CVE-2011-0331: Undefined Security Weakness

Use-after-free vulnerability in the addOSPLext method in the Honeywell ScanServer ActiveX control 780.0.20.5 allows remote attackers to execute arbitrary code via a crafted HTML document...

PT-2011-2274

Name of the Vulnerable Software and Affected Versions Honeywell ScanServer version 780.0.20.5 Description The issue is related to a use-after-free vulnerability in the addOSPLext method of the Honeywell ScanServer ActiveX control. This vulnerability allows remote attackers to execute arbitrary co...

CA Host-Based Intrusion Prevention System 'XMLSecDB' ActiveX Control Code Execution Vulnerability

This host is installed with CA Host-Based Intrusion Prevention SystemHIPS and is prone to a remote code-execution vulnerability. OpenVAS Vulnerability Test $Id: gbcahipsactivexctrlcodeexecvuln.nasl 6517 2017-07-04 13:34:20Z cfischer $ CA Host-Based Intrusion Prevention System 'XMLSecDB' ActiveX...

CA Host-Based Intrusion Prevention System 'XMLSecDB' ActiveX Control Code Execution Vulnerability

CA Host-Based Intrusion Prevention SystemHIPS is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Update Protection against HP Photo Creative audio.Record ActiveX Stack Buffer Overflow

A buffer overflow vulnerability exists in HP Photo Creative ActiveX control. The vulnerability is due to a boundary error in ContentMan.dll while parsing arguments passed to the Resample function of the audio.Record ActiveX control. Remote attackers could exploit this vulnerability by enticing th...

Design/Logic Flaw

The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solution 6.9.x, Notification Server 6.0.x, and Symantec Management Platform 7.0.x exposes an unsafe method, which allows remote attackers to force the download of arbitrary files and...

CVE-2009-3028

The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solution 6.9.x, Notification Server 6.0.x, and Symantec Management Platform 7.0.x exposes an unsafe method, which allows remote attackers to force the download of arbitrary files and...

Novell iPrint Client 5.52 - ActiveX Control Buffer Overflow (Metasploit)

$Id: novelliprintgetdriversettings2.rb 11888 2011-03-07 02:28:15Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Novell iPrint Client ActiveX Control <= 5.52 Buffer Overflow

$Id: novelliprintgetdriversettings2.rb 11886 2011-03-06 20:27:06Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

PIPI Player PIPIWebPlayer ActiveX Control Buffer Overflow Vulnerability

This host is installed with PIPI Player and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodpipiplayeractivexctrlbofvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ PIPI Player PIPIWebPlayer ActiveX Control Buffer Overflow Vulnerability Authors: Madhuri D Copyright:...

Topaz Systems SigPlus Pro ActiveX Control Multiple Vulnerabilities

The host is installed with SigPlus Pro ActiveX Control and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbsigplusproactivexcontrolmultvuln.nasl 7024 2017-08-30 11:51:43Z teissa $ Topaz Systems SigPlus Pro ActiveX Control Multiple Vulnerabilities Authors: Madhuri D...

PIPI Player PIPIWebPlayer ActiveX Control Buffer Overflow Vulnerability

PIPI Player is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Topaz Systems SigPlus Pro ActiveX Control Multiple Vulnerabilities

SigPlus Pro ActiveX Control is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Code injection

The CSDWebInstallerCtrl ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop CSD allows remote attackers to download an unintended Cisco program onto a client machine, and execute this program, by identifying a Cisco program with a Cisco digital signature and then renaming this program ...

CA20110223-01: Security Notice for CA Host-Based Intrusion Prevention System

CA20110223-01: Security Notice for CA Host-Based Intrusion Prevention System Issued: February 23, 2011 Updated: February 24, 2011 CA Technologies support is alerting customers to a security risk associated with CA Host-Based Intrusion Prevention System HIPS. A vulnerability exists that can allow ...

PT-2011-2768

Name of the Vulnerable Software and Affected Versions Cisco Secure Desktop affected versions not specified Description The issue concerns a remote code execution vulnerability in the CSDWebInstaller ActiveX Control Cleaner.cab. Recommendations At the moment, there is no information about a newer...

(0Day) Cisco Secure Desktop CSDWebInstaller ActiveX Control Cleaner.cab Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco Secure Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

(0Day) Cisco Secure Desktop CSDWebInstaller Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco Secure Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Oracle Document Capture EasyMail ActiveX Control Information Disclosure (CVE-2010-3595)

Oracle Document Capture supplies document scanning and indexing capabilities. It installs an ActiveX control EasyMail on web clients An information disclosure vulnerability has been reported in the EasyMail ActiveX control included with Oracle Document Capture. The vulnerability is due to imprope...

Oracle Document Capture ActiveX Control WriteJPG Buffer Overflow (CVE-2010-3599)

Oracle Document Capture supplies document scanning and indexing capabilities. It installs an ActiveX control NCSECWLib on web clients. A buffer overflow vulnerability has been reported in the NCSECWLib ActiveX control included with Oracle Document Capture. The vulnerability is due to improper...