Buffer overflow

Buffer overflow in the WebClient ActiveX control in Siemens Tecnomatix FactoryLink 6.6.1 aka 6.6 SP1, 7.5.217 aka 7.5 SP2, and 8.0.2.54 allows remote attackers to execute arbitrary code via a long string in a parameter associated with the location URL...

Design/Logic Flaw

An unspecified ActiveX control in ActBar.ocx in Siemens Tecnomatix FactoryLink 6.6.1 aka 6.6 SP1, 7.5.217 aka 7.5 SP2, and 8.0.2.54 allows remote attackers to create or overwrite arbitrary files via the save method...

Buffer overflow

Multiple buffer overflows in the 1 GUIControls, 2 BatchObjSrv, and 3 BatchSecCtrl ActiveX controls in Invensys Wonderware InBatch 9.0 and 9.0 SP1, and InBatch 8.1 SP1, 9.0 SP2, and 9.5 Server and Runtime Clients, allow remote attackers to execute arbitrary code via a long string in a property...

CVE-2011-4870

CVE-2011-4870 covers multiple buffer overflows in Invensys Wonderware InBatch, specifically the GUIControls, BatchObjSrv, and BatchSecCtrl ActiveX controls. Affected versions include InBatch 8.1 SP1, 9.0, 9.0 SP1, 9.0 SP2, and 9.5 Server/Runtime Clients; the root cause is improper handling of lon...

CVE-2011-4870

Multiple buffer overflows in the 1 GUIControls, 2 BatchObjSrv, and 3 BatchSecCtrl ActiveX controls in Invensys Wonderware InBatch 9.0 and 9.0 SP1, and InBatch 8.1 SP1, 9.0 SP2, and 9.5 Server and Runtime Clients, allow remote attackers to execute arbitrary code via a long string in a property...

CVE-2011-4055

Buffer overflow in the WebClient ActiveX control in Siemens Tecnomatix FactoryLink 6.6.1 aka 6.6 SP1, 7.5.217 aka 7.5 SP2, and 8.0.2.54 allows remote attackers to execute arbitrary code via a long string in a parameter associated with the location URL...

CVE-2011-4056

An unspecified ActiveX control in ActBar.ocx in Siemens Tecnomatix FactoryLink 6.6.1 aka 6.6 SP1, 7.5.217 aka 7.5 SP2, and 8.0.2.54 allows remote attackers to create or overwrite arbitrary files via the save method...

Oracle AutoVue ActiveX Control File Overwrite

A file overwrite vulnerability has been reported in Oracle AutoVue. The vulnerability is due to an unrestricted FileName parameter in a certain function. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted web page. Successful exploitation could...

IBM Rational Rhapsody BB FlashBack SDK ActiveX Control Remote Code Execution VUlnerabilities

This host is installed with IBM Rational Rhapsody and is prone to remote code execution vulnerabilities. OpenVAS Vulnerability Test $Id: secpodibmrationalrhapsodyactivexcodeexecvuln.nasl 5367 2017-02-20 14:16:52Z cfi $ IBM Rational Rhapsody BB FlashBack SDK ActiveX Control Remote Code Execution...

IBM Rational Rhapsody BB FlashBack SDK ActiveX Control RCE Vulnerabilities

IBM Rational Rhapsody is prone to multiple remote code execution RCE vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Persits XUpload ActiveX String Length Buffer Overflow (CVE-2007-6530)

A stack buffer overflow vulnerability has been reported in Persits' XUpload ActiveX control. The vulnerability is due to an error while parsing arguments passed to a certain method. A remote attacker may exploit this vulnerability by passing an overly long string to the method. Successful...

Ask.com Toolbar askBar.dll ActiveX Control Buffer Overflow (CVE-2007-5107)

A remote code execution vulnerability has been reported in Ask.com toolbar. The vulnerability is due to a boundary error in an ActiveX control. A remote attacker could exploit this issue by sending an overly long string to a certain method in askbar.dll. Successful exploitation could allow...

RKD Software ActiveX Control Remote Stack Buffer Overflow (CVE-2007-3435)

A Stack buffer overflow vulnerability has been reported in RKD Software Barcode Application. The vulnerability is due to a boundary error within the ABarCode ActiveX control while handling a certain method. A remote attacker could exploit this vulnerability by enticing a user to open a specially...

Microsoft Windows multiple security vulnerabilities

Buffer overflow on TTF fonts parsing, OLE objects memory corruption, CSRSS and kernel privilege escalations, ActiveX code execution...

CVE-2011-1388

The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6.1 and other products, does not properly implement the TestCompatibilityRecordMode method, which allows remote attackers to execute arbitrary code via...

Design/Logic Flaw

The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6.1 and other products, does not properly implement the InsertMarker method, which allows remote attackers to execute arbitrary code via unspecified vectors...

Code injection

The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6.1 and other products, does not properly implement the TestCompatibilityRecordMode method, which allows remote attackers to execute arbitrary code via...

CVE-2011-1391

The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6.1 and other products, does not properly implement the InsertMarker method, which allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2011-1392

The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6.1 and other products, does not properly implement the 1 Start, 2 PauseAndSave, 3 InsertMarker, and 4 InsertSoundToFBRAtMarker methods, which allows remote...

Code injection

The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6.1 and other products, does not properly implement the 1 Start, 2 PauseAndSave, 3 InsertMarker, and 4 InsertSoundToFBRAtMarker methods, which allows remote...