CVE-2013-6748

CVE-2013-6748 describes a buffer overflow in the ActiveX control qp2.dll (qp2.cab) of IBM Lotus Quickr for Domino 8.5.1, prior to 8.5.1.42-001b. Successful exploitation via a crafted HTML document enables remote arbitrary code execution. This entry is distinct from CVE-2013-6749 (which covers a s...

CVE-2013-6749: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the ActiveX control in qp2.cab in IBM Lotus Quickr for Domino 8.5.1 before 8.5.1.42-001b allows remote attackers to execute arbitrary code via a crafted HTML document, a different vulnerability than CVE-2013-6748...

PT-2014-3190

Name of the Vulnerable Software and Affected Versions IBM Lotus Quickr for Domino version 8.5.1 before 8.5.1.42-001b Description The issue is related to a buffer overflow in the ActiveX control in qp2.cab, which allows remote attackers to execute arbitrary code via a crafted HTML document...

PT-2014-3191

Name of the Vulnerable Software and Affected Versions IBM Lotus Quickr for Domino version 8.5.1 before 8.5.1.42-001b Description The issue is related to a buffer overflow in the ActiveX control in qp2.cab, which allows remote attackers to execute arbitrary code via a crafted HTML document...

CVE-2013-6748: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the ActiveX control in qp2.cab in IBM Lotus Quickr for Domino 8.5.1 before 8.5.1.42-001b allows remote attackers to execute arbitrary code via a crafted HTML document, a different vulnerability than CVE-2013-6749...

CVE-2013-2827

An unspecified ActiveX control in WellinTech KingSCADA before 3.1.2, KingAlarm&Event before 3.1, and KingGraphic before 3.1.2 allows remote attackers to download arbitrary DLL code onto a client machine and execute this code via the ProjectURL property value...

CVE-2014-1201

Buffer overflow in the INetViewX ActiveX control in the Lorex Edge LH310 and Edge+ LH320 series with firmware 7-35-28-1B26E, Edge2 LH330 series with firmware 11.17.38-331D97A, and Edge3 LH340 series with firmware 11.19.851FE3A allows remote attackers to cause a denial of service crash and possibl...

Code injection

An unspecified ActiveX control in WellinTech KingSCADA before 3.1.2, KingAlarm&Event before 3.1, and KingGraphic before 3.1.2 allows remote attackers to download arbitrary DLL code onto a client machine and execute this code via the ProjectURL property value...

Buffer overflow

Buffer overflow in the INetViewX ActiveX control in the Lorex Edge LH310 and Edge+ LH320 series with firmware 7-35-28-1B26E, Edge2 LH330 series with firmware 11.17.38-331D97A, and Edge3 LH340 series with firmware 11.19.851FE3A allows remote attackers to cause a denial of service crash and possibl...

CVE-2013-2827

CVE-2013-2827 concerns an unresolved ActiveX control in WellinTech KingSCADA (before 3.1.2), KingAlarm&Event (before 3.1), and KingGraphic (before 3.1.2) that allows remote code execution by abusing the ProjectURL property to download and execute a DLL on a client. Root cause: insufficient saniti...

CVE-2014-1201

CVE-2014-1201 is a buffer overflow in Lorex INetViewX ActiveX control used by Lorex Edge LH310/LH320 (firmware 7-35-28-1B26E), Edge2 LH330 (11.17.38-33_1D97A), and Edge3 LH340 (11.19.85_1FE3A). The flaw allows remote attackers to crash the control or potentially execute arbitrary code via a long ...

CVE-2013-2827: Improper Control of Generation of Code

An unspecified ActiveX control in WellinTech KingSCADA before 3.1.2, KingAlarm&Event before 3.1, and KingGraphic before 3.1.2 allows remote attackers to download arbitrary DLL code onto a client machine and execute this code via the ProjectURL property value...

PT-2014-2638

Name of the Vulnerable Software and Affected Versions WellinTech KingSCADA versions prior to 3.1.2 WellinTech KingAlarm&Event versions prior to 3.1 WellinTech KingGraphic versions prior to 3.1.2 Description The issue allows remote attackers to download arbitrary DLL code onto a client machine and...

PT-2014-4009

Name of the Vulnerable Software and Affected Versions Lorex Edge LH310 series version 7-35-28-1B26E Lorex Edge+ LH320 series version 7-35-28-1B26E Lorex Edge2 LH330 series version 11.17.38-33 1D97A Lorex Edge3 LH340 series version 11.19.85 1FE3A Description A buffer overflow issue exists in the...

CVE-2014-1201: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the INetViewX ActiveX control in the Lorex Edge LH310 and Edge+ LH320 series with firmware 7-35-28-1B26E, Edge2 LH330 series with firmware 11.17.38-331D97A, and Edge3 LH340 series with firmware 11.19.851FE3A allows remote attackers to cause a denial of service crash and possibl...

[CVE -2014-1201] Lorex security DVR ActiveX control buffer overflow

Hi, I have discovered a buffer overflow vulnerability that allows remote code execution in an ActiveX control bundled by a manufacturer of video surveillance systems. The company is Lorex Technologies, a major video surveillance manufacturer that is very popular in the US and East Asia. Their...

MS KB2916626: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer

The remote host is missing KB2916626. It is, therefore, affected by the following vulnerabilities related to the installed version of the Adobe Flash ActiveX control : - An unspecified vulnerability exists that can be used to bypass Flash Player security protections. CVE-2014-0491 - An unspecifie...

WellinTech KingView ActiveX Control Heap Buffer Overflow Remote Code Execution (CVE-2011-3142)

A stack-based buffer overflow vulnerability has been reported in WellinTech KingView ActiveX control. The vulnerability is due to failure to perform adequate boundary checks on user-supplied input. A remote attacker can exploit this vulnerability by sending via a long second argument to the...

Microsoft Windows InformationCardSigninHelper Class ActiveX Control Code Execution - ver 2 (CVE-2013-3918)

A remote code execution vulnerability exists in the InformationCardSigninHelper Class ActiveX control, icardie.dll. When the InformationCardSigninHelper Class ActiveX control is instantiated in Internet Explorer, the control may corrupt the system state in such a way that an attacker could run...

ABB Test Signal Viewer CWGraph3D ActiveX Arbitrary File Creation (CVE-2013-5022)

An arbitrary file writing vulnerability exists in ABB Test Signal Viewer. The vulnerability is due to a directory traversal error in the exposed insecure method ExportStyle by the included CWGraph3D cw3dgrph.ocx ActiveX control. An attacker could exploit this vulnerability by enticing the target...