CVE-2015-2096

Use-after-free vulnerability in the Connect function in the WESPMonitor.WESPMonitorCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via an invalid IP address and a page reload...

Stack overflow

Stack-based buffer overflow in the Connect function in the WebGate WebEyeAudio ActiveX control allows remote attackers to execute arbitrary code via a crafted value...

CVE-2015-2095

Heap-based buffer overflow in the SetConnectInfo function in the WESPPTZ.WESPPTZCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via crafted arguments...

CVE-2015-2097

Multiple buffer overflows in WebGate Embedded Standard Protocol WESP SDK allow remote attackers to execute arbitrary code via unspecified vectors to the 1 LoadImage or 2 LoadImageEx function in the WESPMonitor.WESPMonitorCtrl.1 control, 3 ChangePassword function in the WESPCONFIGLib.UserItem...

Heap overflow

Heap-based buffer overflow in the SetConnectInfo function in the WESPPTZ.WESPPTZCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via crafted arguments...

Design/Logic Flaw

Use-after-free vulnerability in the Connect function in the WESPMonitor.WESPMonitorCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via an invalid IP address and a page reload...

CVE-2015-2096

Use-after-free vulnerability in the Connect function in the WESPMonitor.WESPMonitorCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via an invalid IP address and a page reload...

CVE-2015-2095

WebGate eDVR Manager's WESPPTZ.WESPPTZCtrl.1 ActiveX control is affected by a heap-based buffer overflow in SetConnectInfo. A remote attacker can run arbitrary code by supplying crafted arguments. Concrete details from multiple sources: Affected component: WESPPTZCtrl.1 ActiveX control in WebGate...

CVE-2015-2094

CVE-2015-2094 affects WebGate WinRDS (WESPPlaybackCtrl.1) and involves a stack-based buffer overflow in the WESPPlaybackCtrl.1 control. Multiple functions are listed as vectors (PrintSiteImage, PlaySiteAllChannel, StopSiteAllChannel, SaveSiteImage). Exploitation could allow remote code execution,...

CVE-2015-2095

Heap-based buffer overflow in the SetConnectInfo function in the WESPPTZ.WESPPTZCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via crafted arguments...

CVE-2015-2096

WebGate eDVR Manager exposes the WESPMonitor.WESPMonitorCtrl.1 ActiveX control. CVE-2015-2096 is a use-after-free in the Connect() method that can allow remote code execution when an attacker provides an invalid IP address and reloads the page. The vulnerability is triggered by a freed pointer be...

CVE-2015-2093

Stack-based buffer overflow in the Connect function in the WebGate WebEyeAudio ActiveX control allows remote attackers to execute arbitrary code via a crafted value...

CVE-2015-2093

CVEs and affected component : CVE-2015-2093 describes a stack-based buffer overflow in the Connect function of the WebGate WebEyeAudio ActiveX control (OCX). The vulnerability enables remote code execution in the context of the vulnerable host when a crafted value is processed.Root cause : buffer...

CVE-2015-2097

CVE-2015-2097 describes multiple buffer overflow vulnerabilities in WebGate WebGate eDVR Manager components using the WebGate Embedded Standard Protocol (WESP) SDK. The advisories identify insufficient input validation/boundary checks in several controls (notably WESPMonitorCtrl LoadImage/LoadIma...

CVE-2015-2097

Multiple buffer overflows in WebGate Embedded Standard Protocol WESP SDK allow remote attackers to execute arbitrary code via unspecified vectors to the 1 LoadImage or 2 LoadImageEx function in the WESPMonitor.WESPMonitorCtrl.1 control, 3 ChangePassword function in the WESPCONFIGLib.UserItem...

CVE-2015-2094

Stack-based buffer overflow in the WESPPlayback.WESPPlaybackCtrl.1 control in WebGate WinRDS allows remote attackers to execute arbitrary code via unspecified vectors to the 1 PrintSiteImage, 2 PlaySiteAllChannel, 3 StopSiteAllChannel, or 4 SaveSiteImage function...

CVE-2015-2095: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the SetConnectInfo function in the WESPPTZ.WESPPTZCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via crafted arguments...

Multiple Buffer Overflow Vulnerabilities in WebGate eDVR Manager ActiveX Controls

WebGate eDVR Manager is an eDVR software manager from WebGate Korea. Multiple buffer overflow vulnerabilities exist in WebGate eDVR Manager ActiveX Controls, which can be exploited by an attacker to execute arbitrary code within an application typically Internet Explorer with ActiveX controls or...

CVE-2015-2094: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the WESPPlayback.WESPPlaybackCtrl.1 control in WebGate WinRDS allows remote attackers to execute arbitrary code via unspecified vectors to the 1 PrintSiteImage, 2 PlaySiteAllChannel, 3 StopSiteAllChannel, or 4 SaveSiteImage function...

CVE-2015-2096: Undefined Security Weakness

Use-after-free vulnerability in the Connect function in the WESPMonitor.WESPMonitorCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via an invalid IP address and a page reload...