Symantec Altiris eXpress NS SC Download ActiveX control vulnerability

Added: 09/22/2009 BID: 36346 OSVDB: 57893 Background The Altiris eXpress NS SC Download ActiveX control is installed with several products, including Altiris Deployment Solution. Problem The Altiris eXpress NS SC Download ActiveX control allows remote files to be downloaded, saved to arbitrary...

Kylinsoft InstantGet 2.08 - ActiveX Control ShowBar Method Buffer Overflow

Kylinsoft InstantGet 2.08 - ActiveX Control ShowBar Method Buffer Overflow source: https://www.securityfocus.com/bid/42418/info Kylinsoft InstantGet ActiveX control is prone to a buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an...

Kylinsoft InstantGet 2.08 - ActiveX Control 'ShowBar' Method Buffer Overflow

source: https://www.securityfocus.com/bid/42418/info Kylinsoft InstantGet ActiveX control is prone to a buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer. An attacker can exploit this issue to...

Heap overflow

Heap-based buffer overflow in the SwDir.dll ActiveX control in Adobe Shockwave Player 11.5.1.601 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long PlayerVersion property value...

Novell iPrint Client ActiveX Control Buffer Overflow Vulnerability

This host has Novell iPrint Client installed and is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodnovelliprintclientactvxbofvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ Novell iPrint Client ActiveX Control Buffer Overflow Vulnerability Authors: Sharath S Copyright:...

Novell iPrint Client ActiveX Control Buffer Overflow Vulnerability

Novell iPrint Client is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Novell Groupwise Client 7.0.3.1294 - gxmim1.dll ActiveX Control Buffer Overflow (PoC)

Novell Groupwise Client 7.0.3.1294 - gxmim1.dll ActiveX Control Buffer Overflow PoC source: https://www.securityfocus.com/bid/36398/info Novell GroupWise Client is prone to an unspecified buffer-overflow vulnerability because the application fails to perform adequate boundary checks on...

EasyMail Objects 6.0.2.0 - emimap4.dll ActiveX Control Remote Code Execution

EasyMail Objects 6.0.2.0 - emimap4.dll ActiveX Control Remote Code Execution source: https://www.securityfocus.com/bid/36409/info EasyMail Objects ActiveX control is prone to a remote code-execution vulnerability because the application fails to properly sanitize user-supplied data. Successfully...

Novell Groupwise Client 7.0.3.1294 - 'gxmim1.dll' ActiveX Control Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/36398/info Novell GroupWise Client is prone to an unspecified buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Successful exploits allow remote attackers to execute arbitrary code in th...

EasyMail Objects 6.0.2.0 - 'emimap4.dll' ActiveX Control Remote Code Execution

source: https://www.securityfocus.com/bid/36409/info EasyMail Objects ActiveX control is prone to a remote code-execution vulnerability because the application fails to properly sanitize user-supplied data. Successfully exploiting this issue allows remote attackers to execute arbitrary code in th...

Installshield 2009 15.0.0.53 Premier - 'ISWiAutomation15.dll' ActiveX Arbitrary File Overwrite

source: https://www.securityfocus.com/bid/43857/info InstallShield 2009 Premier ActiveX control is prone to an arbitrary-file-overwrite vulnerability. Attackers can overwrite arbitrary files on the victim's computer in the context of the vulnerable application typically Internet Explorer using th...

Microsoft DHTML Editing Component ActiveX Remote Code Execution Vulnerability (956844)

This host is missing a critical security update according to Microsoft Bulletin MS09-046. OpenVAS Vulnerability Test $Id: secpodms09-046.nasl 5363 2017-02-20 13:07:22Z cfi $ Microsoft DHTML Editing Component ActiveX Remote Code Execution Vulnerability 956844 Authors: Sharath S Copyright: Copyrigh...

Symantec Altiris Deployment Solution ActiveX Control Arbitrary File Download and Execute

This module allows remote attackers to install and execute arbitrary files on a users file system via AeXNSPkgDLLib.dll 6.0.0.1418. This module was tested against Symantec Altiris Deployment Solution 6.9 sp3. This module requires Metasploit: https://metasploit.com/download Current source:...

Microsoft Security Bulletin MS09-046 - Critical Vulnerability in DHTML Editing Component ActiveX Control Could Allow Remote Code Execution (956844)

Microsoft Security Bulletin MS09-046 - Critical Vulnerability in DHTML Editing Component ActiveX Control Could Allow Remote Code Execution 956844 Published: September 08, 2009 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in th...

Design/Logic Flaw

The DHTML Editing Component ActiveX control in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly format HTML markup, which allows remote attackers to execute arbitrary code via a crafted web site that triggers "system state" corruption, aka "DHTML Editing Component...

Design/Logic Flaw

Insecure method vulnerability in the UUSee UUUpgrade ActiveX control UUUpgrade.ocx 3.0.2.12 allows remote attackers to force the download and overwrite of arbitrary files via crafted arguments to the Update method, as exploited in the wild in June 2009...

CVE-2008-7168

Insecure method vulnerability in the UUSee UUUpgrade ActiveX control UUUpgrade.ocx 3.0.2.12 allows remote attackers to force the download and overwrite of arbitrary files via crafted arguments to the Update method, as exploited in the wild in June 2009...

VulnCheck KEV: CVE-2008-7168

Insecure method vulnerability in the UUSee UUUpgrade ActiveX control UUUpgrade.ocx 3.0.2.12 allows remote attackers to force the download and overwrite of arbitrary files via crafted arguments to the Update method, as exploited in the wild in June 2009...

MS09-046: Vulnerability in DHTML Editing Component ActiveX Control Could Allow Remote Code Execution (956844)

The remote host is missing Security Update 956844. The DHTML Editing Component ActiveX Control on the remote host has a remote code execution vulnerability. A remote attacker could exploit this by tricking a user into viewing a specially crafted web page, resulting in the execution of arbitrary...

Microsoft DHTML Editing Component ActiveX Control Code Execution (MS09-046; CVE-2009-2519)

The DHTML Editing Component ActiveX control provides an HTML editor that can be used to support dynamic Web site HTML editing in software. A remote code execution vulnerability has been reported in the DHTML Editing Component ActiveX Control. The vulnerability is due to a memory corruption error ...