Buffer overflow

Buffer overflow in the ActiveX control in Sharp EVA Animeter allows remote attackers to execute arbitrary code via a crafted web page...

CVE-2016-1176

Buffer overflow in the ActiveX control in Sharp EVA Animeter allows remote attackers to execute arbitrary code via a crafted web page...

CVE-2016-1176

CVE-2016-1176 is a buffer overflow vulnerability in the ActiveX control for Sharp EVA Animeter. Multiple connected records confirm that remote attackers could exploit this by steering a user to a malicious page to execute arbitrary code, via the EVA Animator ActiveX control. The known affected co...

PT-2016-4623

Name of the Vulnerable Software and Affected Versions Sharp EVA Animeter affected versions not specified Description A buffer overflow issue exists in the ActiveX control of Sharp EVA Animeter, allowing remote attackers to execute arbitrary code through a crafted web page. Recommendations At the...

CVE-2016-1176: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the ActiveX control in Sharp EVA Animeter allows remote attackers to execute arbitrary code via a crafted web page...

Unitronics VisiLogic OPLC TeeCommander ChartLink ActiveX Control Memory Corruption (CVE-2015-6478)

A memory corruption vulnerability exists in Unitronics VisiLogic OPLC. The vulnerability is due to untrusted pointer dereference on the ChartLink parameter of the TeeChart.TeeCommander ActiveX control. A remote attacker could exploit this vulnerability by enticing a vulnerable user to open a...

LEADTOOLS ActiveX control DLL Load Arbitrary Code Execution Vulnerability

LEADTOOLS ActiveX control is an ActiveX control. A security vulnerability exists in LEADTOOLS ActiveX control that allows remote attackers to construct malicious web pages that can be tricked into parsing, leading to arbitrary code execution...

MS16-003: Cumulative Security Update for JScript and VBScript to Address Remote Code Execution (3125540)

The remote Windows host is missing a security update. It is, therefore, affected by a remote code execution vulnerability in the VBScript engine due to improper handling of objects in memory. An attacker can exploit this vulnerability by convincing a user to visit a specially crafted website or...

Xerox DocuShare Stack Buffer Overflow Vulnerability

Xerox DocuShare is a Web-based document content management solution from Xerox. The solution supports the storage of any type of document, image or video, business process automation, document content sharing and collaboration, and more. A stack buffer overflow vulnerability exists in Xerox...

Xerox DocuShare Command Execution Vulnerability

Xerox DocuShare is a Web-based document content management solution from Xerox. The solution supports storage of any type of document, image or video, business process automation, document content sharing and collaboration. A command execution vulnerability exists in Xerox DocuShare. An attacker...

CVE-2015-8561

The F1BookView ActiveX control in F1 Bookview in Schneider Electric ProClima before 6.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted integer value to the 1 AttachToSS, 2 CopyAll, 3 CopyRange, 4 CopyRangeEx, or 5 SwapTable method, a...

CVE-2015-7918

Multiple buffer overflows in the F1BookView ActiveX control in F1 Bookview in Schneider Electric ProClima before 6.2 allow remote attackers to execute arbitrary code via the 1 Attach, 2 DefinedName, 3 DefinedNameLocal, 4 ODBCPrepareEx, 5 ObjCreatePolygon, 6 SetTabbedTextEx, or 7 SetValidationRule...

CVE-2015-7918

The F1BookView ActiveX control in Schneider Electric ProClima before 6.2 contains multiple buffer overflows that can be triggered via the methods Attach, DefinedName, DefinedNameLocal, ODBCPrepareEx, ObjCreatePolygon, SetTabbedTextEx, and SetValidationRule, enabling remote code execution. This vu...

CVE-2015-7918: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in the F1BookView ActiveX control in F1 Bookview in Schneider Electric ProClima before 6.2 allow remote attackers to execute arbitrary code via the 1 Attach, 2 DefinedName, 3 DefinedNameLocal, 4 ODBCPrepareEx, 5 ObjCreatePolygon, 6 SetTabbedTextEx, or 7 SetValidationRule...

CVE-2015-8561: Improper Restriction of Operations within the Bounds of a Memory Buffer

The F1BookView ActiveX control in F1 Bookview in Schneider Electric ProClima before 6.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted integer value to the 1 AttachToSS, 2 CopyAll, 3 CopyRange, 4 CopyRangeEx, or 5 SwapTable method, a...

MS15-126: Cumulative security update for JScript and VBScript to address remote code execution: December 8, 2015

Fixes vulnerabilities in the VBScript scripting engine in Windows that could allow remote code execution if an attacker hosts a specially crafted website.SummaryThis security update fixes vulnerabilities in the VBScript scripting engine in Windows. The more severe of the vulnerabilities could all...

PT-2015-7669

Name of the Vulnerable Software and Affected Versions Schneider Electric ProClima versions prior to 6.2 Description The issue is related to multiple buffer overflows in the F1BookView ActiveX control, allowing remote attackers to execute arbitrary code via various methods, including Attach,...

PT-2015-7806

Name of the Vulnerable Software and Affected Versions Schneider Electric ProClima versions prior to 6.2 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption. This can be achieved by providing a crafted integer value to certa...

Schneider Electric ProClima F1BookView ActiveX Control CopyRange/SwapTables Methods Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Schneider Electric ProClima. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaws exist within the...

Schneider Electric ProClima F1BookView ActiveX Control ODBCPrepareEx Method Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Schneider Electric ProClima. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...