Honeywell HscRemoteDeploy.dll ActiveX Control vulnerability

Added: 04/19/2013 CVE: CVE-2013-0108 BID: 58134 OSVDB: 90583 Background Honeywell offers software solutions which integrate different systems and devices such as HVAC, security, safety, lighting, and energy into a common platform. Problem A vulnerability in multiple Honeywell products allows...

Honeywell HSC Remote Deployer - ActiveX Remote Code Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Honeywell HSC...

CVE-2013-0108

creationtimestamp| type| source ---|---|--- 2013-03-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24745 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/honeywellhscremotedeployexec.rb 2025-02-06...

Honeywell HSC Remote Deployer ActiveX Remote Code Execution

This Metasploit modules exploits a vulnerability found in the Honeywell HSC Remote Deployer ActiveX. This control can be abused by using the LaunchInstaller function to execute an arbitrary HTA from a remote location. This Metasploit module has been tested successfully with the HSC Remote Deploye...

CVE-2013-0108

An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator EBI R310, R400.2, R410.1, and R410.2; SymmetrE R310, R410.1, and R410.2; ComfortPoint Open Manager aka CPO-M Station R100; and HMIWeb Browser client packages allows remote attackers to execute arbitrary code vi...

CVE-2013-0108

CVE-2013-0108 affects Honeywell EBI, SymmetrE, CPO-M, and related HMIWeb Browser components, where an ActiveX control in HscRemoteDeploy.dll can be abused to execute arbitrary code via a crafted HTML document. Affected versions include EBI R310, R400.2, R410.1, R410.2; SymmetrE R310, R410.1, R410...

Honeywell HSC Remote Deployer ActiveX Remote Code Execution

This module exploits a vulnerability found in the Honeywell HSC Remote Deployer ActiveX. This control can be abused by using the LaunchInstaller function to execute an arbitrary HTA from a remote location. This module has been tested successfully with the HSC Remote Deployer ActiveX installed wit...

CVE-2012-0108

Technical details are not publicly available in the provided documents. Please monitor for updates from NVD, SUSE, and ENISA sources for concrete affected components, root cause, and remediation.

CVE-2010-0108

The CVE-2010-0108 issue is a buffer overflow in the Symantec Client Proxy ActiveX (CLIproxy.dll). Affected products include Symantec AntiVirus 10.0.x, 10.1.x before MR9, and 10.2.x before MR4, plus Symantec Client Security 3.0.x and 3.1.x before MR9. The underlying cause is insufficient boundary ...

Symantec Client Proxy Buffer Overflow in Older Product Versions

SUMMARY The Symantec Client Proxy integrated into older versions of Symantec AntiVirus and Symantec Client Security is vulnerable to a buffer overflow. AFFECTED PRODUCTS Product | Version | Solutions ---|---|--- Symantec AntiVirus | 10.0.x | Upgrade to SAV 10.1 MR9 10.1.x | Upgrade to to MR9 10.2...

Input validation errors in SYMLTCOM.dll can lead to a buffer overflow.

SUMMARY The Symantec Client Proxy integrated into older versions of Symantec AntiVirus and Symantec Client Security is vulnerable to a buffer overflow. AFFECTED PRODUCTS Product | Version | Solutions ---|---|--- Symantec AntiVirus | 10.0.x | Upgrade to SAV 10.1 MR9 10.1.x | Upgrade to to MR9 10.2...

CVE-2010-0108

creationtimestamp| type| source ---|---|--- 2010-02-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33642...

CVE-2009-0108

PHPAuctions (aka PHPAuctionSystem) has a remote authentication bypass vulnerability where an attacker can gain administrative access by tampering with cookies: PHPAUCTION_RM_ID, PHPAUCTION_RM_NAME, PHPAUCTION_RM_USERNAME, and PHPAUCTION_RM_EMAIL. The provided documents state the issue but do not ...

Gentoo Security Advisory GLSA 200404-04 (sysstat)

The remote host is missing updates announced in advisory GLSA 200404-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

MS08-011: Vulnerabilities in Microsoft Works File Converter Could Allow Remote Code Execution (947081)

The remote host is running a version of Microsoft Office Works Converter that may allow arbitrary code to be run. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have him open it. Then a bug in the wps header handler would result in code execution. C...

Microsoft Works File Converter field length buffer overflow

Added: 02/19/2008 CVE: CVE-2008-0108 BID: 27659 OSVDB: 41459 Background The Microsoft Works File Converter allows Microsoft Office to open Microsoft Works files. Problem A buffer overflow vulnerability in the Microsoft Works File Converter allows arbitrary command execution when a user opens a .w...

Microsoft Works File Converter field length buffer overflow

Added: 02/19/2008 CVE: CVE-2008-0108 BID: 27659 OSVDB: 41459 Background The Microsoft Works File Converter allows Microsoft Office to open Microsoft Works files. Problem A buffer overflow vulnerability in the Microsoft Works File Converter allows arbitrary command execution when a user opens a .w...

Microsoft Works File Converter field length buffer overflow

Added: 02/19/2008 CVE: CVE-2008-0108 BID: 27659 OSVDB: 41459 Background The Microsoft Works File Converter allows Microsoft Office to open Microsoft Works files. Problem A buffer overflow vulnerability in the Microsoft Works File Converter allows arbitrary command execution when a user opens a .w...

iDefense Security Advisory 02.12.08: Microsoft Office Works Converter Stack-based Buffer Overflow Vulnerability

iDefense Security Advisory 02.12.08 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 12, 2008 I. BACKGROUND Microsoft Word is a word processing application which is heavily used in corporate environments. Word comes with Office Converters that allow it to import files from various forma...

CVE-2008-0108

CVE-2008-0108 is a remote code execution vulnerability in Microsoft Works File Converter (wkcvqd01.dll) used to convert .wps files to Rich Text. The root cause is improper validation of field lengths in the Works File Converter, leading to a stack-based buffer overflow when handling crafted field...