92 matches found
ActFax Server 10.70 Remote Code Execution
ActFax Server version 10.70 contains an unauthenticated remote code execution vulnerability in its LPD service. A remote attacker can submit a crafted print job containing an @F211 fax destination and PostScript content that abuses the Ghostscript pipe operator. When the document is rasterized by...
ActFax ActiveFax Server 代码问题漏洞
ActFax ActiveFax Server is a fax server software developed by the Austrian company ActFax. Version 6.92 Build 0316 of ActFax ActiveFax Server has a code vulnerability. This vulnerability stems from an unquoted service path within the ActiveFaxServiceNT service, which may allow local attackers to...
CVE-2023-53954
ActFax 10.10 contains an unquoted service path vulnerability that allows local attackers to potentially escalate privileges by exploiting the ActiveFaxServiceNT service configuration. Attackers with write permissions to Program Files directories can inject a malicious ActSrvNT.exe executable to...
CVE-2023-53954
ActFax 10.10 contains an unquoted service path vulnerability that allows local attackers to potentially escalate privileges by exploiting the ActiveFaxServiceNT service configuration. Attackers with write permissions to Program Files directories can inject a malicious ActSrvNT.exe executable to...
EUVD-2025-204605
ActFax 10.10 contains an unquoted service path vulnerability that allows local attackers to potentially escalate privileges by exploiting the ActiveFaxServiceNT service configuration. Attackers with write permissions to Program Files directories can inject a malicious ActSrvNT.exe executable to...
CVE-2023-53954 ActFax 10.10 Unquoted Path Services Privilege Escalation Vulnerability
ActFax 10.10 contains an unquoted service path vulnerability that allows local attackers to potentially escalate privileges by exploiting the ActiveFaxServiceNT service configuration. Attackers with write permissions to Program Files directories can inject a malicious ActSrvNT.exe executable to...
CVE-2023-53954 ActFax 10.10 Unquoted Path Services Privilege Escalation Vulnerability
ActFax 10.10 contains an unquoted service path vulnerability that allows local attackers to potentially escalate privileges by exploiting the ActiveFaxServiceNT service configuration. Attackers with write permissions to Program Files directories can inject a malicious ActSrvNT.exe executable to...
CVE-2023-53954
CVE-2023-53954 concerns ActFax 10.10, which has an unquoted service path in the ActiveFaxServiceNT service. According to multiple sources, attackers with write access to Program Files can inject a malicious ActSrvNT.exe and, when the service restarts, achieve elevated system access. The vulnerabi...
PT-2025-52525
Name of the Vulnerable Software and Affected Versions ActFax version 10.10 Description The software contains an unquoted service path vulnerability that may allow local attackers to escalate privileges. Specifically, the issue relates to the configuration of the ActiveFaxServiceNT service...
ActFax 代码问题漏洞
ActFax is a fax server software from Activefax Austria.ActiveFax can turn your computer into a virtual fax machine, realizing the transmission of fax and Email in Windows and UNIX applications at will, suitable for all sizes of networks and stand-alone use. A code issue vulnerability exists in...
CVE-2023-53954: Unquoted Search Path or Element
ActFax 10.10 contains an unquoted service path vulnerability that allows local attackers to potentially escalate privileges by exploiting the ActiveFaxServiceNT service configuration. Attackers with write permissions to Program Files directories can inject a malicious ActSrvNT.exe executable to...
EUVD-2013-7284
Malware in sbrugna...
CVE-2012-10043
A stack-based buffer overflow vulnerability exists in ActFax Server version 4.32, specifically in the "Import Users from File" functionality of the client interface. The application fails to properly validate the length of tab-delimited fields in .exp files, leading to unsafe usage of strcpy duri...
CVE-2012-10043
A stack-based buffer overflow vulnerability exists in ActFax Server version 4.32, specifically in the "Import Users from File" functionality of the client interface. The application fails to properly validate the length of tab-delimited fields in .exp files, leading to unsafe usage of strcpy duri...
CVE-2012-10043 ActFax 4.32 Client Importer Buffer Overflow
A stack-based buffer overflow vulnerability exists in ActFax Server version 4.32, specifically in the "Import Users from File" functionality of the client interface. The application fails to properly validate the length of tab-delimited fields in .exp files, leading to unsafe usage of strcpy duri...
CVE-2012-10043
ActFax Server 4.32 is affected by a stack-based buffer overflow in the Import Users from File function. The root cause is improper validation of the length of tab-delimited fields in .exp files, causing unsafe usage of strcpy() during CSV parsing. An attacker can compromise the system by crafting...
CVE-2012-10043 ActFax 4.32 Client Importer Buffer Overflow
A stack-based buffer overflow vulnerability exists in ActFax Server version 4.32, specifically in the "Import Users from File" functionality of the client interface. The application fails to properly validate the length of tab-delimited fields in .exp files, leading to unsafe usage of strcpy duri...
PT-2025-32396 · Unknown · Actfax Server
Name of the Vulnerable Software and Affected Versions: ActFax Server version 4.32 Description: A stack-based buffer overflow vulnerability exists in the "Import Users from File" functionality of the client interface. The application does not properly validate the length of tab-delimited fields in...
ActFax Server 安全漏洞
ActFax Server is a fax server software from ActFax Austria. A security vulnerability exists in ActFax Server version 4.32, which originates from an unvalidated .exp file field length in the Import User function, and could lead to a stack buffer overflow and arbitrary code execution...
CVE-2012-10043: Stack-based Buffer Overflow
A stack-based buffer overflow vulnerability exists in ActFax Server version 4.32, specifically in the "Import Users from File" functionality of the client interface. The application fails to properly validate the length of tab-delimited fields in .exp files, leading to unsafe usage of strcpy duri...