Html Exploits

2,055 exploits tracked across all sources.

Sort: Activity Stars
CVE-2007-3167 EXPLOITDB html VERIFIED
Vivotek Mjpegcontrol - Buffer Overflow
Stack-based buffer overflow in the Vivotek Motion Jpeg ActiveX control (aka MjpegControl) in MjpegDecoder.dll 2.0.0.13 allows remote attackers to execute arbitrary code via a long PtzUrl property value.
by rgod
CVE-2007-3076 EXPLOITDB html VERIFIED
Zenturi ProgramChecker - RCE
A certain ActiveX control in sasatl.dll in Zenturi ProgramChecker allows remote attackers to download arbitrary files to the client system via the DownloadFile function.
by shinnai
CVE-2007-3168 EXPLOITDB html VERIFIED
EDraw Office Viewer <5.0 - RCE
A certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and other versions before 5.0, allows remote attackers to delete arbitrary files via the DeleteLocalFile method.
by shinnai
CVE-2007-2981 EXPLOITDB html VERIFIED
Lead Technologies Leadtools Raster Oc... - Memory Corruption
Buffer overflow in a certain ActiveX control in LEAD Technologies LEADTOOLS Raster OCR Document Object Library (ltrdc14e.dll) 14.5.0.44 allows remote attackers to execute arbitrary code via a long DictionaryFileName property.
by shinnai
CVE-2007-2980 EXPLOITDB html VERIFIED
Lead Technologies Leadtools Raster Image SDK - Memory Corruption
Heap-based buffer overflow in a certain ActiveX control in LEADTOOLS LEAD Raster ISIS Object (LTRIS14e.DLL) 14.5.0.44 allows remote attackers to cause a denial of service (Internet Explorer crash) or execute arbitrary code via a long DriverName property, a different ActiveX control than CVE-2007-2827.
by shinnai
CVE-2007-3169 EXPLOITDB html VERIFIED
Edraw Office Viewer Component < 5.0 - Memory Corruption
Buffer overflow in a certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and other versions before 5.0, allows remote attackers to cause a denial of service (Internet Explorer 7 crash) or execute arbitrary code via a long first argument to the HttpDownloadFile method.
by shinnai
CVE-2007-2983 EXPLOITDB html VERIFIED
Btglobalservices BT Consumer Webhelper < 2.0.0.7 - Memory Corruption
Multiple buffer overflows in the British Telecommunications Consumer webhelper ActiveX control before 2.0.0.8 in btwebcontrol.dll allow remote attackers to execute arbitrary code via unspecified vectors.
by Will Dormann
CVE-2007-2938 EXPLOITDB html VERIFIED
Ademco ATNBaseLoader100 <5.4.0.6 - Buffer Overflow
Buffer overflow in the BaseRunner ActiveX control in the Ademco ATNBaseLoader100 Module (ATNBaseLoader100.dll) 5.4.0.6, when Internet Explorer 6 is used, allows remote attackers to execute arbitrary code via a long argument to the (1) Send485CMD method, and possibly the (2) SetLoginID, (3) AddSite, (4) SetScreen, and (5) SetVideoServer methods.
by rgod
CVE-2007-2856 EXPLOITDB html VERIFIED
Dart Communications PowerTCP ZIP Compression ActiveX - Buffer Overflow
Buffer overflow in the Dart Communications PowerTCP ZIP Compression ActiveX control in DartZip.dll 1.8.5.3, when Internet Explorer 6 is used, allows user-assisted remote attackers to execute arbitrary code via a long first argument to the QuickZip function, a related issue to CVE-2007-2855.
by rgod
CVE-2007-2946 EXPLOITDB html VERIFIED
LeadTools Raster Dialog File_D <14.5.0.44 - Buffer Overflow
Buffer overflow in a certain ActiveX control in LeadTools Raster Dialog File_D Object (LTRDFD14e.DLL) 14.5.0.44 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) or execute arbitrary code via a long DestinationPath property value.
by shinnai
CVE-2007-2856 EXPLOITDB html VERIFIED
Dart Communications PowerTCP ZIP Compression ActiveX - Buffer Overflow
Buffer overflow in the Dart Communications PowerTCP ZIP Compression ActiveX control in DartZip.dll 1.8.5.3, when Internet Explorer 6 is used, allows user-assisted remote attackers to execute arbitrary code via a long first argument to the QuickZip function, a related issue to CVE-2007-2855.
by rgod
CVE-2007-2895 EXPLOITDB html VERIFIED
LeadTools Raster Dialog File Object <14.5.0.44 - Buffer Overflow
Buffer overflow in a certain ActiveX control in LTRDF14e.DLL 14.5.0.44 in LeadTools Raster Dialog File Object allows remote attackers to execute arbitrary code via a long Directory property value.
by shinnai
CVE-2007-2903 EXPLOITDB html VERIFIED
Microsoft Office ActiveX <1.0.1.9 - Buffer Overflow
Buffer overflow in the HelpPopup method in the Microsoft Office 2000 Controllo UA di Microsoft Office ActiveX control (OUACTRL.OCX) 1.0.1.9 allows remote attackers to cause a denial of service (probably winhlp32.exe crash) via a long first argument. NOTE: it is not clear whether this issue crosses privilege boundaries.
by shinnai
CVE-2007-2820 EXPLOITDB html VERIFIED
KSign KSignSWAT ActiveX Control 2.0.3.3 - Buffer Overflow
Multiple stack-based buffer overflows in the KSign KSignSWAT ActiveX Control (AxKSignSWAT.dll) 2.0.3.3 allow remote attackers to execute arbitrary code via long arguments to the (1) SWAT_Init, (2) SWAT_InitEx, (3) SWAT_InitEx2, (4) SWAT_InitEx3, and (5) SWAT_Login functions.
by KIM Kee-hong
EIP-2026-118397 EXPLOITDB html VERIFIED
Dart ZipLite Compression 1.8.5.3 - 'DartZipLite.dll' ActiveX Control Buffer Overflow
by shinnai
CVE-2007-2827 EXPLOITDB html VERIFIED
LEADTOOLS ISIS ActiveX Control <14.5.0.44 - Buffer Overflow
Heap-based buffer overflow in LEAD Technologies LEADTOOLS ISIS ActiveX Control (ltisi14E.ocx) 14.5.0.44 and earlier allows remote attackers to execute arbitrary code via a long DriverName property.
by shinnai
EIP-2026-105953 EXPLOITDB html VERIFIED
ClonusWiki 0.5 - 'index.php' HTML Injection
by John Martinelli
CVE-2007-2853 EXPLOITDB html VERIFIED
Virtual CD 9.0.0.2 - Command Injection
The VCDAPILibApi ActiveX control in vc9api.DLL 9.0.0.57 in Virtual CD 9.0.0.2 allows remote attackers to execute arbitrary commands via a command line in the first argument to the VCDLaunchAndWait function.
by rgod
CVE-2007-2851 EXPLOITDB html VERIFIED
LeadTools Raster Variant Object Library <14.5.0.44 - Code Injection
A certain ActiveX control in LeadTools Raster Variant Object Library (LTRVR14e.dll) 14.5.0.44 allows remote attackers to overwrite arbitrary files via the WriteDataToFile method.
by shinnai
CVE-2007-2806 EXPLOITDB html VERIFIED
GaliX 2.0 - XSS
Multiple cross-site scripting (XSS) vulnerabilities in index.php in GaliX 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) galix_cat_detail, (2) galix_gal_detail, and (3) galix_cat_detail_sort parameters.
by John Martinelli
CVE-2007-2787 EXPLOITDB html VERIFIED
LeadTools Raster Thumbnail Object Library <14.5.0.44 - Buffer Overflow
Stack-based buffer overflow in the BrowseDir function in the (1) lttmb14E.ocx or (2) LTRTM14e.DLL ActiveX control in LeadTools Raster Thumbnail Object Library 14.5.0.44 allows remote attackers to execute arbitrary code via a long argument.
by shinnai
CVE-2007-2787 EXPLOITDB html VERIFIED
LeadTools Raster Thumbnail Object Library <14.5.0.44 - Buffer Overflow
Stack-based buffer overflow in the BrowseDir function in the (1) lttmb14E.ocx or (2) LTRTM14e.DLL ActiveX control in LeadTools Raster Thumbnail Object Library 14.5.0.44 allows remote attackers to execute arbitrary code via a long argument.
by shinnai
CVE-2007-2771 EXPLOITDB html VERIFIED
LEAD Technologies LeadTools <14.5.0.35 - Buffer Overflow
Stack-based buffer overflow in the LEAD Technologies LeadTools JPEG 2000 LEADJ2K.LEADJ2K.140 ActiveX control (LTJ2K14.ocx) 14.5.0.35 allows remote attackers to execute arbitrary code via a long BitmapDataPath property.
by shinnai
CVE-2007-2763 EXPLOITDB html VERIFIED
Sienzo DMM 2.6.0.4 - Buffer Overflow
Buffer overflow in the UnlockSupport function in the LockModules subsystem in a certain ActiveX control in ltmm15.dll in Sienzo Digital Music Mentor (DMM) 2.6.0.4 allows remote attackers to execute arbitrary code via a long string in the second argument, a different issue than CVE-2007-2564.
by shinnai
CVE-2007-2757 EXPLOITDB html VERIFIED
Redoable 1.2 - XSS
Multiple cross-site scripting (XSS) vulnerabilities in Redoable 1.2 allow remote attackers to inject arbitrary web script or HTML via the s parameter to (1) wp-content/themes/redoable/searchloop.php or (2) wp-content/themes/redoable/header.php.
by John Martinelli