EUVD-2010-2976

Stack-based buffer overflow in the IConfigurationAccess interface in the Invensys Wonderware Archestra ConfigurationAccessComponent ActiveX control in Wonderware Application Server WAS before 3.1 SP2 P01, as used in the Wonderware Archestra Integrated Development Environment IDE and the InFusion...

CVE-2010-2931

Stack-based buffer overflow in SigPlus Pro 3.74 ActiveX control allows remote attackers to execute arbitrary code via a long eighth argument HexString to the LCDWriteString method...

CVE-2010-2932

Buffer overflow in BarCodeWiz BarCode 3.29 ActiveX control BarcodeWiz.dll allows remote attackers to execute arbitrary code via a long argument to the LoadProperties method...

Stack overflow

Stack-based buffer overflow in SigPlus Pro 3.74 ActiveX control allows remote attackers to execute arbitrary code via a long eighth argument HexString to the LCDWriteString method...

Oracle Siebel Option Pack for IE ActiveX control memory initialization vulnerability

Overview The Oracle Siebel Option Pack for IE ActiveX control fails to properly initialize memory, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Siebel Option Pack for IE is an ActiveX control that is provided by Oracle Siebel...

Akamai Download Manager arbitrary file download & execution

------------------------------------------------------------------------ Akamai Download Manager arbitrary file download & execution ------------------------------------------------------------------------ Yorick Koster, April 2009...

CVE-2010-2932

BarCodeWiz BarCode ActiveX Control (BarcodeWiz.dll) version 3.29 and prior is affected by a buffer overflow in LoadProperties, enabling remote code execution. This vulnerability affects Windows platforms using the ActiveX control and was documented in multiple sources (Secunia advisory 40786, Exp...

CVE-2010-2932

Buffer overflow in BarCodeWiz BarCode 3.29 ActiveX control BarcodeWiz.dll allows remote attackers to execute arbitrary code via a long argument to the LoadProperties method...

CVE-2010-2931

Stack-based buffer overflow in SigPlus Pro 3.74 ActiveX control allows remote attackers to execute arbitrary code via a long eighth argument HexString to the LCDWriteString method...

CVE-2010-2931: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in SigPlus Pro 3.74 ActiveX control allows remote attackers to execute arbitrary code via a long eighth argument HexString to the LCDWriteString method...

CVE-2010-2932: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in BarCodeWiz BarCode 3.29 ActiveX control BarcodeWiz.dll allows remote attackers to execute arbitrary code via a long argument to the LoadProperties method...

Novell iPrint Client ActiveX Control ExecuteRequest debug Buffer Overflow

This module exploits a stack-based buffer overflow in Novell iPrint Client 5.40. When sending an overly long string to the 'debug' parameter in ExecuteRequest property of ienipp.ocx an attacker may be able to execute arbitrary code. Module Options msf use...

BarCodeWiz BarCode 3.29 Proof Of Concept

BarCodeWiz Barcode ActiveX Control 3.29 PoC SEH Bug found: 24th July 2010 Found by: loneferret Software: http://www.barcodewiz.com/ Nods to exploit-db.com Vulnerable file BarCodeWiz.dll LoadProperties method Tested on: Windows XP Professional SP3 & Windows XP Home SP3 Internet Explorer 6 & Intern...

BarCodeWiz Barcode 3.29 Buffer Overflow

BarCodeWiz Barcode ActiveX Control 3.29 BoF SEH Bug found: 24th July 2010 Author: loneferret Software: http://www.barcodewiz.com/ Nods to exploit-db.com Vulnerable file BarCodeWiz.dll LoadProperties method Tested on: Windows XP Professional SP3 with Internet Explorer 6 Needs adjustment for Intern...

CVE-2010-1517

The GIGABYTE Dldrv2 ActiveX control 1.4.206.11 allows remote attackers to 1 download arbitrary programs onto a client system, and execute these programs, via vectors involving the dl method; and 2 download arbitrary programs onto a client system via vectors involving the SetDLInfo method in...

Design/Logic Flaw

The GIGABYTE Dldrv2 ActiveX control 1.4.206.11 allows remote attackers to 1 download arbitrary programs onto a client system, and execute these programs, via vectors involving the dl method; and 2 download arbitrary programs onto a client system via vectors involving the SetDLInfo method in...

CVE-2010-1518

The CVE-2010-1518 issue affects GIGABYTE Dldrv2 ActiveX Control 1.4.206.11. A missing input validation of the item argument to SetDLInfo leads to array-indexing/overflow, causing memory corruption that enables remote code execution or denial of service. Affected component: Dldrv2 ActiveX Control;...

CVE-2010-1517

The GIGABYTE Dldrv2 ActiveX control 1.4.206.11 allows remote attackers to 1 download arbitrary programs onto a client system, and execute these programs, via vectors involving the dl method; and 2 download arbitrary programs onto a client system via vectors involving the SetDLInfo method in...

CVE-2010-1517

The CVE concerns the GIGABYTE Dldrv2 ActiveX control version 1.4.206.11. The vulnerability allows remote attackers to download arbitrary programs onto a client system and execute them via the dl method, and also via SetDLInfo with the Bdl method. The affected component is the Dldrv2 ActiveX contr...

CVE-2010-1517: Improper Input Validation

The GIGABYTE Dldrv2 ActiveX control 1.4.206.11 allows remote attackers to 1 download arbitrary programs onto a client system, and execute these programs, via vectors involving the dl method; and 2 download arbitrary programs onto a client system via vectors involving the SetDLInfo method in...