CVE-2013-7331

The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathnames, UNC share pathnames, intranet hostnames, and intranet IP addresses by examining error codes, as demonstrated by a res:// URL, and exploited in the wild ...

CVE-2013-7332

The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of nested entity...

Design/Logic Flaw

The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathnames, UNC share pathnames, intranet hostnames, and intranet IP addresses by examining error codes, as demonstrated by a res:// URL, and exploited in the wild ...

CVE-2013-7331

The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathnames, UNC share pathnames, intranet hostnames, and intranet IP addresses by examining error codes, as demonstrated by a res:// URL, and exploited in the wild ...

Mitsubishi Electric Automation MC-WorX 8.x ActiveX Control Remote Code Execution

Binary data scadamitsubishimc-worx8activex.nbin...

CVE-2013-7331

The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathnames, UNC share pathnames, intranet hostnames, and intranet IP addresses by examining error codes, as demonstrated by a res:// URL, and exploited in the wild ...

PT-2014-1607

Name of the Vulnerable Software and Affected Versions Internet Explorer versions prior to the fixed version Microsoft.XMLDOM ActiveX control in Microsoft Windows versions prior to 8.1 Description The issue allows attackers to determine the existence of local pathnames, UNC share pathnames, intran...

CVE-2013-7331: Exposure of Sensitive Information to an Unauthorized Actor

The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathnames, UNC share pathnames, intranet hostnames, and intranet IP addresses by examining error codes, as demonstrated by a res:// URL, and exploited in the wild ...

CVE-2013-7332: Undefined Security Weakness

The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of nested entity...

PT-2014-3371

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to 8.1 Description The issue is related to the Microsoft.XMLDOM ActiveX control, which does not properly detect recursion during entity expansion. This allows remote attackers to cause a denial of service by...

CVE-2014-0758

An ActiveX control in GenLaunch.htm in ICONICS GENESIS32 8.0, 8.02, 8.04, and 8.05 allows remote attackers to execute arbitrary programs via a crafted HTML document...

CVE-2013-2817

An ActiveX control in IcoLaunch.dll in Mitsubishi Electric Automation MC-WorX Suite 8.02 allows user-assisted remote attackers to execute arbitrary programs via a crafted HTML document in conjunction with a Login Client button click...

Hardcoded credentials

An ActiveX control in IcoLaunch.dll in Mitsubishi Electric Automation MC-WorX Suite 8.02 allows user-assisted remote attackers to execute arbitrary programs via a crafted HTML document in conjunction with a Login Client button click...

CVE-2013-2817

The vulnerability CVE-2013-2817 affects Mitsubishi Electric Automation MC-WorX Suite 8.02 via the IcoLaunch.dll ActiveX control. The insecure control (Exposed Dangerous Method or Function CWE-749) can be used to execute arbitrary code when a user visits a crafted HTML document and clicks the Logi...

CVE-2014-0758

ICONICS GENESIS32 CVE-2014-0758 affects GENESIS32 versions 8.0, 8.02, 8.04 and 8.05. An insecure ActiveX control in GenLaunch.htm can be exploited to execute arbitrary code via a crafted HTML document. Exploitation may be remote but requires user interaction; no public exploits are noted in the p...

PT-2014-2634

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric Automation MC-WorX Suite version 8.02 Description The issue allows remote attackers to execute arbitrary programs via a crafted HTML document in conjunction with a Login Client button click. This is made possible by a...

CVE-2013-2817: Improper Control of Generation of Code

An ActiveX control in IcoLaunch.dll in Mitsubishi Electric Automation MC-WorX Suite 8.02 allows user-assisted remote attackers to execute arbitrary programs via a crafted HTML document in conjunction with a Login Client button click...

CVE-2014-0758: Exposed Dangerous Method or Function

An ActiveX control in GenLaunch.htm in ICONICS GENESIS32 8.0, 8.02, 8.04, and 8.05 allows remote attackers to execute arbitrary programs via a crafted HTML document...

PT-2014-3820

Name of the Vulnerable Software and Affected Versions ICONICS GENESIS32 versions 8.0 through 8.05 Description The issue allows remote attackers to execute arbitrary programs via a crafted HTML document, specifically through an ActiveX control in GenLaunch.htm. Recommendations For ICONICS GENESIS3...

Lotus Quickr for Domino qp2.dll ActiveX Control Unspecified Stack Overflow

There is an unspecified, stack-based buffer overflow vulnerability in the Lotus Quickr for Domino qp2.dll ActiveX control. By tricking a victim into opening a specially crafted web page, an attacker can leverage this flaw to potentially execute arbitrary code, subject to the user's privileges. C...