Microsoft Internet Explorer内存破坏漏洞(CVE-2013-3147)（MS13-055)

BUGTRAQ ID: 60966 CVECAN ID: CVE-2013-3147 Windows Internet Explorer，简称MSIE，是微软公司推出的一款网页浏览器。 Microsoft Internet Explorer 7, 8, 9, 10不正确地访问内存中的对象时，存在远程执行代码漏洞。成功利用导致在当前用户的上下文执行任意代码，失败导致浏览器崩溃。 0 Microsoft Internet Explorer 6 - 10 临时解决方法： 将 Internet 和本地 Intranet 安全区域设置设为“高”，以便在这些区域中阻止 ActiveX 控件和活动脚本...

Novell iPrint Client IPP Response URI handling buffer overflow

Added: 07/05/2013 CVE: CVE-2013-1091 BID: 59612 OSVDB: 92938 Background Novell iPrint is an application which allows users to install and manage printers. Novell iPrint installs the Novell iPrint Control ActiveX control named ienipp.ocx. Problem A buffer overflow vulnerability within the handling...

SAS Integration Technologies Client ActiveX Stack Buffer Overflow

The version of the SAS Integration Technologies Client installed on the remote host is affected by a stack-based buffer overflow condition in the 'SASspk.dll' ActiveX control due to improper validation of user-supplied input to the RetrieveBinaryFile function via the 'bstFileName' parameter. An...

McAfee Virtual Technician ActiveX Control Insecure Method Exposure (CVE-2012-5879)

An insecure method exposure vulnerability has been reported in McAfee Virtual Technician...

Siemens SIMATIC WinCC RegReader ActiveX Control Buffer Overflow (CVE-2013-0674)

A stack-based buffer overflow vulnerability has been reported in Siemens SIMATIC WinCC...

Oracle Document Capture ActiveX Control SetAnnotationFont Buffer Overflow (CVE-2013-1516)

A buffer overflow vulnerability exists in the BlackIceDevMode.ocx ActiveX control included with Oracle Document Capture...

Oracle WebCenter Capture ActiveX SetAnnotationFont buffer overflow

Added: 06/26/2013 CVE: CVE-2013-1516 BID: 59112 OSVDB: 92387 Background Oracle WebCenter Capture formerly Oracle Document Capture is a centralized document scanning solution. Problem The Import Server subcomponent of Oracle WebCenter Capture is affected by a buffer overflow vulnerability. The...

Lotus Quickr for Domino qp2.dll ActiveX Control Integer Overflow Remote Code Execution

An unspecified flaw in the Lotus Quickr for Domino qp2.dll ActiveX control has an unspecified integer overflow that leads to a heap buffer overflow. By tricking a victim into opening a specially crafted web page, an attacker can leverage this vulnerability to execute arbitrary code, subject to th...

Oracle WebCenter Capture ActiveX SetAnnotationFont buffer overflow

Added: 06/26/2013 CVE: CVE-2013-1516 BID: 59112 OSVDB: 92387 Background Oracle WebCenter Capture formerly Oracle Document Capture is a centralized document scanning solution. Problem The Import Server subcomponent of Oracle WebCenter Capture is affected by a buffer overflow vulnerability. The...

Buffer overflow

Buffer overflow in the Lotus Quickr for Domino ActiveX control in qp2.cab in IBM Lotus Quickr 8.1 before FP 8.1.0.32-001a, 8.2 before FP 8.2.0.28-001a, and 8.5.1 before FP 8.5.1.39-002a for Domino allows remote attackers to execute arbitrary code via a crafted web site...

CVE-2013-3026

CVE-2013-3026 affects IBM Lotus Quickr for Domino via the qp2.cab ActiveX control. An integer/heap overflow in qp2.dll/qp2.cab leads to remote code execution when a user visits a crafted web page with IE. Exploitation requires user interaction (per ZDI); successful exploitation could run code in ...

Microsys Promotic < 8.1.5 Multiple Vulnerabilities - Active Check

Microsys Promotic is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Java Applet - Driver Manager Privileged 'toString()' Remote Code Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' class Metasploit3 false def initialize inf...

Java Applet Driver Manager Privileged toString() Remote Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' class Metasploit3 false def initialize inf...

IBM SPSS SamplePower c1sizer ActiveX Control Vulnerability

Added: 06/09/2013 CVE: CVE-2012-5946 BID: 59559 OSVDB: 92845 Background SPSS Statistical Package for the Social Sciences is a computer application that provides statistical analysis of data. It allows for in-depth data access and preparation, analytical reporting, graphics and modelling...

IBM SPSS SamplePower c1sizer ActiveX Control Vulnerability

Added: 06/09/2013 CVE: CVE-2012-5946 BID: 59559 OSVDB: 92845 Background SPSS Statistical Package for the Social Sciences is a computer application that provides statistical analysis of data. It allows for in-depth data access and preparation, analytical reporting, graphics and modelling...

IBM SPSS SamplePower c1sizer ActiveX Control Vulnerability

Added: 06/09/2013 CVE: CVE-2012-5946 BID: 59559 OSVDB: 92845 Background SPSS Statistical Package for the Social Sciences is a computer application that provides statistical analysis of data. It allows for in-depth data access and preparation, analytical reporting, graphics and modelling...

IBM SPSS SamplePower c1sizer ActiveX Control Vulnerability

Added: 06/09/2013 CVE: CVE-2012-5946 BID: 59559 OSVDB: 92845 Background SPSS Statistical Package for the Social Sciences is a computer application that provides statistical analysis of data. It allows for in-depth data access and preparation, analytical reporting, graphics and modelling...

Siemens Solid Edge SEListCtrlX ActiveX Control SetItemReadOnly Method Memory Address Write Arbitrary Code Execution

The remote host has the Siemens Solid Edge SEListCtrlX ActiveX control installed. This control has a flaw that could allow an attacker to execute arbitrary code via the 'SetItemReadOnly' method by tricking a user into opening a specially crafted web page. C Tenable Network Security, Inc...

Siemens Solid Edge WPHelper ActiveX Control OpenInEditor Method Arbitrary Command Execution

The remote host has the Siemens Solid Edge WebPartHelper ActiveX control installed. This control is affected by a command execution vulnerability. By tricking a user into opening a specially crafted web page, an attacker could potentially execute arbitrary system commands via the 'OpenInEditor'...