1701 matches found
Advantech WebAccess dvs.ocx GetColor Buffer Overflow Exploit
This Metasploit module exploits a buffer overflow vulnerability in Advantec WebAccess. The vulnerability exists in the dvs.ocx ActiveX control, where a dangerous call to sprintf can be reached with user controlled data through the GetColor function. This Metasploit module has been tested...
CVE-2014-0990
Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the UserName parameter...
CVE-2014-0988
Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the AccessCode parameter...
CVE-2014-0989
Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the AccessCode2 parameter...
CVE-2014-0992
Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the password parameter...
CVE-2014-0985
Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the NodeName parameter...
CVE-2014-0986
Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the GotoCmd parameter...
Stack overflow
Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the password parameter...
Stack overflow
Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the AccessCode parameter...
Stack overflow
Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the AccessCode2 parameter...
Stack overflow
Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the NodeName2 parameter...
Stack overflow
Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the projectname parameter...
Stack overflow
Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the NodeName parameter...
Stack overflow
Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the UserName parameter...
Stack overflow
Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the GotoCmd parameter...
CVE-2014-0992
Advantech WebAccess 7.2 is affected by a stack-based buffer overflow in the ActiveX component when parsing the password parameter, enabling remote code execution if a user visits a crafted HTML page. The vulnerability is described across multiple sources (CoreLabs advisory CORE-2014-0005 and NVD ...
CVE-2014-0986
Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the GotoCmd parameter...
CVE-2014-0987
Summary (CVE-2014-0987) : Advantech WebAccess 7.2 is affected by a stack-based buffer overflow when parsing the NodeName2 parameter, enabling remote code execution in the context of the vulnerable application. The vulnerability is reported as part of the Advantech WebAccess multi-CVE set (CVE-201...
CVE-2014-0985
Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the NodeName parameter...
CVE-2014-0989
Advantech WebAccess 7.2 contains a stack-based buffer overflow in the AccessCode2 parameter, leading to code execution. The CORE-2014-0005 advisory confirms multiple related CVEs (including CVE-2014-0989) and states the vulnerability is a client-side stack overflow; vendor issued a fix in a later...