NTR - ActiveX Control 'StopModule()' Remote Code Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 HttpClients::IE, :uaminver = "6.0",...

HP Application Lifecycle Management - 'XGO.ocx' ActiveX 'SetShapeNodeType()' Remote Code Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::IE,...

NTR - ActiveX Control 'Check()' Method Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 HttpClients::IE, :uaminver = "6.0",...

HP Application Lifecycle Management ActiveX Control Arbitrary File Overwrite

Added: 10/09/2012 BID: 55272 OSVDB: 85059 Background HP Application Lifecycle Management ALM is a software product designed to manage the application lifecycle from requirements through readiness for delivery from a single repository, providing a consistent user experience and customizable...

HP Application Lifecycle Management ActiveX Control Arbitrary File Overwrite

Added: 10/09/2012 BID: 55272 OSVDB: 85059 Background HP Application Lifecycle Management ALM is a software product designed to manage the application lifecycle from requirements through readiness for delivery from a single repository, providing a consistent user experience and customizable...

HP Application Lifecycle Management ActiveX Control Arbitrary File Overwrite

Added: 10/09/2012 BID: 55272 OSVDB: 85059 Background HP Application Lifecycle Management ALM is a software product designed to manage the application lifecycle from requirements through readiness for delivery from a single repository, providing a consistent user experience and customizable...

HP Application Lifecycle Management ActiveX Control Arbitrary File Overwrite

Added: 10/09/2012 BID: 55272 OSVDB: 85059 Background HP Application Lifecycle Management ALM is a software product designed to manage the application lifecycle from requirements through readiness for delivery from a single repository, providing a consistent user experience and customizable...

Buffer overflow

Multiple buffer overflows in the Pdf Printer Preferences ActiveX Control in pdfxctrl.dll in Tracker Software PDF-XChange 3.60.0128 allow remote attackers to execute arbitrary code via a long string in the 1 subpath parameter to the StoreInRegistry function or 2 subkey parameter to the...

CVE-2012-5324

Multiple buffer overflows in the Pdf Printer Preferences ActiveX Control in pdfxctrl.dll in Tracker Software PDF-XChange 3.60.0128 allow remote attackers to execute arbitrary code via a long string in the 1 subpath parameter to the StoreInRegistry function or 2 subkey parameter to the...

CVE-2012-5324

CVE-2012-5324 affects Tracker Software PDF-XChange (v3.60.0128) with the Pdf Printer Preferences ActiveX Control (pdfxctrl.dll). Multiple buffer overflows allow remote code execution when an attacker provides an excessively long string to (1) sub_path in StoreInRegistry or (2) sub_key in InitFrom...

Stack overflow

Stack-based buffer overflow in the SelectDirectory method in DcsCliCtrl.dll in Camera Stream Client ActiveX Control, as used in D-Link DCS-5605 PTZ IP Network Camera, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long string argument...

PT-2012-5905 · D Link · Dcsclictrl.Dll +2

Name of the Vulnerable Software and Affected Versions: D-Link DCS-5605 PTZ IP Network Camera affected versions not specified Description: The issue is related to a stack-based buffer overflow in the SelectDirectory method in DcsCliCtrl.dll, which is part of the Camera Stream Client ActiveX Contro...

Cyme ChartFX Client Server - ActiveX Control Array Indexing

Cyme ChartFX Client Server - ActiveX Control Array Indexing Application: CYME Power Engineering Software Platforms: Windows Version: CYME version 5.0.12.663. Secunia: SA48430 PRL: 2012-29 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter:...

Cyme ChartFX Client Server Array Indexing

Application: CYME Power Engineering Software Platforms: Windows Version: CYME version 5.0.12.663. Secunia: SA48430 PRL: 2012-29 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timeline 3 Technical details...

Cyme ChartFX Client Server - ActiveX Control Array Indexing

Application: CYME Power Engineering Software Platforms: Windows Version: CYME version 5.0.12.663. Secunia: SA48430 PRL: 2012-29 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timeline 3 Technical details...

Cyme ChartFX Client Server ActiveX Control Array Indexing Vulnerability

Exploit for windows platform in category dos / poc Application: CYME Power Engineering Software Platforms: Windows Version: CYME version 5.0.12.663. Secunia: SA48430 PRL: 2012-29 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1...

Flexera ISGrid ActiveX Control Remote Code Execution Vulnerabilities

The remote host has the Flexera ISGrid ActiveX control installed. The control is affected by remote code execution vulnerabilities that can be triggered via the 'bstrReplaceText' and 'DoFindReplace' methods. By tricking a victim into visiting a specially crafted page, an attacker may be able to...

Flexera AdminStudio LaunchProcess Function ActiveX Control Remote Command Execution

The remote host has the Flexera AdminStudio LaunchHelp ActiveX control installed. The control is affected by a remote command execution vulnerability that can be triggered by sending a directory traversal string to the 'LaunchProcess' function. By tricking a victim into visiting a specially craft...

PowerTCP WebServer for - ActiveX Denial of Service

source: https://www.securityfocus.com/bid/55761/info PowerTCP WebServer for ActiveX is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to crash the application typically Internet Explorer, denying service to legitimate users. PowerTCP WebServer for ActiveX 1.9....

PowerTCP WebServer for - ActiveX Denial of Service

PowerTCP WebServer for - ActiveX Denial of Service source: https://www.securityfocus.com/bid/55761/info PowerTCP WebServer for ActiveX is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to crash the application typically Internet Explorer, denying service to...