CVE-2014-9266

The STWConfig ActiveX control in Samsung SmartViewer does not properly initialize a variable, which allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2014-9268

The CVE-2014-9268 entry concerns Autodesk Design Review’s AdView.AdViewer.1 ActiveX control. Affected component: AdView.AdViewer ActiveX in ADR prior to 2013 Hotfix 1. Root cause: improper parsing of DWF files enables an unauthenticated, remote attacker to execute arbitrary code. Impact: remote c...

CVE-2014-9266

Summary of CVE-2014-9266 (Samsung SmartViewer): The STWConfig ActiveX control in Samsung SmartViewer contains a flaw where a variable is not initialized before use, enabling remote code execution. According to ZDI-14-400, exploitation requires user interaction (target visits a malicious page or o...

CVE-2014-9265

Stack-based buffer overflow in the BackupToAvi method in the CNCCtrl ActiveX control in Samsung SmartViewer allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2014-9265

CVE-2014-9265: A stack-based buffer overflow in the BackupToAvi method of Samsung SmartViewer’s CNC_Ctrl ActiveX Control allows remote code execution. The root cause is improper validation of the input buffer size before copying into a fixed-size stack buffer. Exploitation typically requires user...

CVE-2014-9267

The CVE-2014-9267 issue affects the PTC IsoView ActiveX control, where a heap-based buffer overflow in the ViewPort property can enable remote code execution. According to ZDI advisories, exploitation requires user interaction (visiting a malicious page or opening a malicious file) to trigger the...

CVE-2014-9266: Improper Control of Generation of Code

The STWConfig ActiveX control in Samsung SmartViewer does not properly initialize a variable, which allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2014-9265: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the BackupToAvi method in the CNCCtrl ActiveX control in Samsung SmartViewer allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2014-9267: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the PTC IsoView ActiveX control allows remote attackers to execute arbitrary code via a crafted ViewPort property value...

PT-2014-8914

Name of the Vulnerable Software and Affected Versions PTC IsoView ActiveX Control affected versions not specified Description The issue is related to a heap-based buffer overflow in the PTC IsoView ActiveX control, which allows remote attackers to execute arbitrary code via a crafted ViewPort...

PT-2014-8912

Name of the Vulnerable Software and Affected Versions Samsung SmartViewer affected versions not specified Description The issue is related to a stack-based buffer overflow in the BackupToAvi method of the CNC Ctrl ActiveX control. This allows remote attackers to execute arbitrary code via...

PT-2014-8915

Name of the Vulnerable Software and Affected Versions Autodesk Design Review versions prior to 2013 Hotfix 1 Description The issue allows remote attackers to execute arbitrary code via a crafted DWF file. This is related to the AdView.AdViewer.1 ActiveX control in Autodesk Design Review...

PT-2014-8913

Name of the Vulnerable Software and Affected Versions Samsung SmartViewer affected versions not specified Description The issue is related to the improper initialization of a variable in the STWConfig ActiveX control, which allows remote attackers to execute arbitrary code. Recommendations At the...

Samsung SmartViewer STWConfig ActiveX Control Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung SmartViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the STWConfi...

PTC IsoView ActiveX Control ViewPort Heap Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the PTC IsoView ActiveX control. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

PTC IsoView Activex Control Multiple Animation Methods Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the PTC IsoView ActiveX control. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Autodesk Design Review AdView.AdViewer.1 Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

IPUX CS7522/CS2330/CS2030 IP Camera Stack Buffer Overflow

IPUX CS7522/CS2330/CS2030 IP Camera UltraHVCamX.ocx ActiveX Stack Buffer Overflow Vendor: Big Good Holdings Limited | Fitivision Technology Inc. Product web page: http://www.ipux.net | http://www.fitivision.com Affected version: PT Type ICS2330 firmware: ICS2330 1.1.0-29 20140120 r4296 Cube Type...

IPUX CS7522CS2330CS2030 IP Camera - UltraHVCamX.ocx ActiveX Stack Buffer Overflow

IPUX CS7522CS2330CS2030 IP Camera - UltraHVCamX.ocx ActiveX Stack Buffer Overflow IPUX CS7522/CS2330/CS2030 IP Camera UltraHVCamX.ocx ActiveX Stack Buffer Overflow Vendor: Big Good Holdings Limited | Fitivision Technology Inc. Product web page: http://www.ipux.net | http://www.fitivision.com...

IPUX CL5452CL5132 IP Camera - UltraSVCamX.ocx ActiveX Stack Buffer Overflow

IPUX CL5452CL5132 IP Camera - UltraSVCamX.ocx ActiveX Stack Buffer Overflow IPUX CL5452/CL5132 IP Camera UltraSVCamX.ocx ActiveX Stack Buffer Overflow Vendor: Big Good Holdings Limited | Fitivision Technology Inc. Product web page: http://www.ipux.net | http://www.fitivision.com Affected version:...