WibuKey Runtime ActiveX Control DisplayMessageDialog Method String Parsing Overflow

According to the version of the WibuKey Runtime ActiveX control installed on the remote host, the DisplayMessageDialog method within WkWin32.dll is affected by a stack-based buffer overflow vulnerability. By tricking a user into opening a specially crafted web page, an attacker may be able to...

CYME ChartFX ActiveX ShowPropertiesDialog pageNumber indexing error

Added: 12/17/2012 BID: 55765 OSVDB: 85894 Background The CYME Power Engineering Software is a suite of applications for power engineers. It includes the ChartFX ActiveX control. Problem An indexing error in ChartFX.ClientServer.Core.dll of the ChartFX ActiveX Control allows command execution when...

Adobe Shockwave player vulnerable to downgrading

Overview Adobe Shockwave Player may automatically install a legacy version of the runtime, which can increase the attack surface of systems that have Shockwave installed. Description Adobe Macromedia Shockwave Player is software that plays active web content developed in Macromedia and Adobe...

Adobe Shockwave player installs Xtras without prompting

Overview Adobe Shockwave Player installs Xtras that are signed by Adobe or Macromedia without prompting, which can allow an attacker to target vulnerabilities in older Xtras. Description Adobe Macromedia Shockwave Player is software that plays active web content developed in Macromedia and Adobe...

SafeNet HASP SL ActiveX Control ChooseFilePath Buffer Overflow

A stack buffer overflow vulnerability has been reported in SafeNet HASP SL's ActiveX control...

Microsoft Internet Explorer Ref Counting释放后重用远程代码执行漏洞（MS12-077）

BUGTRAQ ID: 56830 CVECAN ID: CVE-2012-4787 Microsoft Internet Explorer是微软公司推出的一款网页浏览器，使用相当广泛。 Microsoft Internet Explorer 6、7、8、9、10在处理恶意HTML内容时，Ref Counting存在错误的内存操作，通过引诱用户浏览恶意网站，未经身份验证的远程攻击者可利用此漏洞以当前用户权限执行任意代码。 0 Microsoft Internet Explorer 9.x Microsoft Internet Explorer 8.x Microsoft Internet...

Novell GroupWise Multiple Remote Code Execution Vulnerabilities

High-Tech Bridge Security Research Lab discovered multiple untrusted pointer dereference vulnerabilities in Novell GroupWise, which could be exploited to compromise a remote system. 1 Untrusted Pointer Dereference in Novell GroupWise: CVE-2013-0804 1.1 The vulnerability exists due to an untrusted...

McAfee Virtual Technician ActiveX Control Insecure Method

High-Tech Bridge Security Research Lab discovered vulnerability in McAfee Virtual Technician ActiveX control, which can be exploited by remote malicious person to overwrite arbitrary files with garbage data on a vulnerable system. 1 Insecure method in McAfee Virtual Technician ActiveX control:...

SCADA PcVue Activex Control Insecure Method (LoadObject)

...

PROMOTIC ActiveX Control Insecure method (AddTrend)

...

PROMOTIC ActiveX Control Insecure method (SaveCfg)

...

SCADA PcVue Activex Control Insecure Method (SaveObject)

...

CVE-2012-5896

The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not properly implement the Add method, which allows remote attackers to execute arbitrary code via a memory address in the first argument, related to an "uninitialized pointer."...

CVE-2012-5896

The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not properly implement the Add method, which allows remote attackers to execute arbitrary code via a memory address in the first argument, related to an "uninitialized pointer."...

CVE-2012-5896

CVE-2012-5896 affects Quest InTrust, specifically the Annotation Objects ActiveX control (AnnotateX.dll) prior to or at 10.4.0.853. The vulnerability arises from the Add method not being properly implemented, enabling remote code execution via a memory address supplied in the first argument, tied...

CVE-2012-5897

CVE-2012-5897 affects Quest InTrust 10.4.0.853 and earlier via the ARDoc ActiveX control (ARDoc.dll). The (1) SimpleTree and (2) ReportTree classes do not properly implement the SaveToFile method, enabling remote attackers to write or overwrite arbitrary files through the bstrFileName argument. D...

CVE-2012-5897

The 1 SimpleTree and 2 ReportTree classes in the ARDoc ActiveX control ARDoc.dll in Quest InTrust 10.4.0.853 and earlier do not properly implement the SaveToFile method, which allows remote attackers to write or overwrite arbitrary files via the bstrFileName argument...

PT-2012-6178

Name of the Vulnerable Software and Affected Versions Quest InTrust versions 10.4.0.853 and earlier Description The issue concerns the improper implementation of the SaveToFile method in the SimpleTree and ReportTree classes within the ARDoc ActiveX control. This allows remote attackers to write ...

PT-2012-6177

Name of the Vulnerable Software and Affected Versions Quest InTrust versions 10.4.0.853 and earlier Description The issue is related to the Annotation Objects Extension ActiveX control in AnnotateX.dll, which does not properly implement the Add method. This allows remote attackers to execute...

SafeNet PrivAgent.ocx ActiveX control ChooseFilePath buffer overflow

Added: 11/16/2012 BID: 56297 OSVDB: 86723 Background SafeNet Hardware Against Software Piracy HASP solutions include the PrivAgent.ocx ActiveX control. Problem A buffer overflow vulnerability in the ChooseFilePath method of the PrivAgent.ocx ActiveX control allows command execution when a user...