11684 matches found
CVE-2014-8512
Buffer overflow in an ActiveX control in Atx45.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8511. NOTE: this may be clarified later based on details provided by researchers...
CVE-2014-8514: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8513 and CVE-2014-9188. NOTE: this may be clarified later based on details provided b...
CVE-2014-8511: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in an ActiveX control in Atx45.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8512. NOTE: this may be clarified later based on details provided by researchers...
CVE-2014-9188: Improper Neutralization of Special Elements used in a Command
Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8513 and CVE-2014-8514. NOTE: this may be clarified later based on details provided b...
CVE-2014-8513: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8514 and CVE-2014-9188. NOTE: this may be clarified later based on details provided b...
CVE-2014-9418
The eSpace Meeting ActiveX control eSpaceStatusCtrl.dll in Huawei eSpace Desktop before V200R001C03 allows local users to cause a denial of service memory overflow via unspecified vectors...
Design/Logic Flaw
The eSpace Meeting ActiveX control eSpaceStatusCtrl.dll in Huawei eSpace Desktop before V200R001C03 allows local users to cause a denial of service memory overflow via unspecified vectors...
CVE-2014-9418
The eSpace Meeting ActiveX control eSpaceStatusCtrl.dll in Huawei eSpace Desktop before V200R001C03 allows local users to cause a denial of service memory overflow via unspecified vectors...
CVE-2014-9418
Huawei eSpace Desktop (eSpace Meeting) is affected by a heap-based memory overflow in the ActiveX controls ContactsCtrl.dll and eSpaceStatusCtrl.dll. The vulnerability occurs when parsing a large amount of bytes (GetNameyNum() in ContactsCtrl.dll), leading to memory overflow and possible denial o...
HP's Zero Day Initiative Changes Bug-Buying Guidelines
HP’s Zero Day Initiative has decided to adjust its guidelines and criteria or buying some vulnerabilities in the future, eliminating some large classes of bugs from its menu. The group, which has been among the more visible and prominent of the vulnerability purchasing programs since its inceptio...
PT-2014-9003
Name of the Vulnerable Software and Affected Versions Huawei eSpace Desktop versions prior to V200R001C03 Description The issue allows local users to cause a denial of service, specifically a memory overflow, via unspecified vectors in the eSpace Meeting ActiveX control. Recommendations For...
December 2014 Microsoft Patch Tuesday Security Bulletins
Microsoft exits 2014 the way it came in to the year, with a relatively quiet set of Patch Tuesday security bulletins. As promised last week, Microsoft released seven bulletins today, three of them rated critical, meaning the chance of exploit and remote code execution is high. Microsoft also...
CVE-2014-9268
The AdView.AdViewer.1 ActiveX control in Autodesk Design Review ADR before 2013 Hotfix 1 allows remote attackers to execute arbitrary code via a crafted DWF file...
CVE-2014-9267
Heap-based buffer overflow in the PTC IsoView ActiveX control allows remote attackers to execute arbitrary code via a crafted ViewPort property value...
CVE-2014-9266
The STWConfig ActiveX control in Samsung SmartViewer does not properly initialize a variable, which allows remote attackers to execute arbitrary code via unspecified vectors...
Code injection
The AdView.AdViewer.1 ActiveX control in Autodesk Design Review ADR before 2013 Hotfix 1 allows remote attackers to execute arbitrary code via a crafted DWF file...
Heap overflow
Heap-based buffer overflow in the PTC IsoView ActiveX control allows remote attackers to execute arbitrary code via a crafted ViewPort property value...
Code injection
The STWConfig ActiveX control in Samsung SmartViewer does not properly initialize a variable, which allows remote attackers to execute arbitrary code via unspecified vectors...