CVE-2011-0926

A certain ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop CSD does not properly verify the signature of an unspecified downloaded program, which allows remote attackers to execute arbitrary code by spoofing the CSD installation process, a different vulnerability than CVE-2010-0589...

Code injection

A certain ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop CSD does not properly verify the signature of an unspecified downloaded program, which allows remote attackers to execute arbitrary code by spoofing the CSD installation process, a different vulnerability than CVE-2010-0589...

CVE-2011-0926

A certain ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop CSD does not properly verify the signature of an unspecified downloaded program, which allows remote attackers to execute arbitrary code by spoofing the CSD installation process, a different vulnerability than CVE-2010-0589...

CVE-2011-0926

Cisco Secure Desktop (CSD) 3.x is affected by CVE-2011-0926 due to the CSDWebInstaller.ocx ActiveX control not properly validating the signature of a downloaded program during installation, enabling remote code execution by spoofing the CSD installation process. Exploitation details are described...

CVE-2011-1036: Undefined Security Weakness

The XML Security Database Parser class in the XMLSecDB ActiveX control in the HIPSEngine component in the Management Server before 8.1.0.88, and the client before 1.6.450, in CA Host-Based Intrusion Prevention System HIPS 8.1, as used in CA Internet Security Suite ISS 2010, allows remote attacker...

PT-2011-2769

Name of the Vulnerable Software and Affected Versions Cisco Secure Desktop CSD affected versions not specified Description The issue is related to a certain ActiveX control in CSDWebInstaller.ocx that does not properly verify the signature of a downloaded program. This allows remote attackers to...

CVE-2011-0926: Improper Input Validation

A certain ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop CSD does not properly verify the signature of an unspecified downloaded program, which allows remote attackers to execute arbitrary code by spoofing the CSD installation process, a different vulnerability than CVE-2010-0589...

ZDI-11-093: CA Internet Security Suite HIPS XML Security Database Parser Class Remote Code Execution Vulnerability

ZDI-11-093: CA Internet Security Suite HIPS XML Security Database Parser Class Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-093 February 23, 2011 -- CVE ID: CVE-2011-1036 -- CVSS: 9.3, AV:N/AC:M/Au:N/C:C/I:C/A:C -- Affected Vendors: CA -- Affected Product...

ZDI-11-091: (0day) Cisco Secure Desktop CSDWebInstaller Remote Code Execution Vulnerability

ZDI-11-091: 0day Cisco Secure Desktop CSDWebInstaller Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-091 February 23, 2011 -- CVE ID: CVE-2011-0926 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Cisco -- Affected Products: Cisco Secure Desktop ...

CVE-2011-1065

Multiple stack-based buffer overflows in the PIPIWebPlayer ActiveX control PIWebPlayer.ocx in PIPI Player 2.8.0.0 allow remote attackers to execute arbitrary code via long arguments to the 1 PlayURL or 2 PlayURLWithLocalPlayer methods...

CA Internet Security Suite HIPS XML Security Database Parser Class Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of CA Internet Security Suite 2010. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the...

CVE-2011-1065

The CVE-2011-1065 vulnerability affects PIPI Player’s PIWebPlayer ActiveX control (PIWebPlayer.ocx) bundled with PIPI Player 2.8.0.0. It involves multiple stack-based buffer overflows that allow remote code execution when long arguments are passed to the PlayURL or PlayURLWithLocalPlayer methods....

PT-2011-2850

Name of the Vulnerable Software and Affected Versions PIPI Player version 2.8.0.0 Description The issue is related to multiple stack-based buffer overflows in the PIPIWebPlayer ActiveX control. This occurs when long arguments are passed to the PlayURL or PlayURLWithLocalPlayer methods, allowing...

CVE-2011-0330

The Dell DellSystemLite.Scanner ActiveX control in DellSystemLite.ocx 1.0.0.0 does not properly restrict the values of the WMIAttributesOfInterest property, which allows remote attackers to execute arbitrary WMI Query Language WQL statements via a crafted value, as demonstrated by a value that...

Information disclosure

The Dell DellSystemLite.Scanner ActiveX control in DellSystemLite.ocx 1.0.0.0 does not properly restrict the values of the WMIAttributesOfInterest property, which allows remote attackers to execute arbitrary WMI Query Language WQL statements via a crafted value, as demonstrated by a value that...

Directory traversal

Directory traversal vulnerability in the GetData method in the Dell DellSystemLite.Scanner ActiveX control in DellSystemLite.ocx 1.0.0.0 allows remote attackers to read arbitrary files via directory traversal sequences in the fileID parameter...

CVE-2011-0329

The CVE-2011-0329 entry concerns the Dell DellSystemLite.Scanner ActiveX control (DellSystemLite.ocx 1.0.0.0). Affected component is GetData(), where improper input validation allows directory traversal via the fileID parameter to read arbitrary files. The DellSystemLite.Scanner is reported to be...

CVE-2011-0329

Directory traversal vulnerability in the GetData method in the Dell DellSystemLite.Scanner ActiveX control in DellSystemLite.ocx 1.0.0.0 allows remote attackers to read arbitrary files via directory traversal sequences in the fileID parameter...

CVE-2011-0330

The Dell DellSystemLite.Scanner ActiveX control in DellSystemLite.ocx 1.0.0.0 does not properly restrict the values of the WMIAttributesOfInterest property, which allows remote attackers to execute arbitrary WMI Query Language WQL statements via a crafted value, as demonstrated by a value that...

Dell DellSystemLite.Scanner ActiveX Control Multiple Vulnerabilities

The DellSystemLite.Scanner ActiveX control, a component from Dell to determine relevant software for your system, installed on the remote Windows host reportedly is affected by multiple vulnerabilities : - An input validation error exists in the 'GetData' method can be exploited to disclose the...