1 Click Audio Converter v2.3.6 - Activex Buffer Overflow

Document Title: =============== 1 Click Audio Converter v2.3.6 - Activex Buffer Overflow References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1504 http://www.vulnerability-lab.com/getcontent.php?id=1505 View Video: https://www.youtube.com/watch?v=Ad0wHlHz0KU...

WellinTech KingSCADA < 3.1.2.13-EN 'kxClientDownload.ocx' ActiveX RCE

Binary data scadakingscadakxclientdownloadactivex.nbin...

Moxa VPort ActiveX SDK Plus Stack Buffer Overflow Vulnerability

Moxa's VPort SDK PLUS, including CGI command, ActiveX control and API libraries, allows third-party developers to easily integrate customized monitoring applications. Moxa VPort ActiveX SDK Plus suffers from a stack buffer overflow vulnerability. A remote attacker can exploit the vulnerability by...

CVE-2015-0986

Multiple stack-based buffer overflows in Moxa VPort ActiveX SDK Plus before 2.8 allow remote attackers to insert assembly-code lines via vectors involving a regkey 1 set or 2 get command...

Stack overflow

Multiple stack-based buffer overflows in Moxa VPort ActiveX SDK Plus before 2.8 allow remote attackers to insert assembly-code lines via vectors involving a regkey 1 set or 2 get command...

CVE-2015-0986

Multiple stack-based buffer overflows in Moxa VPort ActiveX SDK Plus before 2.8 allow remote attackers to insert assembly-code lines via vectors involving a regkey 1 set or 2 get command...

CVE-2015-0986

The CVE-2015-0986 issue affects Moxa VPort ActiveX SDK Plus (pre-2.8) and is caused by a stack-based buffer overflow in the VPORTSDKCtrl.1 ActiveX control, triggered by passing an overly long string to the GetClientReg method’s Name parameter, allowing a remote attacker to execute arbitrary code ...

PT-2015-5006

Name of the Vulnerable Software and Affected Versions Moxa VPort ActiveX SDK Plus versions prior to 2.8 Description The issue involves multiple stack-based buffer overflows that allow remote attackers to execute arbitrary code via specific vectors, including regkey set or get commands. This can b...

CVE-2015-0986: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in Moxa VPort ActiveX SDK Plus before 2.8 allow remote attackers to insert assembly-code lines via vectors involving a regkey 1 set or 2 get command...

CVE-2015-0140

An unspecified ActiveX control in IBM SPSS Statistics 22.0 through FP1 on 32-bit platforms allows remote attackers to execute arbitrary code via a crafted HTML document...

CVE-2015-0140

An unspecified ActiveX control in IBM SPSS Statistics 22.0 through FP1 on 32-bit platforms allows remote attackers to execute arbitrary code via a crafted HTML document...

CVE-2015-0140

IBM SPSS Statistics 22.0 on Windows 32‑bit is affected by CVE-2015-0140 due to a vulnerable ActiveX control in the SPSS Statistics ActiveX component. A remote attacker can cause arbitrary code execution by forcing a user to render a specially crafted HTML page, potentially compromising the system...

PT-2015-1376

Name of the Vulnerable Software and Affected Versions IBM SPSS Statistics versions 22.0 through 22.0 FP1 Description The issue is related to errors in the code of an ActiveX component in the data analysis system. It can be exploited by a remote attacker to execute arbitrary code on 32-bit platfor...

CVE-2015-0140: Undefined Security Weakness

An unspecified ActiveX control in IBM SPSS Statistics 22.0 through FP1 on 32-bit platforms allows remote attackers to execute arbitrary code via a crafted HTML document...

IBM SPSS Statistics ActiveX Control Code Execution Vulnerability

IBM SPSS Statistics is a suite of statistical analysis software that helps organizations address the entire analytics process, from planning and data collection to analysis, reporting, and deployment. A code execution vulnerability exists in the ActiveX control of IBM SPSS Statistics version 22.0...

Ca eTrust PestPatrol Antispyware ActiveX Buffer Overflow106 - Ver2 (CVE-2009-4225)

A buffer overflow vulnerability has been reported in Ca Etrust Pestpatrole Ppctl.dll Activex and Computer Associates eTrust PestPatrol. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Microsoft Visual Basic VBE6.DLL Stack Memory Corruption (MS10-031) - Ver2 (CVE-2010-0815)

Microsoft Visual Basic VBA is a technology for developing client desktop packaged applications and integrating them with existing data and systems. Microsoft Office products include VBA and make use of VBA to perform certain functions. A remote code execution vulnerability has been reported in th...

Oracle WebCenter Forms Recognition Sssplt30.ocx Arbitrary File Creation - Ver2 (CVE-2012-1710)

A directory traversal vulnerability has been reported in Oracle WebCenter Forms Recognition. The vulnerability is due to insufficient validation of parameters used in a certain method in the Sssplt30 ActiveX control. A remote attacker can exploit this vulnerability by enticing a target user to op...

Microsoft Visual Studio WMI Object Code Execution (MS06-073) - Ver2 (CVE-2006-4704)

A remote code execution vulnerability exists in Microsoft Visual Studio 2005. Microsoft Visual Studio is a software development product for computer programmers. It centers on an integrated development environment which lets programmers create standalone applications, web sites, web applications,...

ICBC Internet banking assistant and other security controls was traced to the presence of the“disaster-level”vulnerability-vulnerability warning-the black bar safety net

Recently, ICBC Internet banking assistant and other security controls was traced to the presence of the“disaster-level”vulnerability, the vulnerability can cause remote arbitrary code execution on the user computer, security caused great harm. Baidu security prompts the user as soon as possible o...