CVE-2012-4334

The ConnectDDNS method in the 1 STWConfigNVR 1.1.13.15 and 2 STWConfig 1.1.14.13 ActiveX controls in Samsung NET-i viewer 1.37.120316 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: some of these details are obtained from third party information...

CVE-2012-4335

Samsung NET-i viewer 1.37.120316 allows remote attackers to cause a denial of service infinite loop via a negative size value in a TCP request to 1 NiwMasterService or 2 NiwStorageService. NOTE: some of these details are obtained from third party information...

Stack overflow

Multiple stack-based buffer overflows in the BackupToAvi method in the 1 UMSCtrl 1.5.1.1 and 2 UMSCtrlSTW 2.0.1.0 ActiveX controls in Samsung NET-i viewer 1.37.120316 allow remote attackers to execute arbitrary code via a long string in the fname parameter. NOTE: some of these details are obtaine...

Information disclosure

Samsung NET-i viewer 1.37.120316 allows remote attackers to cause a denial of service infinite loop via a negative size value in a TCP request to 1 NiwMasterService or 2 NiwStorageService. NOTE: some of these details are obtained from third party information...

Information disclosure

The ConnectDDNS method in the 1 STWConfigNVR 1.1.13.15 and 2 STWConfig 1.1.14.13 ActiveX controls in Samsung NET-i viewer 1.37.120316 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: some of these details are obtained from third party information...

CVE-2012-4334

The CVE-2012-4334 issue affects Samsung NET-i Viewer 1.37.120316, specifically the ConnectDDNS method in the STWConfigNVR 1.1.13.15 and STWConfig 1.1.14.13 ActiveX controls. A remote attacker can trigger arbitrary code execution via unspecified vectors. Details are drawn from multiple sources; th...

CVE-2012-4335

Samsung NET-i viewer 1.37.120316 allows remote attackers to cause a denial of service infinite loop via a negative size value in a TCP request to 1 NiwMasterService or 2 NiwStorageService. NOTE: some of these details are obtained from third party information...

CVE-2012-4333

Summary (CVE-2012-4333) : Multiple stack-based buffer overflows in the BackupToAvi method of Samsung NET-i viewer’s ActiveX controls (CNC_Ctrl) and related UMS_Ctrl components allow remote code execution via a long fname string. Affected products include Samsung NET-i viewer 1.37.120316 and the C...

CVE-2012-4334

The ConnectDDNS method in the 1 STWConfigNVR 1.1.13.15 and 2 STWConfig 1.1.14.13 ActiveX controls in Samsung NET-i viewer 1.37.120316 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: some of these details are obtained from third party information...

PT-2012-5337

Name of the Vulnerable Software and Affected Versions Samsung NET-i viewer version 1.37.120316 Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop. This can be achieved by sending a TCP request with a negative size value to specific services,...

CVE-2012-4335: Improper Restriction of Operations within the Bounds of a Memory Buffer

Samsung NET-i viewer 1.37.120316 allows remote attackers to cause a denial of service infinite loop via a negative size value in a TCP request to 1 NiwMasterService or 2 NiwStorageService. NOTE: some of these details are obtained from third party information...

CVE-2012-4334: Undefined Security Weakness

The ConnectDDNS method in the 1 STWConfigNVR 1.1.13.15 and 2 STWConfig 1.1.14.13 ActiveX controls in Samsung NET-i viewer 1.37.120316 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: some of these details are obtained from third party information...

CVE-2012-4333: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in the BackupToAvi method in the 1 UMSCtrl 1.5.1.1 and 2 UMSCtrlSTW 2.0.1.0 ActiveX controls in Samsung NET-i viewer 1.37.120316 allow remote attackers to execute arbitrary code via a long string in the fname parameter. NOTE: some of these details are obtaine...

PT-2012-5336

Name of the Vulnerable Software and Affected Versions Samsung NET-i viewer versions 1.37.120316 Description The issue allows remote attackers to execute arbitrary code. It is related to the ConnectDDNS method in the STWConfigNVR and STWConfig ActiveX controls. Recommendations For Samsung NET-i...

PT-2012-5335

Name of the Vulnerable Software and Affected Versions Samsung NET-i viewer versions 1.37.120316 Description The issue is related to multiple stack-based buffer overflows in the BackupToAvi method within the UMS Ctrl and UMS Ctrl STW ActiveX controls. This allows remote attackers to execute...

CVE-2012-4250

Stack-based buffer overflow in the RequestScreenOptimization function in the XProcessControl.ocx ActiveX control in msls31.dll in Samsung NET-i viewer 1.37 allows remote attackers to execute arbitrary code via a long string in the first argument...

Stack overflow

Stack-based buffer overflow in the RequestScreenOptimization function in the XProcessControl.ocx ActiveX control in msls31.dll in Samsung NET-i viewer 1.37 allows remote attackers to execute arbitrary code via a long string in the first argument...

CVE-2012-4250

CVE-2012-4250 affects Samsung NET-i viewer 1.37 via the XProcessControl.ocx ActiveX control (msls31.dll). A stack-based buffer overflow in RequestScreenOptimization allows remote attackers to run arbitrary code by supplying a long string as the first argument. The NVD entry confirms a high-severi...

CVE-2012-4250

Stack-based buffer overflow in the RequestScreenOptimization function in the XProcessControl.ocx ActiveX control in msls31.dll in Samsung NET-i viewer 1.37 allows remote attackers to execute arbitrary code via a long string in the first argument...

CVE-2012-4250: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the RequestScreenOptimization function in the XProcessControl.ocx ActiveX control in msls31.dll in Samsung NET-i viewer 1.37 allows remote attackers to execute arbitrary code via a long string in the first argument...