CVE-2008-3957: Improper Input Validation

The Microsoft Windows Image Acquisition Logger ActiveX control allows remote attackers to force the download of arbitrary files onto a client system via a URL in the first argument to the Open method, in conjunction with a full destination pathname in the first argument to the Save method. NOTE:...

Microsoft Windows - Image Acquisition Logger ActiveX Control Arbitrary File Overwrite (2)

Microsoft Windows - Image Acquisition Logger ActiveX Control Arbitrary File Overwrite 2 source: https://www.securityfocus.com/bid/31069/info Microsoft Windows Image Acquisition Logger ActiveX control is prone to a vulnerability that lets attackers overwrite files with arbitrary, attacker-controll...

CVE-2008-2245: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the InternalOpenColorProfile function in mscms.dll in Microsoft Windows Image Color Management System MSCMS in the Image Color Management ICM component on Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code...

Microsoft Security Bulletin MS07-007 Vulnerability in Windows Image Acquisition Service Could Allow Elevation of Privilege (927802)

Microsoft Security Bulletin MS07-007 Vulnerability in Windows Image Acquisition Service Could Allow Elevation of Privilege 927802 Published: February 13, 2007 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows. Impact of Vulnerability: Elevation of Privilege...