1 Click Audio Converter v2.3.6 - Activex Buffer Overflow

Document Title: =============== 1 Click Audio Converter v2.3.6 - Activex Buffer Overflow References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1504 http://www.vulnerability-lab.com/getcontent.php?id=1505 View Video: https://www.youtube.com/watch?v=Ad0wHlHz0KU...

WellinTech KingSCADA < 3.1.2.13-EN 'kxClientDownload.ocx' ActiveX RCE

Binary data scadakingscadakxclientdownloadactivex.nbin...

Moxa VPort ActiveX SDK Plus Stack Buffer Overflow Vulnerability

Moxa's VPort SDK PLUS, including CGI command, ActiveX control and API libraries, allows third-party developers to easily integrate customized monitoring applications. Moxa VPort ActiveX SDK Plus suffers from a stack buffer overflow vulnerability. A remote attacker can exploit the vulnerability by...

CVE-2015-0986

Multiple stack-based buffer overflows in Moxa VPort ActiveX SDK Plus before 2.8 allow remote attackers to insert assembly-code lines via vectors involving a regkey 1 set or 2 get command...

Stack overflow

Multiple stack-based buffer overflows in Moxa VPort ActiveX SDK Plus before 2.8 allow remote attackers to insert assembly-code lines via vectors involving a regkey 1 set or 2 get command...

CVE-2015-0986

The CVE-2015-0986 issue affects Moxa VPort ActiveX SDK Plus (pre-2.8) and is caused by a stack-based buffer overflow in the VPORTSDKCtrl.1 ActiveX control, triggered by passing an overly long string to the GetClientReg method’s Name parameter, allowing a remote attacker to execute arbitrary code ...

CVE-2015-0986

Multiple stack-based buffer overflows in Moxa VPort ActiveX SDK Plus before 2.8 allow remote attackers to insert assembly-code lines via vectors involving a regkey 1 set or 2 get command...

CVE-2015-0140

An unspecified ActiveX control in IBM SPSS Statistics 22.0 through FP1 on 32-bit platforms allows remote attackers to execute arbitrary code via a crafted HTML document...

CVE-2015-0140

IBM SPSS Statistics 22.0 on Windows 32‑bit is affected by CVE-2015-0140 due to a vulnerable ActiveX control in the SPSS Statistics ActiveX component. A remote attacker can cause arbitrary code execution by forcing a user to render a specially crafted HTML page, potentially compromising the system...

CVE-2015-0140

An unspecified ActiveX control in IBM SPSS Statistics 22.0 through FP1 on 32-bit platforms allows remote attackers to execute arbitrary code via a crafted HTML document...

IBM SPSS Statistics ActiveX Control Code Execution Vulnerability

IBM SPSS Statistics is a suite of statistical analysis software that helps organizations address the entire analytics process, from planning and data collection to analysis, reporting, and deployment. A code execution vulnerability exists in the ActiveX control of IBM SPSS Statistics version 22.0...

Microsoft Visual Basic VBE6.DLL Stack Memory Corruption (MS10-031) - Ver2 (CVE-2010-0815)

Microsoft Visual Basic VBA is a technology for developing client desktop packaged applications and integrating them with existing data and systems. Microsoft Office products include VBA and make use of VBA to perform certain functions. A remote code execution vulnerability has been reported in th...

Ca eTrust PestPatrol Antispyware ActiveX Buffer Overflow106 - Ver2 (CVE-2009-4225)

A buffer overflow vulnerability has been reported in Ca Etrust Pestpatrole Ppctl.dll Activex and Computer Associates eTrust PestPatrol. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Oracle WebCenter Forms Recognition Sssplt30.ocx Arbitrary File Creation - Ver2 (CVE-2012-1710)

A directory traversal vulnerability has been reported in Oracle WebCenter Forms Recognition. The vulnerability is due to insufficient validation of parameters used in a certain method in the Sssplt30 ActiveX control. A remote attacker can exploit this vulnerability by enticing a target user to op...

Microsoft Visual Studio WMI Object Code Execution (MS06-073) - Ver2 (CVE-2006-4704)

A remote code execution vulnerability exists in Microsoft Visual Studio 2005. Microsoft Visual Studio is a software development product for computer programmers. It centers on an integrated development environment which lets programmers create standalone applications, web sites, web applications,...

ICBC Internet banking assistant and other security controls was traced to the presence of the“disaster-level”vulnerability-vulnerability warning-the black bar safety net

Recently, ICBC Internet banking assistant and other security controls was traced to the presence of the“disaster-level”vulnerability, the vulnerability can cause remote arbitrary code execution on the user computer, security caused great harm. Baidu security prompts the user as soon as possible o...

Green Alliance: the online banking security controls remote code execution vulnerability analysis V1. 2-vulnerability warning-the black bar safety net

5 on 1 1 December, nsfocus Threat Response Center reported the storm clouds announcement, ICBC security controls can lead to remote arbitrary code execution vulnerability, Tick-2 0 1 5-9 6 3 3 9, and considering the Internet financial current there are more security issues, and taking into accoun...

Oracle Data Quality DscXB onloadstatechange Memory Misreference Remote Code Execution Vulnerability

Oracle Data Quality is the United States Oracle Oracle company's set of software provides a comprehensive data quality management environment. The software supports data management, data integration and data migration. A remote code execution vulnerability exists in the TSS12.LoaderWizard.lwctrl...

Oracle Data Quality LoaderWizard DataPreview Type Obfuscation Remote Code Execution Vulnerability

Oracle Data Quality is the United States Oracle Oracle company's set of software provides a comprehensive data quality management environment. The software supports data management, data integration and data migration. A remote code execution vulnerability exists in the TSS12.LoaderWizard.lwctrl...

Oracle Data Quality TSS12.DscXB.XB ActiveX Control Memory Misreference Vulnerability

Oracle Data Quality is a suite of software that provides a comprehensive data quality management environment. A memory misreference vulnerability in the onloadstatechange method of the TSS12.DscXB.XB ActiveX control in Oracle Data Quality allows remote attackers to construct a malicious WEB page...