10868 matches found
CVE-2014-8512
Buffer overflow in an ActiveX control in Atx45.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8511. NOTE: this may be clarified later based on details provided by researchers...
CVE-2014-8511
Buffer overflow in an ActiveX control in Atx45.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8512. NOTE: this may be clarified later based on details provided by researchers...
CVE-2014-8513
CVE-2014-8513 affects Schneider Electric ProClima (ActiveX control MDraw30.ocx) with a buffer overflow vulnerability in ProClima before 6.1.7 that allows remote code execution via unspecified vectors. The issue is distinct from CVE-2014-8514 and CVE-2014-9188. Remediation guidance in the sources ...
CVE-2014-8514
Schneider Electric ProClima (MDraw30.ocx ActiveX control) has a buffer overflow vulnerability in versions before 6.1.7, allowing remote code execution via unspecified vectors. This CVE is linked to the ProClima family; no exploit details are provided here. Upgrade to 6.1.7 or later to mitigate.
CVE-2014-8511
The CVE-2014-8511 issue affects Schneider Electric ProClima before 6.1.7, specifically the Atx45.ocx ActiveX control. A heap/buffer overflow within Atx45.ocx (documented variants reference SetHtmlFileName/SetBodyAttribute paths) can allow remote attackers to execute arbitrary code. This is report...
CVE-2014-8512
CVE-2014-8512 affects Schneider Electric ProClima (ATX45) via the Atx45.ocx ActiveX control. The vulnerability is a buffer overflow in the control before version 6.1.7 that could allow remote arbitrary code execution via unspecified vectors. Documented in multiple sources (e.g., ZDI advisories fo...
CVE-2014-9418
The eSpace Meeting ActiveX control eSpaceStatusCtrl.dll in Huawei eSpace Desktop before V200R001C03 allows local users to cause a denial of service memory overflow via unspecified vectors...
Design/Logic Flaw
The eSpace Meeting ActiveX control eSpaceStatusCtrl.dll in Huawei eSpace Desktop before V200R001C03 allows local users to cause a denial of service memory overflow via unspecified vectors...
CVE-2014-9418
The eSpace Meeting ActiveX control eSpaceStatusCtrl.dll in Huawei eSpace Desktop before V200R001C03 allows local users to cause a denial of service memory overflow via unspecified vectors...
CVE-2014-9418
Huawei eSpace Desktop (eSpace Meeting) is affected by a heap-based memory overflow in the ActiveX controls ContactsCtrl.dll and eSpaceStatusCtrl.dll. The vulnerability occurs when parsing a large amount of bytes (GetNameyNum() in ContactsCtrl.dll), leading to memory overflow and possible denial o...
HP's Zero Day Initiative Changes Bug-Buying Guidelines
HP’s Zero Day Initiative has decided to adjust its guidelines and criteria or buying some vulnerabilities in the future, eliminating some large classes of bugs from its menu. The group, which has been among the more visible and prominent of the vulnerability purchasing programs since its inceptio...
December 2014 Microsoft Patch Tuesday Security Bulletins
Microsoft exits 2014 the way it came in to the year, with a relatively quiet set of Patch Tuesday security bulletins. As promised last week, Microsoft released seven bulletins today, three of them rated critical, meaning the chance of exploit and remote code execution is high. Microsoft also...
CVE-2014-9268
The AdView.AdViewer.1 ActiveX control in Autodesk Design Review ADR before 2013 Hotfix 1 allows remote attackers to execute arbitrary code via a crafted DWF file...
CVE-2014-9267
Heap-based buffer overflow in the PTC IsoView ActiveX control allows remote attackers to execute arbitrary code via a crafted ViewPort property value...
CVE-2014-9266
The STWConfig ActiveX control in Samsung SmartViewer does not properly initialize a variable, which allows remote attackers to execute arbitrary code via unspecified vectors...
Stack overflow
Stack-based buffer overflow in the BackupToAvi method in the CNCCtrl ActiveX control in Samsung SmartViewer allows remote attackers to execute arbitrary code via unspecified vectors...
Code injection
The STWConfig ActiveX control in Samsung SmartViewer does not properly initialize a variable, which allows remote attackers to execute arbitrary code via unspecified vectors...
Code injection
The AdView.AdViewer.1 ActiveX control in Autodesk Design Review ADR before 2013 Hotfix 1 allows remote attackers to execute arbitrary code via a crafted DWF file...