Novell GroupWise Client ActiveX gwmim1.ocx Untrusted Pointer Dereference (CVE-2013-0804)

An untrusted pointer dereference vulnerability has been reported in the ActiveX control for Novell GroupWise Client for Windows...

Oracle WebCenter Capture ActiveX SetAnnotationFont buffer overflow

Added: 06/26/2013 CVE: CVE-2013-1516 BID: 59112 OSVDB: 92387 Background Oracle WebCenter Capture formerly Oracle Document Capture is a centralized document scanning solution. Problem The Import Server subcomponent of Oracle WebCenter Capture is affected by a buffer overflow vulnerability. The...

Oracle WebCenter Capture ActiveX SetAnnotationFont buffer overflow

Added: 06/26/2013 CVE: CVE-2013-1516 BID: 59112 OSVDB: 92387 Background Oracle WebCenter Capture formerly Oracle Document Capture is a centralized document scanning solution. Problem The Import Server subcomponent of Oracle WebCenter Capture is affected by a buffer overflow vulnerability. The...

Oracle Document Capture ActiveX Control SetAnnotationFont Buffer Overflow (CVE-2013-1516)

A buffer overflow vulnerability exists in the BlackIceDevMode.ocx ActiveX control included with Oracle Document Capture...

Oracle WebCenter Capture ActiveX SetAnnotationFont buffer overflow

Added: 06/26/2013 CVE: CVE-2013-1516 BID: 59112 OSVDB: 92387 Background Oracle WebCenter Capture formerly Oracle Document Capture is a centralized document scanning solution. Problem The Import Server subcomponent of Oracle WebCenter Capture is affected by a buffer overflow vulnerability. The...

Oracle WebCenter Capture ActiveX SetAnnotationFont buffer overflow

Added: 06/26/2013 CVE: CVE-2013-1516 BID: 59112 OSVDB: 92387 Background Oracle WebCenter Capture formerly Oracle Document Capture is a centralized document scanning solution. Problem The Import Server subcomponent of Oracle WebCenter Capture is affected by a buffer overflow vulnerability. The...

Lotus Quickr for Domino qp2.dll ActiveX Control Integer Overflow Remote Code Execution

An unspecified flaw in the Lotus Quickr for Domino qp2.dll ActiveX control has an unspecified integer overflow that leads to a heap buffer overflow. By tricking a victim into opening a specially crafted web page, an attacker can leverage this vulnerability to execute arbitrary code, subject to th...

Buffer overflow

Buffer overflow in the Lotus Quickr for Domino ActiveX control in qp2.cab in IBM Lotus Quickr 8.1 before FP 8.1.0.32-001a, 8.2 before FP 8.2.0.28-001a, and 8.5.1 before FP 8.5.1.39-002a for Domino allows remote attackers to execute arbitrary code via a crafted web site...

CVE-2013-3026

CVE-2013-3026 affects IBM Lotus Quickr for Domino via the qp2.cab ActiveX control. An integer/heap overflow in qp2.dll/qp2.cab leads to remote code execution when a user visits a crafted web page with IE. Exploitation requires user interaction (per ZDI); successful exploitation could run code in ...

Microsys Promotic < 8.1.5 Multiple Vulnerabilities - Active Check

Microsys Promotic is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AXIS Media Control 6.2.10.11 - Unsafe ActiveX Method

AXIS Media Control 6.2.10.11 - Unsafe ActiveX Method ======================================================================== AXIS ==================================================================== ======================================================================== 1.Advisory Information...

AXIS Media Control 6.2.10.11 - Unsafe ActiveX Method

Exploit for windows platform in category dos / poc 1.Advisory Information Title: AXIS Media Control ActiveX vulnerability Date Published: 12/06/2013 Date of last updated: 12/06/2013 2.Vulnerability Description A vulnerability has been found in this devices: -CVE-2013-3543. Exposed Unsafe ActiveX...

AXIS Media Control Active-X File Corruption

======================================================================== AXIS ==================================================================== ======================================================================== 1.Advisory Information Title: AXIS Media Control ActiveX vulnerability Date...

AXIS Media Control 6.2.10.11 - Unsafe ActiveX Method

======================================================================== AXIS ==================================================================== ======================================================================== 1.Advisory Information Title: AXIS Media Control ActiveX vulnerability Date...

ABB DataManager National Instruments Multiple ActiveX Controls cwui.ocx ExportStyle() Method Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of ABB DataManager Data Analysis. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Java Applet - Driver Manager Privileged 'toString()' Remote Code Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' class Metasploit3 false def initialize inf...

Synactis PDF In-The-Box - ConnectToSynactic Stack Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::IE,...

Java Applet Driver Manager Privileged toString() Remote Code Execution

This Metasploit module abuses the java.sql.DriverManager class where the toString method is called over user supplied classes, from a doPrivileged block. The vulnerability affects Java version 7u17 and earlier. This exploit bypasses click-to-play on IE throw a specially crafted JNLP file. This...

Synactis PDF In-The-Box ConnectToSynactic Stack Buffer Overflow

This Metasploit module exploits a vulnerability found in Synactis' PDF In-The-Box ActiveX component, specifically PDFIN1.ocx. When a long string of data is given to the ConnectToSynactis function, which is meant to be used for the ldCmdLine argument of a WinExec call, a strcpy routine can end up...

Java Applet Driver Manager Privileged toString() Remote Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' class Metasploit3 false def initialize inf...