RealPage Module Upload ActiveX Control Multiple Vulnerabilities

The RealPage Module Upload ActiveX control, used with RealPage's OneSite Property Management Systems software and installed on the remote Windows host, reportedly is affected by several vulnerabilities : - The 'Upload' method in combination with the 'SourceFile' and 'DestURL' properties can be...

PT-2010-4130

Name of the Vulnerable Software and Affected Versions RealPage Module ActiveX Controls version 1.0.0.9 Description The issue concerns multiple buffer overflows in the RealPage Module Upload ActiveX control. This can be exploited by remote attackers to execute arbitrary code. The exploitation can...

PT-2010-4129

Name of the Vulnerable Software and Affected Versions RealPage Module ActiveX Controls version 1.0.0.9 Description The issue concerns the Upload method in the RealPage Module Upload ActiveX control, which does not properly restrict certain property values. This allows remote attackers to read...

CVE-2010-2585: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in the RealPage Module Upload ActiveX control in Realpage.dll 1.0.0.9 in RealPage Module ActiveX Controls allow remote attackers to execute arbitrary code via a long 1 DestURL or 2 SourceFile property value...

CVE-2010-2584: Undefined Security Weakness

The Upload method in the RealPage Module Upload ActiveX control in Realpage.dll 1.0.0.9 in RealPage Module ActiveX Controls does not properly restrict certain property values, which allows remote attackers to read arbitrary files via a filename in the SourceFile property in conjunction with an ht...