microsoft system information activex control vulnerabilities and exploits

(subscribe to this query)

5

CVSSv2

System Information ActiveX control (msinfo.dll), when accessed via Microsoft Internet Explorer, allows remote malicious users to cause a denial of service (crash) via a SaveFile function with a long (1) computer and possibly (2) filename and (3) category argument.

Microsoft System Information Activex Control

10

CVSSv2

Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote malicious users to execute arbitrary commands via a long LogFileName parameter in HTML source code, aka the "ActiveX Parameter Validation" vulnerability.

Microsoft Windows 2000

5

CVSSv2

The NetBT Name Service (NBNS) for NetBIOS in Windows NT 4.0, 2000, XP, and Server 2003 may include random memory in a response to a NBNS query, which could allow remote malicious users to obtain sensitive information.

Microsoft Windows 2003 Server Enterprise 64-bit Microsoft Windows 2000 Microsoft Windows 2003 Server Web Microsoft Windows Nt 4.0 Microsoft Windows Xp Microsoft Windows 2003 Server R2 Microsoft Windows 2003 Server Enterprise Microsoft Windows 2003 Server Standard

9.3

CVSSv2

The Microsoft Windows Image Acquisition Logger ActiveX control allows remote malicious users to force the download of arbitrary files onto a client system via a URL in the first argument to the Open method, in conjunction with a full destination pathname in the first argument to ...

Microsoft Windows Image Acquisition Logger

2 EDB exploits

7.5

CVSSv2

Microsoft Taskpads allows remote web sites to execute commands on the visiting user's machine via certain methods that are marked as Safe for Scripting.

Microsoft Backoffice Resource Kit 2.0

7.5

CVSSv2

The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote malicious users to conduct unauthorized activities via the "Show Me" function in Office Help, aka the "Office 2000 UA Control" vulnerability.

Microsoft Photodraw 2000 1.0 Microsoft Powerpoint 2000 Microsoft Project 2000 Microsoft Access 2000 Microsoft Word 2000 Microsoft Works 2000 Microsoft Office 2000 Microsoft Outlook 2000 Microsoft Excel 2000 Microsoft Frontpage 2000

6.8

CVSSv2

Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Microsoft Visual Studio 2005 allows remote malicious users to bypass Internet zone restrictions and execute arbitrary code by instantiating danger...

Microsoft Visual Studio .net 2005

1 EDB exploit1 Article

7.8

CVSSv2

The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1 does not properly enforce string termination, which allows remote malicious users to obtain sensitive informatio...

Microsoft Visual Studio .net 2003 Microsoft Visual C\\+\\+ 2008 Microsoft Visual Studio 2008 Microsoft Visual Studio 2005 Microsoft Visual C\\+\\+ 2005

5.1

CVSSv2

Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and distributed in Microsoft Data Access Components (MDAC) 2.7 and 2.8, allows remote malicious users to execute arbitrary code via unknown attack vectors.

Microsoft Data Access Components 2.5 Microsoft Data Access Components 2.8 Microsoft Data Access Components 2.7

3 EDB exploits2 Articles

7.6

CVSSv2

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

Microsoft Internet Explorer 11 Microsoft Internet Explorer 9

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook