CVE-2014-3911: Improper Control of Generation of Code

Samsung iPOLiS Device Manager before 1.8.7 allow remote attackers to execute arbitrary code via unspecified values to the 1 Start, 2 ChangeControlLocalName, 3 DeleteDeviceProfile, 4 FrameAdvanceReader, or other unknown method in the XNSSDKDEVICE.XnsSdkDeviceCtrlForIpInstaller.1 ActiveX control...

CVE-2014-3912: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the FindConfigChildeKeyList method in the XNSSDKDEVICE.XnsSdkDeviceCtrlForIpInstaller.1 ActiveX control in Samsung iPOLiS Device Manager before 1.8.7 allows remote attackers to execute arbitrary code via a long value...