Panasonic Security API SDK Iprosapi ActiveX Control Buffer Overflow (CVE-2015-4647)

A buffer overflow vulnerability exists in the Ipropsapi ActiveX Control component of the Panasonic Security API SDK. The vulnerability is due to an error when processing the FilePassword property. A remote attacker can exploit this vulnerability by enticing the victim to visit a specially crafted...

CVE-2015-4648

Stack-based buffer overflow in the Ipropsapi.ipropsapiCtrl.1 ActiveX control in ipropsapivideo in Panasonic Security API PS-API ActiveX SDK before 8.10.18 allows remote attackers to execute arbitrary code via a long string to the MulticastAddr method...

CVE-2015-4647

Multiple stack-based buffer overflows in Ipropsapi in Panasonic Security API PS-API ActiveX SDK before 8.10.18 allow remote attackers to execute arbitrary code via a long string in the 1 FilePassword property or to the 2 GetStringInfo method...

Stack overflow

Multiple stack-based buffer overflows in Ipropsapi in Panasonic Security API PS-API ActiveX SDK before 8.10.18 allow remote attackers to execute arbitrary code via a long string in the 1 FilePassword property or to the 2 GetStringInfo method...

Stack overflow

Stack-based buffer overflow in the Ipropsapi.ipropsapiCtrl.1 ActiveX control in ipropsapivideo in Panasonic Security API PS-API ActiveX SDK before 8.10.18 allows remote attackers to execute arbitrary code via a long string to the MulticastAddr method...

CVE-2015-4647

CVE-2015-4647 concerns the Panasonic Security API SDK’s Ipropsapi ActiveX Control . Multiple stack-based buffer overflows exist in the GetStringInfo method and the FilePassword property, exploitable by supplying a very long string. This could allow a remote attacker to execute arbitrary code in t...

CVE-2015-4647

Multiple stack-based buffer overflows in Ipropsapi in Panasonic Security API PS-API ActiveX SDK before 8.10.18 allow remote attackers to execute arbitrary code via a long string in the 1 FilePassword property or to the 2 GetStringInfo method...

CVE-2015-4648

Stack-based buffer overflow in the Ipropsapi.ipropsapiCtrl.1 ActiveX control in ipropsapivideo in Panasonic Security API PS-API ActiveX SDK before 8.10.18 allows remote attackers to execute arbitrary code via a long string to the MulticastAddr method...

CVE-2015-4648

Panasonic Security API SDK (ipropsapivideo) contains a stack-based buffer overflow in the Ipropsapi.ipropsapiCtrl.1 ActiveX control’s MulticastAddr method. The underlying flaw is a lack of boundary checks on a long string passed to MulticastAddr, enabling remote code execution. Affected component...

Unitronics VisiLogic OPLC IDE Vulnerabilities (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-15-274-02 Unitronics VisiLogic OPLC IDE Vulnerabilities that was published November 12, 2015, on the NCCIC/ICS-CERT web site. HP’s Zero Day Initiative ZDI reported to ICS-CERT that Steven Seeley of Source Incite,...

Panasonic Security API Stack Buffer Overflow Vulnerability

The Panasonic Security API is a webcam API interface from Panasonic Japan. A stack buffer overflow vulnerability exists in the Ipropsapi.ipropsapiCtrl.1 ActiveX control of the Panasonic Security API. A remote attacker can exploit the vulnerability by passing an extremely long string to the...

CVE-2015-4464 Insufficient Authorization Checks Request Handling Remote Authentication Bypass for Kguard Digital Video Recorders

CVEID: CVE-2015-4464 SUBJECT: Insufficient Authorization Checks Request Handling Remote Authentication Bypass for Kguard Digital Video Recorders DESCRIPTION: A deficiency in handling authentication and authorization has been found with Kguard 104/108/v2 models. While password-based authentication...

DVDVideoTool 1 Click Extract Audio ActiveX Control Buffer Overflow Vulnerability

DVDVideoTool 1 Click Extract Audio is a free audio extraction software package from DVDVideoTool.com. A buffer overflow vulnerability exists in DVDVideoTool 1 Click Extract Audio. The vulnerability is due to the program failing to perform proper boundary checking on user-submitted input. An...

1 Click Audio Converter ActiveX Control 'SkinCrafter.dll' ActiveX Buffer Overflow Vulnerability

DVDVideoTool 1 Click Audio Converter is a set of audio file format conversion software from DVDVideoTool.com. A buffer overflow vulnerability in the DVDVideoTool.com 1 Click Audio Converter ActiveX control allows remote attackers to construct a malicious web page and trick users into parsing it,...

Panasonic Security API SDK ipropsapivideo ActiveX Control MulticastAddr Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Panasonic Security API. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Panasonic Security API SDK Ipropsapi ActiveX Control GetInfoString Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability could allow remote attackers to execute arbitrary code on vulnerable installations of the Panasonic Security API SDK. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in...

Kguard Digital Video Recorder Bypass Issues

CVEID: CVE-2015-4464 SUBJECT: Insufficient Authorization Checks Request Handling Remote Authentication Bypass for Kguard Digital Video Recorders DESCRIPTION: A deficiency in handling authentication and authorization has been found with Kguard 104/108/v2 models. While password-based authentication...

Tango DropBox 3.1.5 + PRO - Activex HeapSpray

Tango DropBox 3.1.5 + PRO - Activex HeapSpray Tango DropBox Activex Heap Spray Exploit Version:3.1.5 + PRO The vulnerability lies in the COM component used eSellerateControl350.dll 3.6.5.0 method of the ''GetWebStoreURL' member. Vendor Homepage:http://etonica.com/dropbox/index.html Software...

Tango DropBox 3.1.5 + PRO - Activex HeapSpray

Tango DropBox Activex Heap Spray Exploit Version:3.1.5 + PRO The vulnerability lies in the COM component used eSellerateControl350.dll 3.6.5.0 method of the ''GetWebStoreURL' member. Vendor Homepage:http://etonica.com/dropbox/index.html Software Link:http://etonica.com/dropbox/download.html Autho...

Tango FTP 1.0 (Build 136) - Activex HeapSpray

Tango FTP 1.0 Build 136 - Activex HeapSpray Tango FTP Activex Heap Spray Exploit Version:1.0Build 136 The vulnerability lies in the COM component used eSellerateControl350.dll 3.6.5.0 method of the ''GetWebStoreURL' member. Vendor Homepage:http://www.tangoftp.com/index.html Software...