6211 matches found
Microsoft Internet Explorer RDP ActiveX Control Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within Remo...
Oracle Java Web Start ActiveX Control launchApp Memory Access Error (CVE-2013-2416)
A code execution vulnerability exists in Oracle Java Web Start. The vulnerability is due to memory corruption in javaws.exe, a helper application executed from the launchApp method of the JWS ActiveX control. An attacker can exploit this vulnerability by enticing the target user to open a special...
IBM SPSS SamplePower Multiple Vulnerabilities (Windows)
This host is installed with IBM SPSS SamplePower and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmspssmultvuln.nasl 8194 2017-12-20 11:29:51Z cfischer $ IBM SPSS SamplePower Multiple Vulnerabilities Windows Authors: Arun Kallavi Copyright: Copyright c 2013 Greenbone...
IBM SPSS SamplePower Multiple Vulnerabilities - Windows
IBM SPSS SamplePower is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:spsssamplepower";...
Honeywell Multiple Products HscRemoteDeploy.dll ActiveX Control Code Execution (CVE-2013-0108)
A code execution vulnerability exists in Honeywell HscRemoteDeploy.dll ActiveX Control. The vulnerability is due a failure to validate user input that can lead to the execution of an arbitrary HTA application. An attacker can exploit this vulnerability by enticing a user to visit a specially...
CVE-2012-5947
Buffer overflow in the vsflex7l ActiveX control in IBM SPSS SamplePower 3.0 before FP1 allows remote attackers to execute arbitrary code via unspecified vectors...
CVE-2012-5945
Multiple buffer overflows in the Vsflex8l ActiveX control in IBM SPSS SamplePower 3.0 before FP1 allow remote attackers to execute arbitrary code via a long 1 ComboList or 2 ColComboList property value...
Buffer overflow
Buffer overflow in the c1sizer ActiveX control in C1sizer.ocx in IBM SPSS SamplePower 3.0 before FP1 allows remote attackers to execute arbitrary code via a long TabCaption string...
Buffer overflow
Multiple buffer overflows in the Vsflex8l ActiveX control in IBM SPSS SamplePower 3.0 before FP1 allow remote attackers to execute arbitrary code via a long 1 ComboList or 2 ColComboList property value...
Buffer overflow
Buffer overflow in the vsflex7l ActiveX control in IBM SPSS SamplePower 3.0 before FP1 allows remote attackers to execute arbitrary code via unspecified vectors...
CVE-2012-5947
IBM SPSS SamplePower 3.0 contains a vsflex7l ActiveX control vulnerability (CVE-2012-5947) that enables remote code execution when the control is invoked by Internet Explorer. The issue arises from insufficient input validation in the ActiveX component, allowing memory corruption and arbitrary co...
CVE-2012-5945
The CVE-2012-5945 issue affects IBM SPSS SamplePower for Windows (Version 3.0) through the Vsflex8l ActiveX control. The root cause is a buffer overflow in the Vsflex8l ActiveX control triggered when a long string is assigned to the ComboList or ColComboList properties, enabling remote code execu...
CVE-2012-5946
Buffer overflow in the c1sizer ActiveX control in C1sizer.ocx in IBM SPSS SamplePower 3.0 before FP1 allows remote attackers to execute arbitrary code via a long TabCaption string...
CVE-2012-5946
CVE-2012-5946 affects IBM SPSS SamplePower 3.0 (c1sizer.ocx) where the C1Tab ActiveX control triggers a heap/buffer overflow when handling the TabCaption string, allowing remote code execution. The IBM advisory details that the overflow occurs due to unsafe concatenation (lstrcatA) in TabCaption ...
CVE-2012-5947
Buffer overflow in the vsflex7l ActiveX control in IBM SPSS SamplePower 3.0 before FP1 allows remote attackers to execute arbitrary code via unspecified vectors...
PT-2013-1858
Name of the Vulnerable Software and Affected Versions IBM SPSS SamplePower version 3.0 Description The issue is related to a buffer overflow in the c1sizer ActiveX control, which can be exploited to execute arbitrary code. This is achieved by providing a long TabCaption string. Recommendations Fo...
CVE-2012-5945: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple buffer overflows in the Vsflex8l ActiveX control in IBM SPSS SamplePower 3.0 before FP1 allow remote attackers to execute arbitrary code via a long 1 ComboList or 2 ColComboList property value...
CVE-2012-5947: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in the vsflex7l ActiveX control in IBM SPSS SamplePower 3.0 before FP1 allows remote attackers to execute arbitrary code via unspecified vectors...
PT-2013-1857
Name of the Vulnerable Software and Affected Versions IBM SPSS SamplePower version 3.0 before FP1 Description The issue concerns buffer overflows in the Vsflex8l ActiveX control. Remote attackers can execute arbitrary code by providing a long value for either the ComboList or ColComboList propert...
Borland Silk Central 12.1 TeeChart Pro Activex control AddSeries Remote Code Execution
Borland Silk Central 12.1 TeeChart Pro Activex control AddSeries Remote Code Execution ActiveX Settings: Binary path: C:Program FilesSilkShared Filesteechart.ocx CLSID: 008BBE7E-C096-11D0-B4E3-00A0C901D681 ProgID: TeeChart.TChart Version: 4.0.0.7 Safe for Scripting IObjectSafety: True Safe for...