896

CVE-2007-1896 is a directory-traversal flaw in Sky GUNNING MySpeach 3.0.7 and earlier, affecting the file chat.php . The root cause is improper handling of a cookie parameter my_ms[root], allowing a attacker to trigger local file inclusion by using a double dot (“..”) path traversal with a traili...

CVE-2007-1895

CVE-2007-1895 describes a PHP remote file inclusion in Sky GUNNING MySpeach (3.0.7 and earlier) when run with PHP 5. An FTP URL placed in the my_ms[root] cookie enables remote attackers to execute arbitrary PHP code. Connected documents corroborate variants of this vulnerability across MySpeach 3...

CVE-2007-0491

PHP remote file inclusion vulnerability in up.php in Sky GUNNING MySpeach 3.0.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mymsroot parameter, a different vector than CVE-2006-4630. NOTE: Some of these details are obtained from third party information...

Remote file inclusion

PHP remote file inclusion vulnerability in up.php in Sky GUNNING MySpeach 3.0.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mymsroot parameter, a different vector than CVE-2006-4630. NOTE: Some of these details are obtained from third party information...

CVE-2007-0491

CVE-2007-0491 is a PHP remote file inclusion vulnerability in Sky GUNNING MySpeach 3.0.6 and earlier, exploitable via a URL in the my_ms[root] parameter of up.php. The issue is a separate vector from CVE-2006-4630 and affects MySpeach components prior to 3.0.6. The connected records confirm relat...

CVE-2007-0491

PHP remote file inclusion vulnerability in up.php in Sky GUNNING MySpeach 3.0.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mymsroot parameter, a different vector than CVE-2006-4630. NOTE: Some of these details are obtained from third party information...

CVE-2006-3890

Stack-based buffer overflow in the Sky Software FileView ActiveX control, as used in WinZip 10 before build 7245 and in certain other applications, allows remote attackers to execute arbitrary code via a long FilePattern attribute in a WZFILEVIEW object, a different vulnerability than CVE-2006-51...

CVE-2006-3890

Technical details for CVE-2006-3890 (affected component, impact, exploit information) are not provided in the connected documents. Monitor for updates for any concrete disclosures or fixes.

Sky Software FileView ActiveX control buffer overflow vulnerability

Overview The Sky Software FileView ActiveX control contains a buffer overflow vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The Sky Software FileView object is an ActiveX control that is provided with several...

WinZip FileView ActiveX Control Vulnerabilities

The remote host contains a version of the 'FileView' ActiveX control from Sky Software that is included in third-party products such as WinZip. The version of this ActiveX control on the remote host reportedly exposes several methods that either can be used to execute arbitrary code or are affect...

CVE-2006-5198

The WZFILEVIEW.FileViewCtrl.61 ActiveX control aka Sky Software "FileView" ActiveX control for WinZip 10.0 before build 7245 allows remote attackers to execute arbitrary code via unspecified "unsafe methods."...

WinZip FileView ActiveX Control Unsafe Method Exposure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of WinZip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists within the ActiveX control...

Use macfee to block the”sky speed“installation-vulnerability warning-the black bar safety net

At noon today to China Telecom uncle's telephone,said the afternoon to visit my family,to carry out the“starry pole speed into million home”activities...... Although I politely declined,repeatedly Dodge...... I said I'm not a kid,this software my own Internet access Next on the line,don't have to...

CVE-2006-4630

PHP remote file inclusion vulnerability in jscript.php in Sky GUNNING MySpeach 3.0.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mymsroot parameter...