ActiveBar ActiveX Method Arbitrary File Write - Ver2 (CVE-2007-3883)

An Overwrite Files vulnerability has been reported in The Data Dynamics ActiveBar ActiveX control. Successful exploitation of this vulnerability could allow a remote attacker to create or overwrite files via a full pathname in the second argument to the Save method, or the first argument to the...

Microsoft Windows Agent ACF File Handling Memory Corruption (MS06-068) - Ver2 (CVE-2006-3445)

A remote code execution vulnerability exists in Microsoft Agent. Microsoft Agent is a software technology that enables an enriched form of user interaction that can make using and learning to use a computer easier and more natural. . The vulnerability is due to a memory corruption error in the...

CVE-2014-8513

Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8514 and CVE-2014-9188. NOTE: this may be clarified later based on details provided b...

CVE-2014-8512

Buffer overflow in an ActiveX control in Atx45.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8511. NOTE: this may be clarified later based on details provided by researchers...

Buffer overflow

Buffer overflow in an ActiveX control in Atx45.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8511. NOTE: this may be clarified later based on details provided by researchers...

Buffer overflow

Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8513 and CVE-2014-8514. NOTE: this may be clarified later based on details provided b...

Buffer overflow

Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8513 and CVE-2014-9188. NOTE: this may be clarified later based on details provided b...

CVE-2014-8511

Buffer overflow in an ActiveX control in Atx45.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8512. NOTE: this may be clarified later based on details provided by researchers...

Buffer overflow

Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8514 and CVE-2014-9188. NOTE: this may be clarified later based on details provided b...

Buffer overflow

Buffer overflow in an ActiveX control in Atx45.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8512. NOTE: this may be clarified later based on details provided by researchers...

CVE-2014-8512

Buffer overflow in an ActiveX control in Atx45.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8511. NOTE: this may be clarified later based on details provided by researchers...

CVE-2014-8514

Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8513 and CVE-2014-9188. NOTE: this may be clarified later based on details provided b...

CVE-2014-9188

CVE-2014-9188 is a remote code execution vulnerability in Schneider Electric ProClima's MetaDraw ActiveX control (MDraw30.ocx) prior to version 6.1.7. The issue arises from a buffer overflow in the ActiveX control, with linked advisories detailing additional MetaDraw flaws (ArrangeObjects, ObjLin...

CVE-2014-8511

Buffer overflow in an ActiveX control in Atx45.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8512. NOTE: this may be clarified later based on details provided by researchers...

CVE-2014-8513

CVE-2014-8513 affects Schneider Electric ProClima (ActiveX control MDraw30.ocx) with a buffer overflow vulnerability in ProClima before 6.1.7 that allows remote code execution via unspecified vectors. The issue is distinct from CVE-2014-8514 and CVE-2014-9188. Remediation guidance in the sources ...

CVE-2014-8512

CVE-2014-8512 affects Schneider Electric ProClima (ATX45) via the Atx45.ocx ActiveX control. The vulnerability is a buffer overflow in the control before version 6.1.7 that could allow remote arbitrary code execution via unspecified vectors. Documented in multiple sources (e.g., ZDI advisories fo...

CVE-2014-8514

Schneider Electric ProClima (MDraw30.ocx ActiveX control) has a buffer overflow vulnerability in versions before 6.1.7, allowing remote code execution via unspecified vectors. This CVE is linked to the ProClima family; no exploit details are provided here. Upgrade to 6.1.7 or later to mitigate.

CVE-2014-8511

The CVE-2014-8511 issue affects Schneider Electric ProClima before 6.1.7, specifically the Atx45.ocx ActiveX control. A heap/buffer overflow within Atx45.ocx (documented variants reference SetHtmlFileName/SetBodyAttribute paths) can allow remote attackers to execute arbitrary code. This is report...

CVE-2014-9418

The eSpace Meeting ActiveX control eSpaceStatusCtrl.dll in Huawei eSpace Desktop before V200R001C03 allows local users to cause a denial of service memory overflow via unspecified vectors...

Design/Logic Flaw

The eSpace Meeting ActiveX control eSpaceStatusCtrl.dll in Huawei eSpace Desktop before V200R001C03 allows local users to cause a denial of service memory overflow via unspecified vectors...