CVE-2012-2515

Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHelp Module aka the HTML Help component, as used in EMC Documentum ApplicationXtender Desktop 5.4; EMC Captiva Quickscan Pro 4.6 SP1; GE Intelligent Platforms Proficy Historian 3.1...

Stack overflow

Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHelp Module aka the HTML Help component, as used in EMC Documentum ApplicationXtender Desktop 5.4; EMC Captiva Quickscan Pro 4.6 SP1; GE Intelligent Platforms Proficy Historian 3.1...

Command injection

An ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module aka the HTML Help component, as used in GE Intelligent Platforms Proficy Historian 3.1, 3.5, 4.0, and 4.5; Proficy HMI/SCADA iFIX 5.0 and 5.1; Proficy Pulse 1.0; Proficy Batch Execution 5.6; SI7 I/O Driver 7.20 through 7.42; and other...

CVE-2012-2516

The CVE-2012-2516 issue is an ActiveX-based command-injection vulnerability in KeyHelp.ocx of GE Intelligent Platforms’ KeyWorks KeyHelp module, affecting Proficy Historian (3.1, 3.5, 4.0, 4.5), Proficy HMI/SCADA – iFIX (5.0, 5.1), Proficy Pulse 1.0, Proficy Batch Execution 5.6, and SI7 I/O Drive...

IBM Rational ClearQuest 'cqole.dll' ActiveX 控件堆缓冲区溢出漏洞(CVE-2012-0708)

BUGTRAQ ID: 53170 CVE ID: CVE-2012-0708 IBM Rational ClearQuest是全面的软件变更、追踪管理解决方案。 IBM Rational ClearQuest 版本8.0, 8.0.0.1和7.1.1至7.1.2.5中的cqole.dll内CQOle ActiveX控件中的Ole API存在堆缓冲区溢出漏洞，通过RegisterSchemaRepoFromFileByDbSet函数原型错配恶意制作的网页可导致攻击者利用此漏洞执行任意代码。 0 IBM Rational ClearQuest 8.0.0.1 IBM Rational...

IBM Rational ClearQuest CQOle Remote Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::IE,...

IBM Rational ClearQuest CQOle ActiveX Control Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Rational ClearQuest. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the CQOl...

IBM Lotus iNotes Upload模块ActiveX控件缓冲区溢出漏洞

BUGTRAQ ID: 53879 CVE ID: CVE-2012-2175 Lotus iNotes之前被称为Lotus Domino Web Access，是Lotus Domino服务器基于web的消息和协作界面。 IBM Lotus iNotes 8.5.3 FP2之前版本dwa85W.dll内的某些ActiveX控件中的AttachmentTimes方法在实现上存在缓冲区溢出漏洞，通过较长的参数可允许远程攻击者执行任意代码。 0 IBM Lotus iNotes 厂商补丁： IBM --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

AOL桌面工具栏未初始化指针远程代码执行漏洞

Bugtraq ID: 54146 AOL Deskbar是一款桌面工具栏软件。 AOL dnUpdater ActiveX控件存在安全漏洞，允许攻击者以应用程序上下文执行任意代码。 AOL dnUpdater ActiveX控件把部分参数传递给"Init"方法并作为函数指针使用，可被利用在任意内存位置执行任意指令。 0 AOL Deskbar AOL dnUpdater ActiveX Control 厂商解决方案 用户可参考如下供应商提供的升级程序：...

Oracle WebCenter Forms Recognition ActiveX Control Arbitrary File Creation (CVE-2012-1709)

A directory traversal vulnerability has been reported in Oracle WebCenter Forms Recognition. The vulnerability is due to insufficient validation of parameters used in certain methods in the CroProj.dll ActiveX control. A remote attacker can exploit this vulnerability by enticing a target user to...

Cisco AnyConnect Secure Mobility Client and Secure Desktop WebLaunch Software Downgrade Vulnerability

Cisco AnyConnect Secure Mobility Client and Secure Desktop contain a vulnerability that could allow an unauthenticated, remote attacker to replace software components on a targeted system. The vulnerability exists because the affected software performs insufficient validation of user-supplied...

Buffer overflow

Buffer overflow in the AttachmentTimes method in a certain ActiveX control in dwa85W.dll in IBM Lotus iNotes 8.5.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a long argument...

CVE-2012-2175

Buffer overflow in the AttachmentTimes method in a certain ActiveX control in dwa85W.dll in IBM Lotus iNotes 8.5.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a long argument...

CVE-2012-2175

CVE-2012-2175 describes a buffer overflow in the Attachment_Times handling of the dwa85W.dll ActiveX control used by IBM Lotus iNotes 8.5.x. The overflow arises from processing a long argument to the Attachment_Times property, leading to remote code execution. Documented impact is remote executio...

IBM Lotus iNotes Upload Module ActiveX Control Attachment_Times() Method Buffer Overflow

The Lotus iNotes Upload Module ActiveX Control is installed on the remote Windows host. The installed version of the control is affected by a buffer overflow vulnerability in the AttachmentTimes method. By tricking a victim into visiting a specially crafted page, an attacker may be able to execut...

Cisco Linksys PlayerPT ActiveX Control Buffer Overflow

A buffer overflow vulnerability has been reported in Cisco Linksys...

Tom Sawyer Software GET Extension Factory Remote Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3...

Tom Sawyer Software GET Extension Factory Remote Code Execution

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Tom Sawyer Software GET Extension Factory - Remote Code Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3...

CVE-2012-1818

An unspecified ActiveX control in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to overwrite arbitrary files via unknown vectors...