SAP Crystal Reports PrintControl.dll ActiveX Control Buffer Overflow (CVE-2010-2590)

A heap buffer overflow vulnerability exists in SAP Crystal Reports PrintControl.dll ActiveX Control. The vulnerability is due to a boundary error when parsing the ServerResourceVersion property. A remote attacker can leverage this issue by enticing a target user to open a malicious web page,...

Stack overflow

Stack-based buffer overflow in a certain ActiveX control in MediaDBPlayback.DLL 2.2.0.5 in the Moxa ActiveX SDK allows remote attackers to execute arbitrary code via a long PlayFileName property value...

CVE-2010-4742

Stack-based buffer overflow in a certain ActiveX control in MediaDBPlayback.DLL 2.2.0.5 in the Moxa ActiveX SDK allows remote attackers to execute arbitrary code via a long PlayFileName property value...

CVE-2010-4742

Stack-based buffer overflow in a certain ActiveX control in MediaDBPlayback.DLL 2.2.0.5 in the Moxa ActiveX SDK allows remote attackers to execute arbitrary code via a long PlayFileName property value...

CVE-2011-0323

Topaz Systems SigPlus Pro ActiveX Control 3.95, and possibly other versions before 4.29, allows remote attackers to execute arbitrary code by calling the exposed unsafe 1 SetLogFilePath and 2 SigMessage methods to create arbitrary files with arbitrary content...

CVE-2011-0324

Multiple heap-based buffer overflows in Topaz Systems SigPlus Pro ActiveX Control 3.95, and possibly other versions before 4.29, allow remote attackers to execute arbitrary code via a long 1 KeyString property, 2 NewPath parameter to the SetLocalIniFilePath method, or 3 NewPortPath parameter to t...

Heap overflow

Multiple heap-based buffer overflows in Topaz Systems SigPlus Pro ActiveX Control 3.95, and possibly other versions before 4.29, allow remote attackers to execute arbitrary code via a long 1 KeyString property, 2 NewPath parameter to the SetLocalIniFilePath method, or 3 NewPortPath parameter to t...

Code injection

Topaz Systems SigPlus Pro ActiveX Control 3.95, and possibly other versions before 4.29, allows remote attackers to execute arbitrary code by calling the exposed unsafe 1 SetLogFilePath and 2 SigMessage methods to create arbitrary files with arbitrary content...

CVE-2011-0323

The CVE-2011-0323 flaw affects Topaz Systems SigPlus Pro ActiveX Control (versions before 4.29). The vulnerability allows remote code execution by calling unsafe methods SetLogFilePath and SigMessage to create arbitrary files with arbitrary content. Related OpenVAS entries describe multi-vulnerab...

CVE-2011-0324

Affected software: Topaz Systems SigPlus Pro ActiveX Control (versions around 3.95 and possibly before 4.29). Vulnerability: multiple heap-based buffer overflows enabled by long values in (1) KeyString property, (2) SetLocalIniFilePath NewPath parameter, and (3) SetTabletPortPath NewPortPath para...

CVE-2011-0323

Topaz Systems SigPlus Pro ActiveX Control 3.95, and possibly other versions before 4.29, allows remote attackers to execute arbitrary code by calling the exposed unsafe 1 SetLogFilePath and 2 SigMessage methods to create arbitrary files with arbitrary content...

CVE-2011-0323: Undefined Security Weakness

Topaz Systems SigPlus Pro ActiveX Control 3.95, and possibly other versions before 4.29, allows remote attackers to execute arbitrary code by calling the exposed unsafe 1 SetLogFilePath and 2 SigMessage methods to create arbitrary files with arbitrary content...

CVE-2011-0324: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple heap-based buffer overflows in Topaz Systems SigPlus Pro ActiveX Control 3.95, and possibly other versions before 4.29, allow remote attackers to execute arbitrary code via a long 1 KeyString property, 2 NewPath parameter to the SetLocalIniFilePath method, or 3 NewPortPath parameter to t...

PT-2011-2270

Name of the Vulnerable Software and Affected Versions Topaz Systems SigPlus Pro ActiveX Control versions 3.95 through 4.28 Description The issue allows remote attackers to execute arbitrary code by calling exposed unsafe methods. Specifically, the 1 SetLogFilePath and 2 SigMessage methods can be...

PT-2011-2271

Name of the Vulnerable Software and Affected Versions Topaz Systems SigPlus Pro ActiveX Control versions 3.95 through 4.28 Description The issue is related to multiple heap-based buffer overflows that can be triggered by remote attackers. This can be achieved via a long KeyString property, NewPat...

SigPlus Pro ActiveX Control < 4.29 Multiple Vulnerabilities

The SigPlus Pro ActiveX control, used for electronic signature integration with Topaz signature pads and installed on the remote Windows host, is earlier than 4.29. Such versions reportedly are affected by the following vulnerabilities : - The 'SetLogFilePath' method allows creation of a log file...

Oracle Document Capture Multiple Vulnerabilities

The Oracle Document Capture client installed on the remote host is potentially affected by multiple vulnerabilities : - An unspecified vulnerability exists in the Import Export utility. An attacker can exploit this to affect integrity. CVE-2010-3598 - An information disclosure vulnerability exist...

Oracle - Document Capture Insecure READ Method

Oracle - Document Capture Insecure READ Method Source: http://packetstormsecurity.org/files/view/97872/DSECRG-11-007.txt Digital Security Research Group DSecRG Advisory DSECRG-11-007 Internal DSECRG-00117 Application: Oracle Document Capture Versions Affected: 10.1350.0005 Vendor URL:...

Oracle Document Capture Insecure READ Method

Exploit for windows platform in category remote exploits Application: Oracle Document Capture Versions Affected: 10.1350.0005 Vendor URL: http://www.oracle.com/technology/software/products/content-management/indexdc.html Bugs: Insecure READ method Exploits: YES Reported: 29.01.2010 Second report:...

Oracle - Document Capture Insecure READ Method

Source: http://packetstormsecurity.org/files/view/97872/DSECRG-11-007.txt Digital Security Research Group DSecRG Advisory DSECRG-11-007 Internal DSECRG-00117 Application: Oracle Document Capture Versions Affected: 10.1350.0005 Vendor URL:...