10860 matches found
Information disclosure
An information disclosure vulnerability exists in the way some ActiveX objects are instantiated, aka "Microsoft ActiveX Information Disclosure Vulnerability."...
CVE-2017-0242
The CVE-2017-0242 entry describes an information disclosure vulnerability in the way some Microsoft ActiveX objects are instantiated. The root cause is how ActiveX objects are instantiated, which could allow access to protected memory contents. Affected context includes Windows environments where...
CVE-2017-0242
An information disclosure vulnerability exists in the way some ActiveX objects are instantiated, aka "Microsoft ActiveX Information Disclosure Vulnerability."...
Microsoft Windows ActiveX Control Local Information Disclosure Vulnerability
Microsoft Windows is the popular computer operating system. An information disclosure vulnerability exists in the instantiation of ActiveX objects in some versions of Windows, allowing an attacker to access protected memory...
Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CVE-2017-0236)
A remote code execution vulnerability exists in the way that the Chakra JavaScript engine renders when handling objects in memory in Microsoft Edge. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. In a web-base...
Microsoft ActiveX 'Msadcf.dll' Information Disclosure Vulnerability (KB4018927)
This host is missing an important security update according to Microsoft KB4018927. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...
Scripting Engine Memory Corruption Vulnerability
A remote code execution vulnerability exists in the way that Microsoft browser JavaScript engines render content when handling objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. In a web-based...
Security Update for the Microsoft ActiveX Information Disclosure Vulnerability in Windows Server 2008: May 9, 2017
Security Update for the Microsoft ActiveX Information Disclosure Vulnerability in Windows Server 2008: May 9, 2017 Summary An information disclosure vulnerability exists in the way that some ActiveX objects are instantiated. An attacker who successfully exploits this vulnerability could gain acce...
Microsoft ActiveX Information Disclosure Vulnerability
An information disclosure vulnerability exists in the way some ActiveX objects are instantiated. An attacker who successfully exploited this vulnerability could gain access to protected memory contents. To exploit this vulnerability, an attacker would need to convince a user to open a malicious...
Scripting Engine Memory Corruption Vulnerability
A remote code execution vulnerability exists in the way that Microsoft browser JavaScript engines render content when handling objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. In a web-based...
Scripting Engine Memory Corruption Vulnerability
A remote code execution vulnerability exists in the way that Microsoft browser JavaScript engines render content when handling objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. In a web-based...
Scripting Engine Memory Corruption Vulnerability
A remote code execution vulnerability exists in the way that Microsoft browser JavaScript engines render content when handling objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. In a web-based...
Scripting Engine Memory Corruption Vulnerability
A remote code execution vulnerability exists in the way that Microsoft browser JavaScript engines render content when handling objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. In a web-based...
Scripting Engine Memory Corruption Vulnerability
A remote code execution vulnerability exists in the way that Microsoft browser JavaScript engines render content when handling objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. In a web-based...
Microsoft Windows CVE-2017-0242 ActiveX Control Local Information Disclosure Vulnerability
Description Microsoft Windows is prone to a local information-disclosure vulnerability. Successfully exploiting this issue allows local attackers to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 f...
Advantech WebAccess 8.2_20170330 ActiveX plugin has a local command execution vulnerability
Advantech WebAccess is a set of HMI/SCADA software from Advantech based on browser architecture. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. A local command execution vulnerability exists in the...
Stack Overflow Vulnerability in the Connect Method of Mosa SoftNVR-IA NVRPB Controls
Mosa Video Surveillance System SoftNVR-IA is a real-time IP video surveillance software developed by Mosa Technology Shanghai Co. A stack overflow vulnerability exists in the Connect method of the NVRPB ActiveX control of Mosa Video Surveillance System SoftNVR-IA. By tricking the user into visiti...
AOL Phobos.Playlist ActiveX Control Stack Buffer Overflow
A buffer overflow vulnerability exists in AOL 9.5. The vulnerability is due to a boundary error when handling a certain function call with an overly long value. Remote attackers can exploit this vulnerability by enticing a target user to open a specially crafted web page with an embedded code tha...
Scripting Engine Memory Corruption Vulnerability
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...
Scripting Engine Memory Corruption Vulnerability
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...