10868 matches found
Microsoft Internet Explorer Ref Counting释放后重用远程代码执行漏洞（MS12-077）
BUGTRAQ ID: 56830 CVECAN ID: CVE-2012-4787 Microsoft Internet Explorer是微软公司推出的一款网页浏览器，使用相当广泛。 Microsoft Internet Explorer 6、7、8、9、10在处理恶意HTML内容时，Ref Counting存在错误的内存操作，通过引诱用户浏览恶意网站，未经身份验证的远程攻击者可利用此漏洞以当前用户权限执行任意代码。 0 Microsoft Internet Explorer 9.x Microsoft Internet Explorer 8.x Microsoft Internet...
Dolphin3D 1.52 / 1.60 Command Execution Vulnerability
This Metasploit module exploits the default security setting in the Dolphin3D web browser. The default security setting "cautious" allows arbitrary ActiveX Controls, thus remote command execution. Dolphin3D web browser ActiveX Remote Command Execution Date: Dez 9 2012 Author: Rh0 Affected Version...
Dolphin3D 1.52 / 1.60 Command Execution
Dolphin3D web browser ActiveX Remote Command Execution Date: Dez 9 2012 Author: Rh0 Affected Version: Dolphin3D 1.52 and 1.60 Tested on: Windows XP Professional SP3 EN require 'msf/core' class Metasploit3 'Dolphin3D web browser ActiveX Exec', 'Description' = %q This module exploits the default...
Advantech Studio 7.0 - SCADAHMI Directory Traversal
Advantech Studio 7.0 - SCADAHMI Directory Traversal Exploit Title: Advantech Studio v7.0 SCADA/HMI Directory Traversal 0-day Google Dork: N/A Date: 2012-12-03 Exploit Author: Nin3 Vendor Homepage: http://advantech.com.tw Version: 7.0 Build Number 0501.1111.0402.0000 Tested on: Windows CVE : N/A '...
Novell GroupWise Multiple Remote Code Execution Vulnerabilities
High-Tech Bridge Security Research Lab discovered multiple untrusted pointer dereference vulnerabilities in Novell GroupWise, which could be exploited to compromise a remote system. 1 Untrusted Pointer Dereference in Novell GroupWise: CVE-2013-0804 1.1 The vulnerability exists due to an untrusted...
Microsoft IE CFormElement释放后重用远程代码执行漏洞（MS12-071）
BUGTRAQ ID: 56420 CVE ID: CVE-2012-1538 Microsoft Internet Explorer是微软公司推出的一款网页浏览器，使用相当广泛。 IE 9 "CFormElement"类访问错误初始化或删除的对象时存在远程代码执行漏洞，攻击者可利用此漏洞访问已经释放的内存，导致执行任意代码，破坏内存。 0 Microsoft Internet Explorer 9.x 临时解决方法： 设置互联网和内联网安全区域为“高”，以阻止这些区域内的ActiveX控件和脚本。 配置IE，在运行活动脚本时提示，或者直接禁用。 厂商补丁： Microsoft...
McAfee Virtual Technician ActiveX Control Insecure Method
High-Tech Bridge Security Research Lab discovered vulnerability in McAfee Virtual Technician ActiveX control, which can be exploited by remote malicious person to overwrite arbitrary files with garbage data on a vulnerable system. 1 Insecure method in McAfee Virtual Technician ActiveX control:...
SCADA PcVue Activex Control Insecure Method (AddPage)
...
SCADA PcVue Activex Control Insecure Method (SaveObject)
...
SCADA ICONICS WebHMI ActiveX Stack Overflow (CVE-2011-2089)
A code execution vulnerability exists in ICONICS WebHMI's ActiveX control. The vulnerability occurs in GenVersion.dll due to improper bounds checking before the input is copied onto the stack. A remote attacker could exploit this vulnerability by sending a long string of data to the...
SCADA PcVue Activex Control Insecure Method (LoadObject)
...
PROMOTIC ActiveX Control Insecure method (SaveCfg)
...
PROMOTIC ActiveX Control Insecure method (AddTrend)
...
CVE-2012-5897
The 1 SimpleTree and 2 ReportTree classes in the ARDoc ActiveX control ARDoc.dll in Quest InTrust 10.4.0.853 and earlier do not properly implement the SaveToFile method, which allows remote attackers to write or overwrite arbitrary files via the bstrFileName argument...
CVE-2012-5896
The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not properly implement the Add method, which allows remote attackers to execute arbitrary code via a memory address in the first argument, related to an "uninitialized pointer."...
CVE-2012-5896
The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not properly implement the Add method, which allows remote attackers to execute arbitrary code via a memory address in the first argument, related to an "uninitialized pointer."...
CVE-2012-5896
CVE-2012-5896 affects Quest InTrust, specifically the Annotation Objects ActiveX control (AnnotateX.dll) prior to or at 10.4.0.853. The vulnerability arises from the Add method not being properly implemented, enabling remote code execution via a memory address supplied in the first argument, tied...
CVE-2012-5897
The 1 SimpleTree and 2 ReportTree classes in the ARDoc ActiveX control ARDoc.dll in Quest InTrust 10.4.0.853 and earlier do not properly implement the SaveToFile method, which allows remote attackers to write or overwrite arbitrary files via the bstrFileName argument...
CVE-2012-5897
CVE-2012-5897 affects Quest InTrust 10.4.0.853 and earlier via the ARDoc ActiveX control (ARDoc.dll). The (1) SimpleTree and (2) ReportTree classes do not properly implement the SaveToFile method, enabling remote attackers to write or overwrite arbitrary files through the bstrFileName argument. D...
SafeNet PrivAgent.ocx ActiveX control ChooseFilePath buffer overflow
Added: 11/16/2012 BID: 56297 OSVDB: 86723 Background SafeNet Hardware Against Software Piracy HASP solutions include the PrivAgent.ocx ActiveX control. Problem A buffer overflow vulnerability in the ChooseFilePath method of the PrivAgent.ocx ActiveX control allows command execution when a user...