CVE-2012-2271

CVE-2012-2271 concerns a buffer overflow in the InitLicenKeys function of the SkinCrafter ActiveX control. The affected component is SkinCrafter3_vs2005.dll, used by SkinCrafter 3.0. The root cause, as described in connected sources, is that the InitLicenKeys parameter is not bounds-checked, caus...

IBM Rational ClearQuest CQOle Remote Code Execution

This module exploits a function prototype mismatch on the CQOle ActiveX control in IBM Rational ClearQuest use exploit/windows/browser/clear/questcqole msf undefinedquestcqole show actions ...actions... msf undefinedquestcqole set ACTION msf undefinedquestcqole show options ...show and set...

CCTV DVR Login Scanning Utility

This module tests for standalone CCTV DVR video surveillance deployments specifically by MicroDigital, HIVISION, CTRing, and numerous other rebranded devices that are utilizing default vendor passwords. Additionally, this module has the ability to brute force user accounts. Such CCTV DVR video...

Microsoft VPN ActiveX Control Remote Code Execution Vulnerability (2695962)

This host is installed with Cisco Adaptive Security Appliance and is prone to activeX control remote code execution vulnerability. OpenVAS Vulnerability Test $Id: gbmsvpnactivexcontrolcodeexecvuln.nasl 5366 2017-02-20 13:55:38Z cfi $ Microsoft VPN ActiveX Control Remote Code Execution Vulnerabili...

IBM Rational Rhapsody BBFlashBack.Recorder.dll Multiple Code Execution (CVE-2011-1388)

Multiple code execution vulnerabilities have been reported in the BB FlashBack FBRecorder ActiveX control, a component of IBM Rational Rhapsody. The vulnerabilities are due to improper input validation within several methods. A remote attacker could exploit these vulnerabilities by enticing the...

HP Easy Printer Care ActiveX Control Directory Traversal (CVE-2011-4786)

A directory traversal vulnerability has been reported in HP Easy Printer Care. The vulnerability is due to a lack of sanitization in the HPESPRIT.XMLCacheMgr.1 ActiveX control. A remote attacker can exploit this vulnerability by enticing a target user to visit a specially crafted web-page...

IBM SPSS VsVIEW6.ocx ActiveX control Code Execution (CVE-2012-0189)

A remote code execution vulnerability has been reported in the IBM SPSS. The vulnerability is due to a boundary error in several methods of the VsVIEW6.ocx ActiveX control. A remote attacker can exploit this vulnerability by enticing a target user to visit a specially crafted web-page. Successful...

ASUS Net4Switch ipswcom.dll ActiveX Control Stack Buffer Overflow

A stack buffer overflow vulnerability has been reported in ASUS Net4Switch. The vulnerability is due to a boundary error in several methods of the ipswcom.dll ActiveX control. A remote attacker can exploit this vulnerability by enticing a target user to visit a specially crafted web-page...

Microsoft VPN ActiveX Control Remote Code Execution Vulnerability (2695962)

Cisco Adaptive Security Appliance is prone to ActiveX control remote code execution vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

DecisionTools SharpGrid ActiveX Control RCE

Exploit for windows platform in category dos / poc Application: DecisionTools SharpGrid ActiveX Control Code Execution Vulnerability Platforms: Windows Secunia: SA48571 Date: 2012-05-09 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter:...

DecisionTools SharpGrid - ActiveX Control Remote Code Execution

DecisionTools SharpGrid - ActiveX Control Remote Code Execution Application: DecisionTools SharpGrid ActiveX Control Code Execution Vulnerability Platforms: Windows Secunia: SA48571 Date: 2012-05-09 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitte...

DecisionTools SharpGrid Active-X Code Execution

Application: DecisionTools SharpGrid ActiveX Control Code Execution Vulnerability Platforms: Windows Secunia: SA48571 Date: 2012-05-09 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timeline 3 Technical...

DecisionTools SharpGrid - ActiveX Control Remote Code Execution

Application: DecisionTools SharpGrid ActiveX Control Code Execution Vulnerability Platforms: Windows Secunia: SA48571 Date: 2012-05-09 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timeline 3 Technical...

MS 2695962: Update Rollup for ActiveX Kill Bits (2695962)

The remote Windows host is missing a kill bit for an ActiveX control that is known to contain vulnerabilities. If this ActiveX control is ever installed on the remote host, either now or in the future, it would expose the host to various security issues. Note that the affected control is from a...

McAfee Virtual Technician MVT.MVTControl ActiveX Control Insecure Method

Added: 05/04/2012 BID: 53304 Background McAfee Virtual Technician is a free automated diagnosis and and problem resolution tool which scans a Windows system to ensure that McAfee products are installed correctly. Problem McAfee Virtual Technician ActiveX control MVT.dll, as provided in McAfee...

McAfee Virtual Technician MVT.MVTControl ActiveX Control Insecure Method

Added: 05/04/2012 BID: 53304 Background McAfee Virtual Technician is a free automated diagnosis and and problem resolution tool which scans a Windows system to ensure that McAfee products are installed correctly. Problem McAfee Virtual Technician ActiveX control MVT.dll, as provided in McAfee...

McAfee Virtual Technician MVT.MVTControl ActiveX Control Insecure Method

Added: 05/04/2012 BID: 53304 Background McAfee Virtual Technician is a free automated diagnosis and and problem resolution tool which scans a Windows system to ensure that McAfee products are installed correctly. Problem McAfee Virtual Technician ActiveX control MVT.dll, as provided in McAfee...

McAfee Virtual Technician MVT.MVTControl ActiveX Control Insecure Method

Added: 05/04/2012 BID: 53304 Background McAfee Virtual Technician is a free automated diagnosis and and problem resolution tool which scans a Windows system to ensure that McAfee products are installed correctly. Problem McAfee Virtual Technician ActiveX control MVT.dll, as provided in McAfee...

McAfee Virtual Technician MVTControl 6.3.0.1911 GetObject Vulnerability

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "McAfee Virtual...

Oracle WebCenter Forms Recognition SSSplitter ActiveX Overwrite

Added: 05/02/2012 CVE: CVE-2012-1710 BID: 53062 OSVDB: 81366 Background Oracle WebCenter Imaging is a combined document management and business process management suite, marketed as a component of the Oracle Fusion Middleware portfolio of products. Oracle Forms Recognition OFR is an intelligent...