CVE-2008-4729

Stack-based buffer overflow in Hummingbird.XWebHostCtrl.1 ActiveX control hclxweb.dll in Hummingbird Xweb ActiveX Control 13.0 and earlier allows remote attackers to execute arbitrary code via a long PlainTextPassword property. NOTE: code execution might not be possible in 13.0...

CVE-2008-4728

Affected software: Hummingbird Deployment Wizard 2008 (version 10.0.0.44) with DeployRun.DeploymentSetup.1 ActiveX control. Vulnerabilities allow remote arbitrary-program execution via DeployRun.dll methods Run and PerformUpdateAsync, and arbitrary registry modification via SetRegistryValueAsStri...

CVE-2008-4728

Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 DeployRun.dll ActiveX control 10.0.0.44 in Hummingbird Deployment Wizard 2008 allow remote attackers to execute arbitrary programs via the 1 Run and 2 PerformUpdateAsync methods, and 3 modify arbitrary registry values via...

CVE-2008-4729

CVE-2008-4729 concerns a stack-based buffer overflow in the Hummingbird XWebHostCtrl.1 ActiveX control (hclxweb.dll) used by Hummingbird Xweb ActiveX Control <= 13.0. The overflow is triggered by a too-long PlainTextPassword property, potentially enabling remote arbitrary code execution; note ...

CVE-2008-4729

Stack-based buffer overflow in Hummingbird.XWebHostCtrl.1 ActiveX control hclxweb.dll in Hummingbird Xweb ActiveX Control 13.0 and earlier allows remote attackers to execute arbitrary code via a long PlainTextPassword property. NOTE: code execution might not be possible in 13.0...

Hummingbird Deployment Wizard ActiveX Control Multiple Security Vulnerabilities

This host is installed with Deployment Wizard ActiveX Control and is prone to multiple security vulnerabilities. The multiple flaws are due to error in 'SetRegistryValueAsString', 'Run' and 'PerformUpdateAsync' methods in DeployRun.DeploymentSetup.1 DeployRun.dll ActiveX control. OpenVAS...

CVE-2008-4729: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Hummingbird.XWebHostCtrl.1 ActiveX control hclxweb.dll in Hummingbird Xweb ActiveX Control 13.0 and earlier allows remote attackers to execute arbitrary code via a long PlainTextPassword property. NOTE: code execution might not be possible in 13.0...

KLA10150 ACE vulnerability in Exceed

A buffer overflow was found in Hummingbird Exceed. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially formed ActiveX control property. Original advisories - Exploitation Public exploits exist for this...

Hummingbird Deployment Wizard ActiveX Control Multiple Security Vulnerabilities

Deployment Wizard ActiveX Control is prone to multiple security vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security feature bypass

Insecure method vulnerability in the ActiveX control PAWWeb11.ocx in Peachtree Accounting 2004 allows remote attackers to execute arbitrary programs via the ExecutePreferredApplication method...

CVE-2008-4699

Insecure method vulnerability in the ActiveX control PAWWeb11.ocx in Peachtree Accounting 2004 allows remote attackers to execute arbitrary programs via the ExecutePreferredApplication method...

CVE-2008-4699

The CVE-2008-4699 entry concerns Peachtree Accounting 2004, specifically the ActiveX control PAWWeb11.ocx. The vulnerability arises in the ExecutePreferredApplication method, enabling remote attackers to execute arbitrary programs. The available connected documents affirm this insecure method vul...

CVE-2008-4652

Buffer overflow in the ActiveX control DartFtp.dll in Dart Communications PowerTCP FTP for ActiveX 2.0.2 0 allows remote attackers to execute arbitrary code via a long SecretKey property...

Heap overflow

Heap-based buffer overflow in QvodInsert.QvodCtrl.1 ActiveX control QvodInsert.dll in QVOD Player before 2.1.5 build 0053 allows remote attackers to execute arbitrary code via a long URL property. NOTE: some of these details are obtained from third party information...

Buffer overflow

Buffer overflow in the ActiveX control DartFtp.dll in Dart Communications PowerTCP FTP for ActiveX 2.0.2 0 allows remote attackers to execute arbitrary code via a long SecretKey property...

CVE-2008-4664

CVE-2008-4664 affects QVOD Player prior to 2.1.5 build 0053, via the QvodInsert.dll ActiveX control (QvodInsert.QvodCtrl.1) where a heap-based buffer overflow can be triggered by a long URL property to allow remote code execution. Details are taken from NVD/NVD-linked references; no explicit expl...

CVE-2008-4699: Undefined Security Weakness

Insecure method vulnerability in the ActiveX control PAWWeb11.ocx in Peachtree Accounting 2004 allows remote attackers to execute arbitrary programs via the ExecutePreferredApplication method...

LPViewer ActiveX Control Multiple Buffer Overflow Vulnerabilities

The remote host contains the LPViewer ActiveX control, initially created by MGI Software but later taken over by Roxio and then again by iseemedia. This control reportedly has stack-based buffer overflows in its 'url', 'toolbar', and 'enableZoomPastMax' methods. If an attacker can trick a user on...

Hummingbird HostExplorer ActiveX Control BOF Vulnerability

This host has Hummingbird HostExplorer ActiveX Control installed and is prone to stack based buffer overflow vulnerability. The flaw is due to error in Hummingbird.XWebHostCtrl.1 ActiveX control in hclxweb.dll file when handling the 'PlainTextPassword' function, which can be exploited by assignin...

Hummingbird HostExplorer ActiveX Control BOF Vulnerability

Hummingbird HostExplorer ActiveX Control is prone to a stack based buffer overflow vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...