CVE-2010-0990

Stack-based buffer overflow in Creative Software AutoUpdate Engine ActiveX Control 2.0.12.0, as used in Creative Software AutoUpdate 1.40.01, allows remote attackers to execute arbitrary code via vectors related to the BrowseFolder method...

Computer Associates WebScan ActiveX Control Multiple Remote Code Execution Vulnerabilities

This host is installed with CA PSFormX or WebScan ActiveX controls and is prone to multiple remote code execution vulnerabilities. OpenVAS Vulnerability Test $Id: gbcaactivexmultcodeexecvuln.nasl 5364 2017-02-20 13:26:07Z cfi $ Computer Associates WebScan ActiveX Control Multiple Remote Code...

FlipViewer FViewerLoading - ActiveX Control Buffer Overflow (Metasploit)

$Id: ebookflipviewerfviewerloading.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

EnjoySAP SAP GUI - ActiveX Control Buffer Overflow (Metasploit)

$Id: enjoysapguipreparetoposthtml.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Tumbleweed SecureTransport FileTransfer - 'vcst_eu.dll' ActiveX Control Buffer Overflow (Metasploit)

$Id: tumbleweedfiletransfer.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

RealPlayer - 'rmoc3260.dll' ActiveX Control Heap Corruption (Metasploit)

$Id: realplayerconsole.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CA BrightStor ARCserve Backup - 'AddColumn()' ActiveX Buffer Overflow (Metasploit)

$Id: cabrightstoraddcolumn.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Computer Associates WebScan ActiveX Control Multiple RCE Vulnerabilities

CA PSFormX or WebScan ActiveX controls is prone to multiple remote code execution vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2010-0990

Stack-based buffer overflow in Creative Software AutoUpdate Engine ActiveX Control 2.0.12.0, as used in Creative Software AutoUpdate 1.40.01, allows remote attackers to execute arbitrary code via vectors related to the BrowseFolder method...

CVE-2010-0990

CVE-2010-0990 describes a stack-based buffer overflow in Creative Software AutoUpdate Engine ActiveX Control 2.0.12.0 (bundled with AutoUpdate 1.40.01). The vulnerability exists in the BrowseFolder method and can be triggered remotely to execute arbitrary code. Public references identify the affe...

CVE-2010-0990: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Creative Software AutoUpdate Engine ActiveX Control 2.0.12.0, as used in Creative Software AutoUpdate 1.40.01, allows remote attackers to execute arbitrary code via vectors related to the BrowseFolder method...

Secunia Research: Creative Software AutoUpdate Engine 2 ActiveX Control Buffer Overflow

====================================================================== Secunia Research 11/06/2010 - Creative Software - - AutoUpdate Engine 2 ActiveX Control Buffer Overflow - ====================================================================== Table of Contents Affected...

Microsoft IE toStaticHTML跨域信息泄露漏洞（MS10-035）

BUGTRAQ ID: 40409 CVE ID: CVE-2010-1257 Internet Explorer是Windows操作系统中默认捆绑的web浏览器。 Internet Explorer在过滤HTML时处理使用特定字符串的内容的方式存在信息泄露漏洞。攻击者可以通过创建特制的网页来利用这个漏洞，如果用户查看了该网页就会导致信息泄露。成功利用这个漏洞的攻击者可以对用户执行跨站脚本，允许攻击者在用户的安全环境中对使用toStaticHTML API的站点执行脚本。 这个漏洞仅影响Internet Explorer 8中的Quirk渲染模式。 Microsoft Internet...

Microsoft IE未初始化内存远程代码执行漏洞（MS10-035）

BUGTRAQ ID: 40410 CVE ID: CVE-2010-1259 Internet Explorer是Windows操作系统中默认捆绑的web浏览器。 Internet Explorer访问尚未正确初始化对象的方式中存在一个远程执行代码漏洞。攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。成功利用此漏洞的攻击者可以获得与登录用户相同的用户权限。如果用户使用管理用户权限登录，成功利用此漏洞的攻击者便可完全控制受影响的系统。 Microsoft Internet Explorer 8.0 Microsoft Internet Explor...

Microsoft IE Developer Tools ActiveX控件远程内存破坏漏洞（MS10-034）

BUGTRAQ ID: 40490 CVE ID: CVE-2010-0811 Internet Explorer Developer Tools ActiveX控件（iedvtool.dll）是Internet Explorer 8中所提供的调试工具。 Internet Explorer 8 Developer Tools ActiveX控件中存在内存破坏漏洞。攻击者可以通过创建特制的网页来利用这个漏洞，当用户查看网页时就会允许远程执行代码。成功利用这个漏洞的攻击者可以获得与登录用户相同的用户权限。 Microsoft Windows XP SP3 Microsoft Windows ...

Microsoft IE CStyleSheet对象释放后使用漏洞（MS10-035）

BUGTRAQ ID: 40417 CVE ID: CVE-2010-1262 Internet Explorer是Windows操作系统中默认捆绑的web浏览器。 Internet Explorer对CStyleSheet对象支持的实现方式中存在释放后使用漏洞。在创建样式表数组时，其中会包含有对其根容器的引用。如果所创建的样式表不属于标记中元素，则在销毁元素时也会释放根容器。之后应用再试图使用样式表时就会使用无效的指针，导致以当前用户权限执行任意代码。 Microsoft Internet Explorer 8.0 Microsoft Internet Explorer 7.0...

CA20100608-01: Security Notice for CA PSFormX and WebScan ActiveX Controls

-----BEGIN PGP SIGNED MESSAGE----- CA20100608-01: Security Notice for CA PSFormX and WebScan ActiveX Controls Issued: June 8, 2010 CA Technologies support is alerting users to multiple security risks with the PSFormX and WebScan ActiveX controls previously available from the CA Global Security...

Microsoft Data Analyzer and IE Developer Tools ActiveX Control Vulnerability (980195)

This host is missing a critical security update according to Microsoft Bulletin MS10-034. OpenVAS Vulnerability Test $Id: secpodms10-034.nasl 5361 2017-02-20 11:57:13Z cfi $ Description: Microsoft Data Analyzer and IE Developer Tools ActiveX Control Vulnerability 980195 Authors: Veerendra GG...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the Microsoft Internet Explorer 8 Developer Tools ActiveX control in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allow remo...

CVE-2010-0811

Multiple unspecified vulnerabilities in the Microsoft Internet Explorer 8 Developer Tools ActiveX control in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allow remo...