Dr_Ide

The issue is caused by multiple buffer overflows in the ActUWzd.dll library, which allows remote attackers to execute arbitrary code via a long string. This can be demonstrated by a long WzTitle property value to a certain ActiveX control. The exploitation of this issue may enable a remote attacker to execute arbitrary code using a long string.

A buffer overflow issue exists in the "create torrent dialog" functionality, allowing user-assisted remote attackers to cause a denial of service, potentially leading to application crashes, and possibly execute arbitrary code via a text file containing a large string.

The issue is a stack-based buffer overflow in the TIFMergeMultiFiles function, located in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageViewer2.ocx). This allows remote attackers to execute arbitrary code via a long `strDelimit` parameter.

The issue is related to a stack-based buffer overflow in an ActiveX control. This occurs when a long argument is passed to the `GetDriverSettings2` method, which can also be reached through the `GetDriverSettings` method. This allows remote attackers to execute arbitrary code.

The issue is related to a heap-based buffer overflow in the CrystalReports12.CrystalPrintControl.1 ActiveX control, which is located in PrintControl.dll version 12.3.2.753. This allows remote attackers to execute arbitrary code via a long `ServerResourceVersion` property value.

The issue allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks. This can be achieved via a Trojan horse `plugin dll.dll`, `userenv.dll`, `shfolder.dll`, `dnsapi.dll`, `dwmapi.dll`, `iphlpapi.dll`, `dhcpcsvc.dll`, `dhcpcsvc6.dll`, or `rpcrtremote.dll` that is located in the same folder as a .torrent or .btsearch file.

The issue allows remote attackers to cause a denial of service, leading to a crash, via certain encoded directory traversal sequences that trigger memory corruption. An example of such a sequence is the "%c0.%c0." sequence.

The issue is related to a buffer overflow that can be triggered by a long URL in a .m3u playlist file, potentially allowing remote attackers to cause a denial of service or possibly execute arbitrary code.

The issue is related to multiple buffer overflows that can be triggered by a crafted ZIP file. This can cause a denial of service, leading to an application crash when the victim uses specific console menu items, such as the Update or Plug-In item.

The issue allows remote authenticated users to cause a denial of service, resulting in a daemon crash, by assigning a non-numeric web port in the management interface. This can potentially be exploited by non-authenticated attackers.

The issue concerns a lack of authentication in the administrator package, allowing remote attackers to modify application settings. This can be achieved by connecting to the application on port 32123. For example, an attacker can set the `action` option to `wizardStep1` to exploit this issue.

The issue allows remote attackers to obtain the source code for a web page via a specially crafted HTTP request. This is achieved by adding ::$DATA after the HTML file name in the request.

The issue allows remote attackers to obtain the source code for a web page via a specially crafted HTTP request. This is achieved by adding ::$DATA after the HTML file name in the request.