Jj Reyes

The issue is related to multiple stack-based buffer overflows that allow remote attackers to execute arbitrary code. This can be achieved through long string parameters to various CGI programs, including OpenView5.exe, getcvdata.exe, ovlaunch.exe, and Toolbar.exe. Specifically, the `OpenView5.exe` program is vulnerable to long string parameters, one of which is related to `ov.dll`.

The issue is related to multiple stack-based buffer overflows in the PVATLCalendar.PVCalendar.1 ActiveX control. This can be exploited by remote attackers to execute arbitrary code via long property values, such as ` DOWText0`, ` DOWText1`, ` DOWText2`, ` DOWText3`, ` DOWText4`, ` DOWText5`, ` DOWText6`, ` MonthText0`, ` MonthText1`, ` MonthText2`, ` MonthText3`, ` MonthText4`, ` MonthText5`, ` MonthText6`, ` MonthText7`, ` MonthText8`, ` MonthText9`, ` MonthText10`, or ` MonthText11`, when executing the Save method. It is noted that while the vendor states authenticated user involvement is required, authentication is not needed to attack a client machine that loads this control.

The issue is related to multiple input validation errors, allowing user-assisted remote attackers to execute arbitrary code. This can be achieved via a long section string in either a PSP image to the ID PSP.apl plug-in or an LHA archive to the AM LHA.apl plug-in, resulting in a heap-based buffer overflow.

A remote code execution issue exists in the way Microsoft Agent handles certain specially crafted URLs, resulting in memory corruption. This allows remote attackers to execute arbitrary code.

The issue is a stack-based buffer overflow in the IMAP service, allowing remote attackers to execute arbitrary code via a pre-authentication command followed by a crafted parameter and a long string.