Directory traversal

Directory traversal vulnerability in the SnapShotToFile method in the GeoVision LiveX aka LiveXv8200 ActiveX control 8.1.2 and 8.2.0 in LIVEX1.OCX allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the argument, possibly involving the PlayX and SnapShotX methods...

CVE-2009-0865

Directory traversal vulnerability in the SnapShotToFile method in the GeoVision LiveX aka LiveXv8200 ActiveX control 8.1.2 and 8.2.0 in LIVEX1.OCX allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the argument, possibly involving the PlayX and SnapShotX methods...

CVE-2009-0865

Directory traversal vulnerability in the SnapShotToFile method in the GeoVision LiveX aka LiveXv8200 ActiveX control 8.1.2 and 8.2.0 in LIVEX1.OCX allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the argument, possibly involving the PlayX and SnapShotX methods...

CVE-2009-0865

CVE-2009-0865 affects the GeoVision LiveX ActiveX control (LIVEX_~1.OCX) versions 8.1.2 and 8.2.0, specifically the SnapShotToFile method. A directory traversal flaw allows a remote attacker to create or overwrite arbitrary files by supplying a .. payload in the argument, potentially via PlayX an...

CVE-2008-6442

Insecure method vulnerability in Sina Inc. DLoader Class ActiveX Control allows remote attackers to overwrite arbitrary files via a URL in the first parameter to the DonwloadAndInstall method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Design/Logic Flaw

Insecure method vulnerability in Sina Inc. DLoader Class ActiveX Control allows remote attackers to overwrite arbitrary files via a URL in the first parameter to the DonwloadAndInstall method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Buffer overflow

Buffer overflow in emmailstore.dll 6.5.0.3 in the QuikSoft EasyMail MailStore ActiveX control allows remote attackers to execute arbitrary code via a long first argument to the CreateStore method...

CVE-2008-6442

CVE-2008-6442 covers an insecure method vulnerability in the Sina Inc. DLoader Class ActiveX Control. The issue allows remote attackers to overwrite arbitrary files using a URL provided as the first parameter to the DonwloadAndInstall method. This is the concrete vulnerability described in the in...

CVE-2008-6442

Insecure method vulnerability in Sina Inc. DLoader Class ActiveX Control allows remote attackers to overwrite arbitrary files via a URL in the first parameter to the DonwloadAndInstall method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2008-6447

CVE-2008-6447 : The QuikSoft EasyMail MailStore ActiveX control (emmailstore.dll, version 6.5.0.3) is vulnerable to a buffer overflow when processing a long first argument to the CreateStore method, allowing remote code execution. This vulnerability is documented across multiple connected sources...

Buffer overflow vulnerability in ActiveX Control for Sony SNC series network cameras

Overview The ActiveX Control for Sony SNC series network cameras contains a heap-based buffer overflow vulnerability. The ActiveX Control for Sony SNC series network cameras is a software to monitor images over the network using a web browser. This ActiveX Control contains a heap-based buffer...

CVE-2008-6447: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in emmailstore.dll 6.5.0.3 in the QuikSoft EasyMail MailStore ActiveX control allows remote attackers to execute arbitrary code via a long first argument to the CreateStore method...

CVE-2008-6442: Undefined Security Weakness

Insecure method vulnerability in Sina Inc. DLoader Class ActiveX Control allows remote attackers to overwrite arbitrary files via a URL in the first parameter to the DonwloadAndInstall method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2009-0813

Insecure method vulnerability in the ImeraIEPlugin ActiveX control ImeraIEPlugin.dll 1.0.2.54 in Imera TeamLinks Client allows remote attackers to force the download and execution of arbitrary URLs via modified DownloadProtocol, DownloadHost, DownloadPort, and DownloadURI parameters...

CVE-2009-0813

Insecure method vulnerability in the ImeraIEPlugin ActiveX control ImeraIEPlugin.dll 1.0.2.54 in Imera TeamLinks Client allows remote attackers to force the download and execution of arbitrary URLs via modified DownloadProtocol, DownloadHost, DownloadPort, and DownloadURI parameters...

CVE-2009-0813

Imera TeamLinks Client's ImeraIEPlugin.dll ActiveX (version 1.0.2.54) is affected by CVE-2009-0813 due to an insecure method vulnerability in how DownloadProtocol, DownloadHost, DownloadPort, and DownloadURI are handled. This allows a remote attacker to force the download and execution of arbitra...

Imera ImeraIEPlugin ActiveX控件任意文件下载漏洞

Imera TeamLinks是桌面客户端软件，允许物理分不断组成员之间进行协作。 TeamLinks客户端的ImeraIEPlugin.dll库所提供的ImeraIEPlugin.Pilot.1 ActiveX控件没有正地的处理DownloadHost属性参数，如果用户受骗访问了恶意站点并向该属性传送了恶意参数的话，就可能导致向用户系统下载并执行任意文件。 Imera ImeraIEPlugin.dll 1.0.2.54 临时解决方法： 为CLSID 75CC8584-86D4-4A50-B976-AA72618322C6设置kill-bit。 厂商补丁： Imera -----...

CVE-2009-0811

Insecure method vulnerability in the SopCast SopCore ActiveX control in sopocx.ocx 3.0.3.501 allows remote attackers to execute arbitrary programs via an executable file name in the argument to the SetExternalPlayer method...

CVE-2009-0811

Insecure method vulnerability in the SopCast SopCore ActiveX control in sopocx.ocx 3.0.3.501 allows remote attackers to execute arbitrary programs via an executable file name in the argument to the SetExternalPlayer method...

CVE-2009-0811

CVE-2009-0811 describes an insecure method vulnerability in the SopCast SopCore ActiveX control (sopocx.ocx 3.0.3.501). The vulnerability allows remote attackers to cause arbitrary code execution by supplying an executable file name to the SetExternalPlayer method. Affected product: SopCast SopCo...