MS 2647518: Update Rollup for ActiveX Kill Bits (2647518)

The remote Windows host is missing a list of kill bits for ActiveX controls that are known to contain vulnerabilities. If these ActiveX controls are ever installed on the remote host, either now or in the future, they would expose it to various security issues. Note that the affected controls are...

2X Client TuxClientSystem ActiveX InstallClient() Method Arbitrary MSI Package Installation

The version of the TuxClientSystem ActiveX control, part of the 2X Client, installed on the remote Windows host is earlier than 10.1 Build 1239. As such, its 'InstallClient' method reportedly accepts a URL to an MSI package and allows installation of an application without explicit user approval...

CVE-2012-0198

Stack-based buffer overflow in the RunAndUploadFile method in the Isig.isigCtl.1 ActiveX control in IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 allows remote attackers to execute arbitrary code via vectors related to an Asset Information file...

Stack overflow

Stack-based buffer overflow in the RunAndUploadFile method in the Isig.isigCtl.1 ActiveX control in IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 allows remote attackers to execute arbitrary code via vectors related to an Asset Information file...

CVE-2012-0198

Stack-based buffer overflow in the RunAndUploadFile method in the Isig.isigCtl.1 ActiveX control in IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 allows remote attackers to execute arbitrary code via vectors related to an Asset Information file...

CVE-2012-0198

CVE-2012-0198 describes a stack-based buffer overflow in the RunAndUploadFile method of the Isig.isigCtl.1 ActiveX control in IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1. The vulnerability allows remote code execution when a user loads a specially crafted web page, via...

IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 Multiple Remote Code Execution Vulnerabilities

IBM Tivoli Provisioning Manager soapServlet SOAP Message Printer.getPrinterAgentKey SQL Injection Vulnerability This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Provisioning Manager Express for Software Distribution. Authentication is...

IBM Tivoli Provisioning Manager Express for Software Distribution Isig.isigCtl.1 ActiveX RunAndUploadFile() Method Overflow

This module exploits a buffer overflow vulnerability in the Isig.isigCtl.1 ActiveX installed with IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1. The vulnerability is found in the "RunAndUploadFile" method where the "OtherFields" parameter with user controlled data is use...

ASUS Net4Switch 'ipswcom.dll' ActiveX远程拒绝服务漏洞

BUGTRAQ ID: 52110 ASUS Net4Switch是华硕电脑上网络管理软件。 ASUS Net4Switch ipswcom.dll组件在实现上存在缓冲区溢出漏洞，远程攻击者可通过特制的html网页执行任意代码 0 Asus Net4Switch ipswcom.dll 1.0.0.1 厂商补丁： Asus ---- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.asus.com.tw HTML HEAD TITLEDSecRG: Asus exploit by EvdokimovDS/TITLE...

ASUS Net4Switch - 'ipswcom.dll' ActiveX Stack Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "ASUS Net4Switch...

ASUS Net4Switch ipswcom.dll ActiveX Stack Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "ASUS Net4Switch...

ASUS Net4Switch ipswcom.dll ActiveX Stack Buffer Overflow

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Windows Live Writer ActiveX DoS (WindowsLiveWriter.Application.dll)

Exploit for windows platform in category dos / poc Title: Windows Live Writer ActiveX DoS WindowsLiveWriter.Application.dll Author: Dmar al3noOoz Mail : email protected Software Link : http://explore.live.com/ Version: 14.0.8117.416 Tested on: Windows XP targetFile = "C:\Program Files\Windows...

Adobe Flash Player ActiveX Control Memory Corruption (APSB12-03; CVE-2012-0751)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in the way the Adobe Flash Player ActiveX Control parses tags within SWF files. A remote attacker might exploit this issue by convincing a victim to open a specially crafted SWF file...

Adobe Flash Player Multiple Vulnerabilities (Feb 2012) - Windows

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

Adobe Flash Player Multiple Vulnerabilities (Windows) - Feb12

This host is installed with Adobe Flash Player and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodadobeflashplayermultvulnwinfeb12.nasl 8178 2017-12-19 13:42:38Z cfischer $ Adobe Flash Player Multiple Vulnerabilities Windows - Feb12 Authors: Rachana Shetty Copyright:...

CVE-2011-4526

Buffer overflow in an ActiveX control in Advantech/BroadWin WebAccess before 7.0 might allow remote attackers to execute arbitrary code via a long string value in unspecified parameters...

CVE-2011-1914

Buffer overflow in the Advantech ADAM OLE for Process Control OPC Server ActiveX control in ADAM OPC Server before 3.01.012, Modbus RTU OPC Server before 3.01.010, and Modbus TCP OPC Server before 3.01.010 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2011-4185

The GetPrinterURLList2 method in the ActiveX control in Novell iPrint Client before 5.78 on Windows allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2008-2431 and CVE-2008-2436...

Buffer overflow

Buffer overflow in an ActiveX control in Advantech/BroadWin WebAccess before 7.0 might allow remote attackers to execute arbitrary code via a long string value in unspecified parameters...