Design/Logic Flaw

An ActiveX control in gwcls1.dll in the client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to execute arbitrary code via 1 a pointer argument to the SetEngine method or 2 an XPItem pointer argument to an unspecified method...

DSquare Exploit Pack: D2SEC_GWCLS

Name| d2secgwcls ---|--- CVE| CVE-2012-0439 Exploit Pack| D2ExploitPack Description| Novell GroupWise gwcls1.dll ActiveX Remote Code Execution Vulnerability Notes|...

CVE-2012-0439

CVE-2012-0439 is an ActiveX remote-code-execution vulnerability in the Novell GroupWise Client gwcls1.dll. The issue affects GroupWise 8.x before 8.0.3 HP2 and 2012 before SP1 HP1, where an attacker can trigger arbitrary code execution via a pointer argument to the SetEngine method or an XPItem p...

Honeywell HSC Remote Deployer ActiveX Remote Code Execution

This module exploits a vulnerability found in the Honeywell HSC Remote Deployer ActiveX. This control can be abused by using the LaunchInstaller function to execute an arbitrary HTA from a remote location. This module has been tested successfully with the HSC Remote Deployer ActiveX installed wit...

Mitsubishi Electric Automation MX Component V3 ActiveX Vulnerability

OVERVIEW This advisory is a follow-up to the alert titled ICS-ALERT-13-091-01 Mitsubishi Electric Automation MX Buffer Overflow Vulnerability that was published April 1, 2013, on the ICS-CERT Web siteICSA-13-091-01, http://ics-cert.us-cert.gov/alerts/ICSA-13-091-01, last accessed May 20, 2013...

McAfee VirusScan Enterprise Untrusted Search Path Vulnerability (Windows)

This host is installed with McAfee VirusScan Enterprise and is prone to untrusted search path vulnerability. OpenVAS Vulnerability Test $Id: gbmcafeevseuntrustedsearchpathvulnwin.nasl 6115 2017-05-12 09:03:25Z teissa $ McAfee VirusScan Enterprise Untrusted Search Path Vulnerability Windows Author...

Adobe Flash Player SWF Content Regular Expression Heap Overflow

Added: 02/21/2013 CVE: CVE-2013-0634 BID: 57788 OSVDB: 89936 Background Adobe Flash Player is a cross-platform browser plug-in providing visual enhancements for web pages. Problem The ActiveX version of Adobe Flash Player on Windows is vulnerable to heap buffer overflow because it does not proper...

Adobe Flash Player SWF Content Regular Expression Heap Overflow

Added: 02/21/2013 CVE: CVE-2013-0634 BID: 57788 OSVDB: 89936 Background Adobe Flash Player is a cross-platform browser plug-in providing visual enhancements for web pages. Problem The ActiveX version of Adobe Flash Player on Windows is vulnerable to heap buffer overflow because it does not proper...

McAfee VirusScan Enterprise Untrusted Search Path Vulnerability - Windows

McAfee VirusScan Enterprise is prone to untrusted search path vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ecava IntegraXor < 4.0.4283 ActiveX Remote Buffer Overflow

Binary data 6697.prm...

Siemens SIMATIC RF-MANAGER KeyHelp.ocx Buffer Overflow

Binary data scadasiemensrfmanageractivex.nbin...

Novell GroupWise Client ActiveX SetEngine Pointer Manipulation

Added: 02/18/2013 CVE: CVE-2012-0439 BID: 57658 OSVDB: 89700 Background Novell GroupWise is an e-mail and collaboration product suite. Problem Several methods in the GroupWise ActiveX plugin do not validate user-supplied pointers that are passed as function arguments. This may allow an attacker t...

Novell GroupWise Client ActiveX SetEngine Pointer Manipulation

Added: 02/18/2013 CVE: CVE-2012-0439 BID: 57658 OSVDB: 89700 Background Novell GroupWise is an e-mail and collaboration product suite. Problem Several methods in the GroupWise ActiveX plugin do not validate user-supplied pointers that are passed as function arguments. This may allow an attacker t...

Novell GroupWise Client ActiveX SetEngine Pointer Manipulation

Added: 02/18/2013 CVE: CVE-2012-0439 BID: 57658 OSVDB: 89700 Background Novell GroupWise is an e-mail and collaboration product suite. Problem Several methods in the GroupWise ActiveX plugin do not validate user-supplied pointers that are passed as function arguments. This may allow an attacker t...

Novell GroupWise Client ActiveX SetEngine Pointer Manipulation

Added: 02/18/2013 CVE: CVE-2012-0439 BID: 57658 OSVDB: 89700 Background Novell GroupWise is an e-mail and collaboration product suite. Problem Several methods in the GroupWise ActiveX plugin do not validate user-supplied pointers that are passed as function arguments. This may allow an attacker t...

Ecava IntegraXor < 4.00.4283 ActiveX Remote Buffer Overflow

Binary data scadaintegraxor4004283.nbin...

Novell GroupWise Client gwcls1.dll ActiveX Remote Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::IE,...

Novell GroupWise Client gwcls1.dll ActiveX Remote Code Execution

Exploit for windows platform in category remote exploits require 'msf/core' class Metasploit3 HttpClients::IE, :uaminver = "6.0", :uamaxver = "9.0", :javascript = true, :osname = OperatingSystems::WINDOWS, :rank = NormalRanking, :classid = "601D7813-408F-11D1-98D7-444553540000", :method =...

Novell Groupwise Client - 'gwcls1.dll' ActiveX Remote Code Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::IE,...

CVE-2012-4700

Multiple buffer overflows in an ActiveX control in PE3DO32A.ocx in IntegraXor SCADA Server 4.00 build 4250.0 and earlier allow remote attackers to execute arbitrary code via a crafted HTML document...