Mitsubishi Electric Automation MC-WorX Suite Unsecure ActiveX Control

OVERVIEW This advisory is a follow-up to the original alert, titled ICS-ALERT-13-259-01 Mitsubishi MC-WorX Suite Unsecure ActiveX Control,ICS-ALERT-13-259-01 Mitsubishi MC-WorkX Suite Insecure ActiveX Control, http://ics-cert.us-cert.gov/alerts/ICS-ALERT-13-259-01, web site last accessed February...

CVE-2014-5424

Rockwell Automation Connected Components Workbench CCW before 7.00.00 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via an invalid property value to an ActiveX control that was built with an outdated compiler...

Code injection

Rockwell Automation Connected Components Workbench CCW before 7.00.00 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via an invalid property value to an ActiveX control that was built with an outdated compiler...

CVE-2014-5424

Rockwell Automation Connected Components Workbench CCW before 7.00.00 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via an invalid property value to an ActiveX control that was built with an outdated compiler...

CVE-2014-5424

The CVE-2014-5424 entry affects Rockwell Automation’s Connected Components Workbench (CCW) prior to 7.00.00. The vulnerability lies in an old compiler-generated ActiveX control that accepts invalid property values, enabling remote attackers to crash the application or potentially execute arbitrar...

EMC ApplicationXtender (KeyWorks) ActiveX Control 缓冲区溢出漏洞

No description provided by source...

CA eTrust PestPatrol ActiveX Control 缓冲区溢出漏洞

No description provided by source...

HP Sprinter Remote Code Execution

The version of HP Sprinter installed on the remote Windows host has multiple unspecified remote code execution vulnerabilities, which are related to the 'TTF16.ocx' ActiveX control. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid78514; scriptversion"1.14";...

activePDF WebGrabber 3.8 ActiveX Control 缓冲区溢出漏洞

No description provided by source...

Foxit ActiveX Pro SDK SetLogFile Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Foxit ActiveX Pro SDK ActiveX control. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exis...

Panasonic Network Camera View GetImageDataPrint Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Panasonic Network Camera View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

Advantech Webaccess - dvs.ocx GetColor Buffer Overflow (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Advantech WebAccess dvs.ocx GetColor Buffer Overflow', 'Description' = %q This module exploits a buffer overflow vulnerability in...

Advantech WebAccess dvs.ocx GetColor Buffer Overflow

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Advantech WebAccess dvs.ocx GetColor Buffer Overflow', 'Description' = %q This module exploits a buffer overflow vulnerability in...

Advantech WebAccess SCADA Password Parameter Buffer Overflow (CVE-2014-0992)

A stack buffer overflow exists in Advantech's WebAccess SCADA software. The vulnerability is due to insufficient input validation of the Password parameter in an ActiveX control that is part of the WebAccess Client. A remote, unauthenticated attacker could exploit this vulnerability by enticing a...

Microsoft Internet Explorer Multiple Vulnerabilities (2977629)

This host is missing a critical security update according to Microsoft Bulletin MS14-052. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2011-2593

Integer overflow in the StartEpa method in the nsepacom ActiveX control nsepa.exe in Citrix Access Gateway Enterprise Edition Plug-in for Windows 9.x before 9.3-57.5 and 10.0 before 10.0-69.4 allows remote attackers to execute arbitrary code via a crafted Content-Length HTTP header, which trigger...

Integer overflow

Integer overflow in the StartEpa method in the nsepacom ActiveX control nsepa.exe in Citrix Access Gateway Enterprise Edition Plug-in for Windows 9.x before 9.3-57.5 and 10.0 before 10.0-69.4 allows remote attackers to execute arbitrary code via a crafted Content-Length HTTP header, which trigger...

CVE-2011-2593

Integer overflow in the StartEpa method in the nsepacom ActiveX control nsepa.exe in Citrix Access Gateway Enterprise Edition Plug-in for Windows 9.x before 9.3-57.5 and 10.0 before 10.0-69.4 allows remote attackers to execute arbitrary code via a crafted Content-Length HTTP header, which trigger...

CVE-2011-2593

CVE-2011-2593 affects the Citrix Access Gateway Plug-in for Windows (nsepacom ActiveX control, nsepa.exe) StartEpa method. An integer overflow can be triggered by a crafted Content-Length HTTP header, leading to a heap-based buffer overflow and remote code execution. Affected versions are Citrix ...

Attachmate Reflection Pro FTP rftpcom15.dll GetSiteProperties3 Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Attachmate Reflection Pro FTP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...