KLA10054 ACE vulnerability in Akamai Download Manager

CRLF injection vulnerability was found in the Akamai Download Manager. By using this vulnerability spiteful abuser can execute arbitrary code. This vulnerability can be exploited from network at point related to unknown. Via specially designed URL. Original advisories vulnerability description...

CVE-2008-1770: Improper Control of Generation of Code

CRLF injection vulnerability in Akamai Download Manager ActiveX control before 2.2.3.6 allows remote attackers to force the download and execution of arbitrary files via a URL parameter containing an encoded LF followed by a malicious target line...

HP Instant Support 1.0.22 - 'HPISDataManager.dll RegistryString' Buffer Overflow

source: https://www.securityfocus.com/bid/29534/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. An attacker can exploit this issue to execute arbitrary cod...

HP Instant Support 1.0.22 - HPISDataManager.dll ActiveX Control Arbitrary File Creation

HP Instant Support 1.0.22 - HPISDataManager.dll ActiveX Control Arbitrary File Creation source: https://www.securityfocus.com/bid/29535/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to a vulnerability that lets attackers create and overwrite files with arbitrary,...

HP Instant Support 1.0.22 - HPISDataManager.dll StartApp ActiveX Control Insecure Method

HP Instant Support 1.0.22 - HPISDataManager.dll StartApp ActiveX Control Insecure Method source: https://www.securityfocus.com/bid/29533/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to an insecure-method vulnerability. Successfully exploiting this issue allows remote...

HP Instant Support 1.0.22 - HPISDataManager.dll ExtractCab ActiveX Control Buffer Overflow

HP Instant Support 1.0.22 - HPISDataManager.dll ExtractCab ActiveX Control Buffer Overflow source: https://www.securityfocus.com/bid/29529/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary...

HP Instant Support 1.0.22 - HPISDataManager.dll ActiveX Control Arbitrary File Delete

HP Instant Support 1.0.22 - HPISDataManager.dll ActiveX Control Arbitrary File Delete source: https://www.securityfocus.com/bid/29536/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to a vulnerability that lets attackers delete arbitrary files on the affected computer in th...

HP Instant Support 1.0.22 - 'HPISDataManager.dll StartApp' ActiveX Control Insecure Method

source: https://www.securityfocus.com/bid/29533/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to an insecure-method vulnerability. Successfully exploiting this issue allows remote attackers to launch arbitrary applications with the privileges of the application running th...

HP Instant Support 1.0.22 - 'HPISDataManager.dll' ActiveX Control Arbitrary File Creation

source: https://www.securityfocus.com/bid/29535/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to a vulnerability that lets attackers create and overwrite files with arbitrary, attacker-controlled content. Successful exploits may compromise affected computers and aid in...

HP Instant Support 1.0.22 - 'HPISDataManager.dll ExtractCab' ActiveX Control Buffer Overflow

source: https://www.securityfocus.com/bid/29529/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. An attacker can exploit this issue to execute arbitrary cod...

HP Instant Support 1.0.22 - 'HPISDataManager.dll' ActiveX Control Arbitrary File Delete

source: https://www.securityfocus.com/bid/29536/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to a vulnerability that lets attackers delete arbitrary files on the affected computer in the context of the application using the ActiveX control. Successful attacks can result ...

CVE-2008-2511

Directory traversal vulnerability in the UmxEventCli.CachedAuditDataList.1 aka UmxEventCliLib ActiveX control in UmxEventCli.dll in CA Internet Security Suite 2008 allows remote attackers to create and overwrite arbitrary files via a .. dot dot in the argument to the SaveToFile method. NOTE: this...

CVE-2008-2511

CVE-2008-2511 describes a directory traversal vulnerability in the CA Internet Security Suite 2008’s UmxEventCli.dll (UmxEventCli.CachedAuditDataList/UmxEventCliLib) ActiveX control. The flaw lets remote attackers supply a ... path to the SaveToFile method, enabling creation or overwriting of arb...

Stack overflow

Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioInformation2 ActiveX control in NCTAudioInformation2.dll, as used in 1 Power Audio CD Grabber 1.0, 2 Power Audio CD Burner 1.02, 3 CinematicMP3 1.4.0.0, 4 Alive MP3 WAV Converter 3.9.3.2, and possibly other...

Stack overflow

Stack-based buffer overflow in the Creative Software AutoUpdate Engine ActiveX control in CTSUEng.ocx allows remote attackers to execute arbitrary code via a long CacheFolder property value...

CVE-2008-0958

Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioGrabber2 ActiveX control in NCTAudioGrabber2.dll allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2008-0955

Stack-based buffer overflow in the Creative Software AutoUpdate Engine ActiveX control in CTSUEng.ocx allows remote attackers to execute arbitrary code via a long CacheFolder property value...

CVE-2008-0959

CVE-2008-0959 affects Online Media Technologies NCTSoft NCTAudioInformation2 ActiveX control (NCTAudioInformation2.dll). The vulnerability consists of multiple stack-based buffer overflows when handling GetAudioInformation() and SetAudioInformation() parameters, enabling remote code execution via...

CVE-2008-0958

The CVE-2008-0958 issue affects Online Media Technologies’ NCTSoft NCTAudioGrabber2 ActiveX control (NCTAudioGrabber2.dll). It describes multiple stack-based buffer overflows when handling certain properties, allowing a remote attacker to execute arbitrary code by convincing a user to view a mali...

CVE-2008-0955

Stack-based buffer overflow in the Creative Software AutoUpdate Engine ActiveX control in CTSUEng.ocx allows remote attackers to execute arbitrary code via a long CacheFolder property value...