CVE-2012-0267

The StopModule method in the NTR ActiveX control before 2.0.4.8 allows remote attackers to execute arbitrary code via a crafted lModule parameter that triggers use of an arbitrary memory address as a function pointer...

Stack overflow

Multiple stack-based buffer overflows in the NTR ActiveX control before 2.0.4.8 allow remote attackers to execute arbitrary code via 1 a long bstrUrl parameter to the StartModule method, 2 a long bstrParams parameter to the Check method, a long bstrUrl parameter to the 3 Download or 4...

Null pointer dereference

The StopModule method in the NTR ActiveX control before 2.0.4.8 allows remote attackers to execute arbitrary code via a crafted lModule parameter that triggers use of an arbitrary memory address as a function pointer...

CVE-2012-0266

Multiple stack-based buffer overflows in the NTR ActiveX control before 2.0.4.8 allow remote attackers to execute arbitrary code via 1 a long bstrUrl parameter to the StartModule method, 2 a long bstrParams parameter to the Check method, a long bstrUrl parameter to the 3 Download or 4...

CVE-2012-0266

CVE-2012-0266 : The NTR ActiveX control (pre-2.0.4.8) is affected by multiple stack-based buffer overflows. The vulnerability allows remote code execution via long inputs to: StartModule(bstrUrl), Check(bstrParams), and Download/DownloadModule (bstrUrl) during .ntr pathname or URL construction. E...

CVE-2012-0266: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in the NTR ActiveX control before 2.0.4.8 allow remote attackers to execute arbitrary code via 1 a long bstrUrl parameter to the StartModule method, 2 a long bstrParams parameter to the Check method, a long bstrUrl parameter to the 3 Download or 4...

PT-2012-2449

Name of the Vulnerable Software and Affected Versions NTR ActiveX control versions prior to 2.0.4.8 Description The issue allows remote attackers to execute arbitrary code via a crafted lModule parameter that triggers use of an arbitrary memory address as a function pointer. This occurs in the...

PT-2012-2448

Name of the Vulnerable Software and Affected Versions NTR ActiveX control versions prior to 2.0.4.8 Description The issue allows remote attackers to execute arbitrary code due to multiple stack-based buffer overflows. This can occur through various methods, including a long bstrUrl parameter to t...

CVE-2012-0267: Improper Input Validation

The StopModule method in the NTR ActiveX control before 2.0.4.8 allows remote attackers to execute arbitrary code via a crafted lModule parameter that triggers use of an arbitrary memory address as a function pointer...

HP PKI ActiveX Control KillProcess Denial of Service

The version of the HP PKI ActiveX control installed on the remote Windows host is earlier than 1.2.0.1. As such, it reportedly contains an insecure method named 'KillProcess' that could be used to terminate arbitrary user processes. C Tenable Network Security, Inc. include"compat.inc"; if...

CVE-2011-4787

A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-2404 and CVE-2011-4786...

Design/Logic Flaw

A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-2404 and CVE-2011-4786...

DSquare Exploit Pack: D2SEC_HPEASY2

Name| d2sechpeasy2 ---|--- CVE| CVE-2011-4786 Exploit Pack| D2ExploitPack Description| HP Easy Printer Care XMLCacheMgr Class ActiveX Control Code Execution Vulnerability Notes|...

Design/Logic Flaw

A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-2404 and CVE-2011-4787...

CVE-2011-4786

A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-2404 and CVE-2011-4787...

CVE-2011-4787

A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-2404 and CVE-2011-4786...

CVE-2011-4787

CVE-2011-4787 concerns a vulnerability in HP Easy Printer Care Software prior to or including version 2.5, specifically an ActiveX control in HPTicketMgr.dll. The description states that this control allows remote attackers to download an arbitrary program onto a client machine and execute it via...

CVE-2011-4786

A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-2404 and CVE-2011-4787...

CVE-2011-4787: Improper Control of Generation of Code

A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-2404 and CVE-2011-4786...

CVE-2011-4786: Improper Control of Generation of Code

A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-2404 and CVE-2011-4787...