Microsoft Windows - MSCOMCTL ActiveX Buffer Overflow (MS12-027) (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'MS12-027 MSCOMCTL ActiveX Buffer...

Microsoft Windows Common Controls MSCOMCTL.OCX Vulnerability

Added: 04/12/2012 CVE: CVE-2012-0158 BID: 52911 OSVDB: 81125 Background Microsoft Windows bundles various common ActiveX controls in the Common Controls library MSCOMCTL.OCX. Several Windows applications use these controls. Problem Various ActiveX controls in MSCOMCTL.OCX in the Common Controls i...

Microsoft Windows Common Controls Remote Code Execution Vulnerability (2664258)

This host is missing a critical security update according to Microsoft Bulletin MS12-027. OpenVAS Vulnerability Test $Id: secpodms12-027.nasl 5366 2017-02-20 13:55:38Z cfi $ Microsoft Windows Common Controls Remote Code Execution Vulnerability 2664258 Authors: Sooraj KS Copyright: Copyright c 201...

Immunity Canvas: MS12_027

Name| ms12027 ---|--- CVE| CVE-2012-0158 Exploit Pack| CANVAS Description| MS12-027 MSCOMCTL.OCX ActiveX Buffer Overflow Notes| CVE Name: CVE-2012-0158 VENDOR: Microsoft Notes: You shoud manually start a Universal listener for this exploit. The listener IP and PORT should be declared in the modul...

CVE-2012-0158

CVE-2012-0158 is a Microsoft/MSCOMCTL.OCX (MS Office) vulnerability that enables remote code execution via a crafted file or document. The initial entry lists vulnerable controls in MSCOMCTL.OCX and notes exploitation in the wild around April 2012 (aka “MSCOMCTL.OCX RCE Vulnerability”). Connected...

CVE-2012-0158

The 1 ListView, 2 ListView2, 3 TreeView, and 4 TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2003 Web Components SP3; SQL Server 2000 SP4, 2005 SP4, and 2008 SP2, SP3, and R2; BizTalk Server 2002 SP1...

MSCOMCTL.OCX Killbit: bdd1f04b-858b-11d1-b16a-00c0f0283628 (MS12-027; CVE-2012-0158)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in an ActiveX control. To trigger this issue, an attacker can create a malicious web page that initiates the vulnerable ActiveX control. Successful exploitation of this...

Microsoft MSCOMCTL.OCX ActiveX Control Remote Code Execution (MS12-027; CVE-2012-0158)

A remote code execution vulnerability has been reported in the Microsoft Windows common controls...

MSCOMCTL.OCX Killbit: 996BF5E0-8044-4650-ADEB-0B013914E99C (MS12-027; CVE-2012-0158)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer...

WAGO Multiple Remote Vulnerabilities

WAGO is prone to multiple security vulnerabilities, including: 1. A security-bypass vulnerability 2. Multiple information-disclosure vulnerabilities 3. A cross-site request forgery vulnerability Successful attacks can allow an attacker to obtain sensitive information, bypass certain security...

CVE-2011-0158

Summary of CVE-2011-0158 (Apple iOS/MobileSafari) : The issue affects MobileSafari on iOS prior to 4.3 where launching applications via URL handlers is not implemented correctly. This allows remote attackers to trigger a denial of service through crafted JavaScript, resulting in persistent applic...

CVE-2010-0158

SQL injection vulnerability in the JoomlaBamboo JB Simpla Admin template for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an article action to the comcontent component, reachable through index.php. NOTE: the vendor disputes this report, saying:...

CVE-2010-0158

CVE-2010-0158 describes a SQL injection risk in the JoomlaBamboo (JB) Simpla Admin template for Joomla! via the id parameter in an article action to the com_content component (accessible through index.php). The issue is asserted by multiple sources to allow remote SQL command execution, with a ve...

CVE-2009-0158

CVE-2009-0158 is a stack-based buffer overflow in the telnet command of Apple Mac OS X, affecting Mac OS X 10.4.11 and 10.5 up to before 10.5.7. A long hostname in a DNS address record can cause an application crash or enable remote code execution. Remediation, where documented, is to apply Mac O...

Gentoo Security Advisory GLSA 200503-06 (bidwatcher)

The remote host is missing updates announced in advisory GLSA 200503-06. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

FreeBSD Ports: bidwatcher

The remote host is missing an update to the system as announced in the referenced advisory. VID 74c86a29-81ef-11d9-a9e7-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: lbreakout2

The remote host is missing an update to the system as announced in the referenced advisory. VID ad4f6ca4-6720-11d8-9fb5-000a95bc6fae OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: lbreakout2

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: bidwatcher

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2008-0158

CVE-2008-0158 is a directory traversal vulnerability in the Shop-Script 2.0 code path, specifically in the file index.php . The underlying issue allows an attacker to read arbitrary files by supplying a blind path traversal payload through the aux_page parameter (e.g., ..). Affected software appe...