ZDI-11-093: CA Internet Security Suite HIPS XML Security Database Parser Class Remote Code Execution Vulnerability

ZDI-11-093: CA Internet Security Suite HIPS XML Security Database Parser Class Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-093 February 23, 2011 -- CVE ID: CVE-2011-1036 -- CVSS: 9.3, AV:N/AC:M/Au:N/C:C/I:C/A:C -- Affected Vendors: CA -- Affected Product...

CVE-2011-1065

Multiple stack-based buffer overflows in the PIPIWebPlayer ActiveX control PIWebPlayer.ocx in PIPI Player 2.8.0.0 allow remote attackers to execute arbitrary code via long arguments to the 1 PlayURL or 2 PlayURLWithLocalPlayer methods...

CA Internet Security Suite HIPS XML Security Database Parser Class Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of CA Internet Security Suite 2010. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the...

CVE-2011-1065

The CVE-2011-1065 vulnerability affects PIPI Player’s PIWebPlayer ActiveX control (PIWebPlayer.ocx) bundled with PIPI Player 2.8.0.0. It involves multiple stack-based buffer overflows that allow remote code execution when long arguments are passed to the PlayURL or PlayURLWithLocalPlayer methods....

CVE-2011-0330

The Dell DellSystemLite.Scanner ActiveX control in DellSystemLite.ocx 1.0.0.0 does not properly restrict the values of the WMIAttributesOfInterest property, which allows remote attackers to execute arbitrary WMI Query Language WQL statements via a crafted value, as demonstrated by a value that...

Directory traversal

Directory traversal vulnerability in the GetData method in the Dell DellSystemLite.Scanner ActiveX control in DellSystemLite.ocx 1.0.0.0 allows remote attackers to read arbitrary files via directory traversal sequences in the fileID parameter...

Information disclosure

The Dell DellSystemLite.Scanner ActiveX control in DellSystemLite.ocx 1.0.0.0 does not properly restrict the values of the WMIAttributesOfInterest property, which allows remote attackers to execute arbitrary WMI Query Language WQL statements via a crafted value, as demonstrated by a value that...

CVE-2011-0329

Directory traversal vulnerability in the GetData method in the Dell DellSystemLite.Scanner ActiveX control in DellSystemLite.ocx 1.0.0.0 allows remote attackers to read arbitrary files via directory traversal sequences in the fileID parameter...

CVE-2011-0329

The CVE-2011-0329 entry concerns the Dell DellSystemLite.Scanner ActiveX control (DellSystemLite.ocx 1.0.0.0). Affected component is GetData(), where improper input validation allows directory traversal via the fileID parameter to read arbitrary files. The DellSystemLite.Scanner is reported to be...

CVE-2011-0330

The Dell DellSystemLite.Scanner ActiveX control in DellSystemLite.ocx 1.0.0.0 does not properly restrict the values of the WMIAttributesOfInterest property, which allows remote attackers to execute arbitrary WMI Query Language WQL statements via a crafted value, as demonstrated by a value that...

Dell DellSystemLite.Scanner ActiveX Control Multiple Vulnerabilities

The DellSystemLite.Scanner ActiveX control, a component from Dell to determine relevant software for your system, installed on the remote Windows host reportedly is affected by multiple vulnerabilities : - An input validation error exists in the 'GetData' method can be exploited to disclose the...

SAP Crystal Reports PrintControl.dll ActiveX Control Buffer Overflow (CVE-2010-2590)

A heap buffer overflow vulnerability exists in SAP Crystal Reports PrintControl.dll ActiveX Control. The vulnerability is due to a boundary error when parsing the ServerResourceVersion property. A remote attacker can leverage this issue by enticing a target user to open a malicious web page,...

Stack overflow

Stack-based buffer overflow in a certain ActiveX control in MediaDBPlayback.DLL 2.2.0.5 in the Moxa ActiveX SDK allows remote attackers to execute arbitrary code via a long PlayFileName property value...

CVE-2010-4742

Stack-based buffer overflow in a certain ActiveX control in MediaDBPlayback.DLL 2.2.0.5 in the Moxa ActiveX SDK allows remote attackers to execute arbitrary code via a long PlayFileName property value...

CVE-2010-4742

Stack-based buffer overflow in a certain ActiveX control in MediaDBPlayback.DLL 2.2.0.5 in the Moxa ActiveX SDK allows remote attackers to execute arbitrary code via a long PlayFileName property value...

CVE-2011-0323

Topaz Systems SigPlus Pro ActiveX Control 3.95, and possibly other versions before 4.29, allows remote attackers to execute arbitrary code by calling the exposed unsafe 1 SetLogFilePath and 2 SigMessage methods to create arbitrary files with arbitrary content...

CVE-2011-0324

Multiple heap-based buffer overflows in Topaz Systems SigPlus Pro ActiveX Control 3.95, and possibly other versions before 4.29, allow remote attackers to execute arbitrary code via a long 1 KeyString property, 2 NewPath parameter to the SetLocalIniFilePath method, or 3 NewPortPath parameter to t...

Code injection

Topaz Systems SigPlus Pro ActiveX Control 3.95, and possibly other versions before 4.29, allows remote attackers to execute arbitrary code by calling the exposed unsafe 1 SetLogFilePath and 2 SigMessage methods to create arbitrary files with arbitrary content...

Heap overflow

Multiple heap-based buffer overflows in Topaz Systems SigPlus Pro ActiveX Control 3.95, and possibly other versions before 4.29, allow remote attackers to execute arbitrary code via a long 1 KeyString property, 2 NewPath parameter to the SetLocalIniFilePath method, or 3 NewPortPath parameter to t...

CVE-2011-0323

Topaz Systems SigPlus Pro ActiveX Control 3.95, and possibly other versions before 4.29, allows remote attackers to execute arbitrary code by calling the exposed unsafe 1 SetLogFilePath and 2 SigMessage methods to create arbitrary files with arbitrary content...