CVE-2011-5291

The SaveData method in the Cygnicon.ViewControl.1 ActiveX control in CyViewer.ocx in Ashampoo 3D CAD Professional 3.x before 3.0.2 allows remote attackers to write to arbitrary files via a pathname in the first argument...

CVE-2011-5290

The SaveToFile method in the UniBasicPack.UniTextBox ActiveX control in UniBasic100EDA1811C.ocx in IDrive Online Backup 3.4.0 allows remote attackers to write to arbitrary files via a pathname in the first argument...

CVE-2011-5289

The SaveDecrypted method in the ChilkatCrypt2.ChilkatOmaDrm.1 ActiveX control in ChilkatCrypt2.dll in aTube Catcher 2.3.570 allows remote attackers to write to arbitrary files via a pathname in the argument...

CVE-2011-5288

Multiple buffer overflows in the ThreeDify.ThreeDifyDesigner.1 ActiveX control in ActiveSolid.dll in ThreeDify Designer 5.0.2 allow remote attackers to execute arbitrary code via a long argument to the 1 cmdExport, 2 cmdImport, 3 cmdOpen, or 4 cmdSave method...

Design/Logic Flaw

The cmdSave method in the ThreeDify.ThreeDifyDesigner.1 ActiveX control in ActiveSolid.dll in ThreeDify Designer 5.0.2 allows remote attackers to write to arbitrary files via a pathname in the argument...

Buffer overflow

Multiple buffer overflows in the ThreeDify.ThreeDifyDesigner.1 ActiveX control in ActiveSolid.dll in ThreeDify Designer 5.0.2 allow remote attackers to execute arbitrary code via a long argument to the 1 cmdExport, 2 cmdImport, 3 cmdOpen, or 4 cmdSave method...

Design/Logic Flaw

The SaveData method in the Cygnicon.ViewControl.1 ActiveX control in CyViewer.ocx in Ashampoo 3D CAD Professional 3.x before 3.0.2 allows remote attackers to write to arbitrary files via a pathname in the first argument...

Design/Logic Flaw

The EaseWeFtp.FtpLibrary ActiveX control in EaseWeFtp.ocx in Easewe FTP OCX 4.5.0.9 does not restrict access to certain methods, which allows remote attackers to execute arbitrary files via a pathname in the first argument to the 1 Execute or 2 Run method, 3 write to arbitrary files via a pathnam...

Code injection

The SaveDecrypted method in the ChilkatCrypt2.ChilkatOmaDrm.1 ActiveX control in ChilkatCrypt2.dll in aTube Catcher 2.3.570 allows remote attackers to write to arbitrary files via a pathname in the argument...

CVE-2011-5293

The cmdSave method in the ThreeDify.ThreeDifyDesigner.1 ActiveX control in ActiveSolid.dll in ThreeDify Designer 5.0.2 allows remote attackers to write to arbitrary files via a pathname in the argument...

CVE-2011-5292

Affected product: Easewe FTP OCX 4.5.0.9, specifically the EaseWeFtp.ocx’s FtpLibrary ActiveX control. The vulnerability arises from insufficient access restrictions on methods (Execute, Run, CreateLocalFile, CreateLocalFolder, DeleteLocalFile), enabling a remote attacker to perform arbitrary fil...

CVE-2011-5293

The CVE-2011-5293 entry concerns ThreeDify Designer 5.0.2. The cmdSave method of the ThreeDifyDesigner.1 ActiveX control in ActiveSolid.dll allows remote attackers to write to arbitrary files via a pathname argument. Affected product: ThreeDify Designer 5.0.2 (ActiveX control). Vulnerability type...

CVE-2011-5288

Multiple buffer overflows in the ThreeDify.ThreeDifyDesigner.1 ActiveX control in ActiveSolid.dll in ThreeDify Designer 5.0.2 allow remote attackers to execute arbitrary code via a long argument to the 1 cmdExport, 2 cmdImport, 3 cmdOpen, or 4 cmdSave method...

CVE-2011-5289

The CVE-2011-5289 entry concerns the SaveDecrypted method of the ChilkatCrypt2.ChilkatOmaDrm.1 ActiveX control in ChilkatCrypt2.dll used by aTube Catcher 2.3.570. The vulnerability allows remote attackers to write to arbitrary files by supplying a pathname in the argument to SaveDecrypted. Docume...

CVE-2011-5290

Technical summary (CVE-2011-5290): The vulnerability affects IDrive Online Backup 3.4.0, specifically the UniBasic100_EDA1811C.ocx’s UniBasicPack.UniTextBox ActiveX control. The SaveToFile method can be abused to write to arbitrary files by supplying a pathname as the first argument. This is a re...

CVE-2011-5288

CVE-2011-5288 affects ThreeDify Designer 5.0.2 via the ActiveSolid.dll ActiveX control (ThreeDifyDesigner.1). The vulnerability is due to multiple buffer overflows in the ActiveX control that can be triggered by sending a long argument to one of four methods: cmdExport, cmdImport, cmdOpen, or cmd...

Creative Software AutoUpdate Engine CTSUEng.ocx ActiveX Control Buffer Overflow (CVE-2008-0955)

A remote code execution vulnerability has been reported inCreative Software AutoUpdate Engine. The vulnerability is due to boundary errors within the AutoUpdate Engine ActiveX control CTSUEng.ocx. A remote attacker can exploit this vulnerability by enticing a user to open a malicious web page...

Advantech WebAccess SCADA webeye.ocx ip_address Parameter Buffer Overflow - ver 2 (CVE-2014-8388)

A stack buffer overflow exists in Advantech's WebAccess SCADA software. The vulnerability is due to insufficient input validation of the ipaddress parameter contained in the webeye.ocx ActiveX control, a part of the WebAccess Client. A remote, unauthenticated attacker could exploit this...

Facebook Photo Uploader ActiveX Control FileMask Method Buffer Overflow - Ver2 (CVE-2008-0660)

Facebook is a social networking website which allows its users to publish their photos. The website publishes an ActiveX control, ImageUploader4.ocx, to assist photo uploading. A buffer overflow vulnerability exists in the Facebook Photo Uploader ActiveX control. The flaw is due to a boundary err...

PTC IsoView ActiveX Control Multiple Methods Buffer Overflow (CVE-2014-9267)

Multiple stack-based buffer overflow vulnerabilities exist in the PTC IsoView ActiveX Control. These vulnerabilities are caused by insufficient validation of the Object identifier arguments to multiple methods of the ActiveX control. A remote attacker can exploit these vulnerabilities by enticing...