Secunia Research: InduSoft ISSymbol ActiveX Control Buffer Overflow Vulnerabilities

====================================================================== Secunia Research 01/09/2011 - InduSoft ISSymbol ActiveX Control Buffer Overflows - ====================================================================== Table of Contents Affected...

CVE-2011-0342

Multiple buffer overflows in the InduSoft ISSymbol ActiveX control in ISSymbol.ocx 301.1104.601.0 in InduSoft Web Studio 7.0B2 hotfix 7.0.01.04 allow remote attackers to execute arbitrary code via a long parameter to the 1 Open, 2 Close, or 3 SetCurrentLanguage method...

Buffer overflow

Multiple buffer overflows in the InduSoft ISSymbol ActiveX control in ISSymbol.ocx 301.1104.601.0 in InduSoft Web Studio 7.0B2 hotfix 7.0.01.04 allow remote attackers to execute arbitrary code via a long parameter to the 1 Open, 2 Close, or 3 SetCurrentLanguage method...

CVE-2011-0342

Summary (CVE-2011-0342) : InduSoft ISSymbol ActiveX control (ISSymbol.ocx 301.1104.601.0) in InduSoft Web Studio 7.0B2 hotfix 7.0.01.04 is affected. Boundary- or heap/stack-based buffer overflows occur when processing the Open, Close, or SetCurrentLanguage methods due to overly long strings, allo...

CVE-2011-0342

Multiple buffer overflows in the InduSoft ISSymbol ActiveX control in ISSymbol.ocx 301.1104.601.0 in InduSoft Web Studio 7.0B2 hotfix 7.0.01.04 allow remote attackers to execute arbitrary code via a long parameter to the 1 Open, 2 Close, or 3 SetCurrentLanguage method...

BroadWin Webaccess Client - Multiple Vulnerabilities

BroadWin Webaccess Client - Multiple Vulnerabilities Application: BroadWin WebAccess Client http://broadwin.com/Client.htm Versions: bwocxrun.ocx = 1.0.0.10 aka version 7.0 Platforms: Windows Bugs: A format string B arbitrary memory corruption Exploitation: remote Date: 02 Sep 2011 Author: Luigi...

BroadWin Webaccess Client - Multiple Vulnerabilities

Application: BroadWin WebAccess Client http://broadwin.com/Client.htm Versions: bwocxrun.ocx = 1.0.0.10 aka version 7.0 Platforms: Windows Bugs: A format string B arbitrary memory corruption Exploitation: remote Date: 02 Sep 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org...

VulnCheck KEV: CVE-2007-6144

Heap-based buffer overflow in the PPlayer.XPPlayer.1 ActiveX control in pplayer.dll1work in Xunlei Thunder 5.7.4.401 allows remote attackers to execute arbitrary code via a long string in a FlvPlayerUrl property value. NOTE: some of these details are obtained from third party information...

VulnCheck KEV: CVE-2007-4748

Buffer overflow in the PowerPlayer.dll ActiveX control in PPStream 2.0.1.3829 allows remote attackers to execute arbitrary code via a long Logo parameter...

VulnCheck KEV: CVE-2007-4816

Multiple buffer overflows in the BaoFeng2 storm ActiveX control in Mps.dll allow remote attackers to have an unknown impact via a long 1 URL, 2 backImage, or 3 titleImage property value; 4 a long first argument to the advancedOpen method; a long argument to the 5 isDVDPath or 6...

Wonderware InBatch ActiveX Vulnerabilities

Overview ICS-CERT originally released advisory “ICSA-11-332-01P—Invensys Wonderware InBatch ActiveX Vulnerabilities” in the US-CERT secure portal on November 28, 2011. This web page release was delayed to allow users time to download and install the update. Researcher Kuang-Chun Hung of the...

Citrix Gateway ActiveX Control Stack Based Buffer Overflow Vulnerability

Exploit for windows platform in category local exploits $Id: citrixgatewayactx.rb 13670 2011-08-31 00:15:46Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information o...

RealNetworks RealPlayer Multiple Vulnerabilities (Windows) - Aug11

This host is installed with RealPlayer which is prone to multiple vulnerabilities OpenVAS Vulnerability Test $Id: secpodrealplayermultvulnwin01aug11.nasl 7015 2017-08-28 11:51:24Z teissa $ RealNetworks RealPlayer Multiple Vulnerabilities Windows - Aug11 Authors: Rachana Shetty Copyright: Copyrigh...

UUSee UUPlayer ActiveX Control Multiple Remote Code Execution Vulnerabilities

This host is installed with UUSee UUPlayer and is prone to multiple remote code execution vulnerabilities. OpenVAS Vulnerability Test $Id: secpoduuseeuuplayeractivexmultcodeexecvuln.nasl 5367 2017-02-20 14:16:52Z cfi $ UUSee UUPlayer ActiveX Control Multiple Remote Code Execution Vulnerabilities...

RealNetworks RealPlayer Multiple Vulnerabilities (Aug 2011) - Windows

RealPlayer is prone to multiple vulnerabilities SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RealNetworks RealPlayer Multiple Vulnerabilities (Aug 2011) - Windows

RealPlayer is prone to multiple vulnerabilities SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

McAfee SaaS Endpoint Protection ActiveX Controls Multiple Code Execution Vulnerabilities

This host is installed with McAfee SaaS Endpoint Protection and is prone to multiple code execution vulnerabilities. OpenVAS Vulnerability Test $Id: secpodmcafeesaasendpointprotectionmultcodeexecvuln.nasl 7029 2017-08-31 11:51:40Z teissa $ McAfee SaaS Endpoint Protection ActiveX Controls Multiple...

RealNetworks RealPlayer Multiple Vulnerabilities (Windows) - Aug11

This host is installed with RealPlayer which is prone to multiple vulnerabilities OpenVAS Vulnerability Test $Id: secpodrealplayermultvulnwin02aug11.nasl 6516 2017-07-04 12:20:47Z cfischer $ RealNetworks RealPlayer Multiple Vulnerabilities Windows - Aug11 Authors: Rachana Shetty Copyright:...

McAfee SaaS Endpoint Protection ActiveX Controls Multiple Code Execution Vulnerabilities

McAfee SaaS Endpoint Protection is prone to multiple code execution vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

UUSee UUPlayer ActiveX Control Multiple RCE Vulnerabilities

UUSee UUPlayer is prone to multiple remote code execution vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...