Symantec pcAnywhere Installed

Symantec pcAnywhere, a remote access application, is installed on the remote Windows host. C Tenable Network Security. Inc. include'compat.inc'; if description scriptid57795; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10"; scriptnameenglish:"Symantec...

NTR ActiveX Control < 2.0.4.8 Multiple Vulnerabilities

At least one version of the NTR ActiveX control installed on the remote Windows host is earlier than 2.0.4.8. As such, it reportedly is affected by the following vulnerabilities : - Four stack-based buffer overflows exist involving the 'bstrUrl' parameter of the 'StartModule' method, the...

IrfanView < 4.32 Buffer Overflow

The remote Windows host contains a version of IrfanView earlier than 4.32. As such, it is reportedly affected by a buffer overflow vulnerability due to the way the application handles TIFF files with SGILog compressed images fixed. A remote, unauthenticated attacker could exploit this flaw to...

HP PKI ActiveX Control KillProcess Denial of Service

The version of the HP PKI ActiveX control installed on the remote Windows host is earlier than 1.2.0.1. As such, it reportedly contains an insecure method named 'KillProcess' that could be used to terminate arbitrary user processes. C Tenable Network Security, Inc. include"compat.inc"; if...

RSA SecurID Software Token Installed

RSA SecurID Software Token, a two-factor authentication application, is installed on the remote Windows host. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid57348; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...

MS11-093: Vulnerability in OLE Could Allow Remote Code Execution (2624667)

The remote Windows host contains a flaw in the way OLE objects are handled in memory. An attacker can exploit this issue by tricking a user into opening a specially crafted OLE object file that could execute arbitrary code in the context of the user. C Tenable Network Security, Inc...

Adobe Acrobat < 9.4.7 Multiple Memory Corruption Vulnerabilities (APSB11-30)

The remote Windows host contains a version of Adobe Acrobat earlier than 9.4.7. Such versions are affected by multiple memory corruption vulnerabilities related to the 'Universal 3D' U3D file format and the 'Product Representation Compact' PRC component. A remote attacker could exploit this by...

Advantech / BroadWin WebAccess webvrpcs.exe Service Remote Code Execution (credentialed check)

Binary data scadaadvantechwebaccessrcelocal.nbin...

Advantech / BroadWin WebAccess webvrpcs.exe Service Remote Code Execution (uncredentialed check) (deprecated)

The Advantech / BroadWin WebAccess software installed on the remote Windows host includes an RPC service webvrpcs.exe that listens remotely on TCP port 4592. It is affected by two vulnerabilities : - An overflow condition exists due to improper validation of user-supplied input. An unauthenticate...

MS11-083: Vulnerability in TCP/IP Could Allow Remote Code Execution (2588516)

The TCP/IP stack in use on the remote Windows host is affected by an integer overflow vulnerability. Sending a continuous flow of specially crafted UDP packets to a closed port can result in arbitrary code execution in kernel mode. C Tenable Network Security, Inc. include"compat.inc"; if...

Novell ZENworks Handheld Management Common.dll messageID Request Field Parsing Traversal Arbitrary File Creation

The version of the 'Common.dll' library included with the ZENworks Handheld Management install on the remote Windows host is affected by a directory traversal vulnerability because it fails to sanitize user input to the 'messageID' field in requests of directory traversal sequences. An...

Symantec IM Manager < 8.4.18 Multiple Vulnerabilities (SYM11-012)

The version of Symantec IM Manager running on the remote host is earlier than 8.4.18. Such versions are affected by the following vulnerabilities in the management console : - Multiple XSS. CVE-2011-0552 - An unspecified SQL injection. CVE-2011-0553 - An unspecified code injection. CVE-2011-0554 ...

Check Point SSL Network Extender ActiveX Control Remote Code Execution

The version of the Check Point SSL Network Extender ActiveX control installed on the remote Windows host reportedly contains a remote code execution vulnerability. If an attacker can trick a user on the affected host into viewing a specially crafted HTML document, he can leverage this issue to...

HP Easy Printer Care Software ActiveX Control Remote Code Execution Vulnerabilities

The version of the HPTicketMgr.dll ActiveX control, part of HP Easy Printer Care Software and installed on the remote Windows host, is affected by several vulnerabilities : - The 'SaveXML' method in the XMLSimpleAccessor class ActiveX control is prone to a directory traversal attack and can be...

Flash Player <= 10.3.181.36 Multiple Vulnerabilities (APSB11-21)

According to its version, the instance of Flash Player installed on the remote Windows host is 10.3.181.36 or earlier. As such, it is reportedly affected by several critical vulnerabilities : - Multiple buffer overflow vulnerabilities could lead to code execution. CVE-2011-2130, CVE-2011-2134,...

MS11-061: Vulnerability in Remote Desktop Web Access Could Allow Elevation of Privilege (2546250) (uncredentialed check)

The version of Remote Desktop Web Access running on the remote host has a reflected cross-site scripting vulnerability. Input to the 'ReturnUrl' parameter of login.aspx is not properly sanitized. A remote attacker could exploit this by tricking a user into requesting a maliciously crafted URL,...

Trend Micro Control Manager CasLogDirectInsertHandler.cs Remote Code Execution

The Trend Micro Control Manager install on the remote Windows host is missing Critical Patch 1422. As such, the included CasLogDirectInsert.aspx http handler reportedly has a vulnerability by which malicious XML and schema information can be used in queries in the backend database. Using a...

HP iNode Management Center Remote Code Execution (HPSB3C02687)

The remote Windows host has an installation of HP iNode Management Center that is affected by a remote code execution vulnerability. An unauthenticated remote attacker can send a specially crafted packet that could result in a stack-based buffer overflow. A successful attack will allow running...

Adobe ColdFusion Multiple Vulnerabilities (APSB11-04) (credentialed check)

The version of Adobe ColdFusion running on the remote Windows host is affected by multiple vulnerabilities : - Multiple cross-site scripting vulnerabilities exist in the ColdFusion administrator console. CVE-2011-0580 - Multiple CRLF injection vulnerabilities in various tags allow adding headers...

IDrive Online Backup ActiveX Control < 3.4.1 Arbitrary File Overwrite

The version of IDrive installed on the remote Windows host is earlier than 3.4.1 and includes a third-party ActiveX control named UniBasicPack.UniTextBox from CyberActiveX with an insecure method. Specifically, the 'SaveToFile' method can be abused to overwrite arbitrary files. Note that this...