Panasonic Security API SDK Iprosapi ActiveX Control Buffer Overflow (CVE-2015-4647)

A buffer overflow vulnerability exists in the Ipropsapi ActiveX Control component of the Panasonic Security API SDK. The vulnerability is due to an error when processing the FilePassword property. A remote attacker can exploit this vulnerability by enticing the victim to visit a specially crafted...

CVE-2015-4648

Stack-based buffer overflow in the Ipropsapi.ipropsapiCtrl.1 ActiveX control in ipropsapivideo in Panasonic Security API PS-API ActiveX SDK before 8.10.18 allows remote attackers to execute arbitrary code via a long string to the MulticastAddr method...

Stack overflow

Stack-based buffer overflow in the Ipropsapi.ipropsapiCtrl.1 ActiveX control in ipropsapivideo in Panasonic Security API PS-API ActiveX SDK before 8.10.18 allows remote attackers to execute arbitrary code via a long string to the MulticastAddr method...

CVE-2015-4648

Stack-based buffer overflow in the Ipropsapi.ipropsapiCtrl.1 ActiveX control in ipropsapivideo in Panasonic Security API PS-API ActiveX SDK before 8.10.18 allows remote attackers to execute arbitrary code via a long string to the MulticastAddr method...

Unitronics VisiLogic OPLC IDE Vulnerabilities (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-15-274-02 Unitronics VisiLogic OPLC IDE Vulnerabilities that was published November 12, 2015, on the NCCIC/ICS-CERT web site. HP’s Zero Day Initiative ZDI reported to ICS-CERT that Steven Seeley of Source Incite,...

DVDVideoTool 1 Click Extract Audio ActiveX Control Buffer Overflow Vulnerability

DVDVideoTool 1 Click Extract Audio is a free audio extraction software package from DVDVideoTool.com. A buffer overflow vulnerability exists in DVDVideoTool 1 Click Extract Audio. The vulnerability is due to the program failing to perform proper boundary checking on user-submitted input. An...

1 Click Audio Converter ActiveX Control 'SkinCrafter.dll' ActiveX Buffer Overflow Vulnerability

DVDVideoTool 1 Click Audio Converter is a set of audio file format conversion software from DVDVideoTool.com. A buffer overflow vulnerability in the DVDVideoTool.com 1 Click Audio Converter ActiveX control allows remote attackers to construct a malicious web page and trick users into parsing it,...

Panasonic Security API SDK ipropsapivideo ActiveX Control MulticastAddr Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Panasonic Security API. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Panasonic Security API SDK Ipropsapi ActiveX Control GetInfoString Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability could allow remote attackers to execute arbitrary code on vulnerable installations of the Panasonic Security API SDK. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in...

Microsoft Windows Common Controls CVE-2015-1756 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits will allow the attacker to execute arbitrary code within the context of the application typically Internet Explorer that uses the ActiveX control. Technologies Affected Avaya Meeting Exchange -...

CVE-2015-1000

Stack-based buffer overflow in the OpenForIPCamTest method in the RTSPVIDEO.rtspvideoCtrl.1 aka SStreamVideo ActiveX control in Moxa SoftCMS before 1.3 allows remote attackers to execute arbitrary code via the StrRtspPath parameter...

Stack overflow

Stack-based buffer overflow in the OpenForIPCamTest method in the RTSPVIDEO.rtspvideoCtrl.1 aka SStreamVideo ActiveX control in Moxa SoftCMS before 1.3 allows remote attackers to execute arbitrary code via the StrRtspPath parameter...

CVE-2015-1000

Stack-based buffer overflow in the OpenForIPCamTest method in the RTSPVIDEO.rtspvideoCtrl.1 aka SStreamVideo ActiveX control in Moxa SoftCMS before 1.3 allows remote attackers to execute arbitrary code via the StrRtspPath parameter...

CVE-2015-1000

This CVE (CVE-2015-1000) affects Moxa SoftCMS prior to v1.3 and specifically the RTSPVIDEO.rtspvideoCtrl.1 ActiveX control. The vulnerability is a stack-based buffer overflow in the OpenForIPCamTest method (via the StrRtspPath parameter) that allows remote code execution. Exploitation is remote (...

CVE-2015-0140

An unspecified ActiveX control in IBM SPSS Statistics 22.0 through FP1 on 32-bit platforms allows remote attackers to execute arbitrary code via a crafted HTML document...

CVE-2015-0140

IBM SPSS Statistics 22.0 on Windows 32‑bit is affected by CVE-2015-0140 due to a vulnerable ActiveX control in the SPSS Statistics ActiveX component. A remote attacker can cause arbitrary code execution by forcing a user to render a specially crafted HTML page, potentially compromising the system...

CVE-2015-0140

An unspecified ActiveX control in IBM SPSS Statistics 22.0 through FP1 on 32-bit platforms allows remote attackers to execute arbitrary code via a crafted HTML document...

IBM SPSS Statistics ActiveX Control Code Execution Vulnerability

IBM SPSS Statistics is a suite of statistical analysis software that helps organizations address the entire analytics process, from planning and data collection to analysis, reporting, and deployment. A code execution vulnerability exists in the ActiveX control of IBM SPSS Statistics version 22.0...

Oracle WebCenter Forms Recognition Sssplt30.ocx Arbitrary File Creation - Ver2 (CVE-2012-1710)

A directory traversal vulnerability has been reported in Oracle WebCenter Forms Recognition. The vulnerability is due to insufficient validation of parameters used in a certain method in the Sssplt30 ActiveX control. A remote attacker can exploit this vulnerability by enticing a target user to op...

Microsoft Visual Studio WMI Object Code Execution (MS06-073) - Ver2 (CVE-2006-4704)

A remote code execution vulnerability exists in Microsoft Visual Studio 2005. Microsoft Visual Studio is a software development product for computer programmers. It centers on an integrated development environment which lets programmers create standalone applications, web sites, web applications,...