PT-2013-3705

Name of the Vulnerable Software and Affected Versions HP LoadRunner versions prior to 11.52 Description The issue allows remote attackers to execute arbitrary code. The vulnerability is related to the lrFileIOService ActiveX Control, specifically the WriteFileBinary method, which enables remote...

PT-2013-5201

Name of the Vulnerable Software and Affected Versions HP LoadRunner versions prior to 11.52 Description The issue allows remote attackers to execute arbitrary code. The vulnerability is related to the HP LoadRunner lrLRIServices ActiveX Control, specifically the SetOutputDirectory function...

CA Multiple Products gui_cm_ctrls.ocx ActiveX Control Arbitrary Code Execution

The remote host has the CA guicmctrls.ocx ActiveX control installed that is affected by an arbitrary code execution vulnerability due to insufficient verification of function arguments. By tricking a user into opening a specially crafted web page, a remote attacker may be able to execute arbitrar...

Microsoft Internet Explorer内存破坏漏洞(CVE-2013-3145)

BUGTRAQ ID: 60964 CVECAN ID: CVE-2013-3145 Windows Internet Explorer，简称MSIE，是微软公司推出的一款网页浏览器。 Microsoft Internet Explorer 7, 8, 9, 10不正确地访问内存中的对象时，存在远程执行代码漏洞。成功利用导致在当前用户的上下文执行任意代码，失败导致浏览器崩溃。 0 Microsoft Internet Explorer 6 - 10 临时解决方法： 将 Internet 和本地 Intranet 安全区域设置设为“高”，以便在这些区域中阻止 ActiveX 控件和活动脚本...

Microsoft Internet Explorer内存破坏漏洞(CVE-2013-3147)（MS13-055)

BUGTRAQ ID: 60966 CVECAN ID: CVE-2013-3147 Windows Internet Explorer，简称MSIE，是微软公司推出的一款网页浏览器。 Microsoft Internet Explorer 7, 8, 9, 10不正确地访问内存中的对象时，存在远程执行代码漏洞。成功利用导致在当前用户的上下文执行任意代码，失败导致浏览器崩溃。 0 Microsoft Internet Explorer 6 - 10 临时解决方法： 将 Internet 和本地 Intranet 安全区域设置设为“高”，以便在这些区域中阻止 ActiveX 控件和活动脚本...

Microsoft Internet Explorer内存破坏漏洞(CVE-2013-3146)（MS13-055)

BUGTRAQ ID: 60965 CVECAN ID: CVE-2013-3146 Windows Internet Explorer，简称MSIE，是微软公司推出的一款网页浏览器。 Microsoft Internet Explorer 7, 8, 9, 10不正确地访问内存中的对象时，存在远程执行代码漏洞。成功利用导致在当前用户的上下文执行任意代码，失败导致浏览器崩溃。 0 Microsoft Internet Explorer 6 - 10 临时解决方法： 将 Internet 和本地 Intranet 安全区域设置设为“高”，以便在这些区域中阻止 ActiveX 控件和活动脚本...

Novell iPrint Client IPP Response URI handling buffer overflow

Added: 07/05/2013 CVE: CVE-2013-1091 BID: 59612 OSVDB: 92938 Background Novell iPrint is an application which allows users to install and manage printers. Novell iPrint installs the Novell iPrint Control ActiveX control named ienipp.ocx. Problem A buffer overflow vulnerability within the handling...

SAS Integration Technologies Client ActiveX Stack Buffer Overflow

The version of the SAS Integration Technologies Client installed on the remote host is affected by a stack-based buffer overflow condition in the 'SASspk.dll' ActiveX control due to improper validation of user-supplied input to the RetrieveBinaryFile function via the 'bstFileName' parameter. An...

Siemens SIMATIC WinCC RegReader ActiveX Control Buffer Overflow (CVE-2013-0674)

A stack-based buffer overflow vulnerability has been reported in Siemens SIMATIC WinCC...

McAfee Virtual Technician ActiveX Control Insecure Method Exposure (CVE-2012-5879)

An insecure method exposure vulnerability has been reported in McAfee Virtual Technician...

Oracle WebCenter Capture ActiveX SetAnnotationFont buffer overflow

Added: 06/26/2013 CVE: CVE-2013-1516 BID: 59112 OSVDB: 92387 Background Oracle WebCenter Capture formerly Oracle Document Capture is a centralized document scanning solution. Problem The Import Server subcomponent of Oracle WebCenter Capture is affected by a buffer overflow vulnerability. The...

Oracle Document Capture ActiveX Control SetAnnotationFont Buffer Overflow (CVE-2013-1516)

A buffer overflow vulnerability exists in the BlackIceDevMode.ocx ActiveX control included with Oracle Document Capture...

Lotus Quickr for Domino qp2.dll ActiveX Control Integer Overflow Remote Code Execution

An unspecified flaw in the Lotus Quickr for Domino qp2.dll ActiveX control has an unspecified integer overflow that leads to a heap buffer overflow. By tricking a victim into opening a specially crafted web page, an attacker can leverage this vulnerability to execute arbitrary code, subject to th...

Oracle WebCenter Capture ActiveX SetAnnotationFont buffer overflow

Added: 06/26/2013 CVE: CVE-2013-1516 BID: 59112 OSVDB: 92387 Background Oracle WebCenter Capture formerly Oracle Document Capture is a centralized document scanning solution. Problem The Import Server subcomponent of Oracle WebCenter Capture is affected by a buffer overflow vulnerability. The...

Buffer overflow

Buffer overflow in the Lotus Quickr for Domino ActiveX control in qp2.cab in IBM Lotus Quickr 8.1 before FP 8.1.0.32-001a, 8.2 before FP 8.2.0.28-001a, and 8.5.1 before FP 8.5.1.39-002a for Domino allows remote attackers to execute arbitrary code via a crafted web site...

CVE-2013-3026

CVE-2013-3026 affects IBM Lotus Quickr for Domino via the qp2.cab ActiveX control. An integer/heap overflow in qp2.dll/qp2.cab leads to remote code execution when a user visits a crafted web page with IE. Exploitation requires user interaction (per ZDI); successful exploitation could run code in ...

PT-2013-4100

Name of the Vulnerable Software and Affected Versions IBM Lotus Quickr versions 8.1 before FP 8.1.0.32-001a IBM Lotus Quickr versions 8.2 before FP 8.2.0.28-001a IBM Lotus Quickr versions 8.5.1 before FP 8.5.1.39-002a Description The issue is related to a buffer overflow in the Lotus Quickr for...

Microsys Promotic < 8.1.5 Multiple Vulnerabilities - Active Check

Microsys Promotic is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-3026: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Lotus Quickr for Domino ActiveX control in qp2.cab in IBM Lotus Quickr 8.1 before FP 8.1.0.32-001a, 8.2 before FP 8.2.0.28-001a, and 8.5.1 before FP 8.5.1.39-002a for Domino allows remote attackers to execute arbitrary code via a crafted web site...

Java Applet - Driver Manager Privileged 'toString()' Remote Code Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' class Metasploit3 false def initialize inf...