CVE-2011-3141

Buffer overflow in the InBatch BatchField ActiveX control for Invensys Wonderware InBatch 8.1 SP1, 9.0, and 9.0 SP1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors...

Stack overflow

Stack-based buffer overflow in an ActiveX control in KVWebSvr.dll in WellinTech KingView 6.52 and 6.53 allows remote attackers to execute arbitrary code via a long second argument to the ValidateUser method...

Buffer overflow

Buffer overflow in the InBatch BatchField ActiveX control for Invensys Wonderware InBatch 8.1 SP1, 9.0, and 9.0 SP1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors...

CVE-2011-3141

CVE-2011-3141 affects Invensys Wonderware InBatch, specifically the BatchField ActiveX control. Vulnerable versions include InBatch 8.1 SP1, 9.0, and 9.0 SP1. The root cause is a buffer overflow in the BatchField ActiveX control, allowing a remote attacker to cause a denial of service and potenti...

CVE-2011-3141

Buffer overflow in the InBatch BatchField ActiveX control for Invensys Wonderware InBatch 8.1 SP1, 9.0, and 9.0 SP1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors...

CVE-2011-3142

CVE-2011-3142 affects WellinTech KingView KVWebSvr.dll ActiveX control in versions 6.52/6.53. The vulnerability is a stack-based buffer overflow triggered by a long second argument to the ValidateUser method, enabling remote code execution. Public exploit code exists (ICS-CERT/ISA advisories refe...

HP Easy Printer Care XMLSimpleAccessor Class ActiveX Control Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Easy Printer Care. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

HP Easy Printer Care XMLSimpleAccessor Class ActiveX Control Remote Code Execution

This module allows remote attackers to place arbitrary files on a users file system by abusing via Directory Traversal attack the "saveXML" method from the "XMLSimpleAccessor" class in the HP Easy Printer HPTicketMgr.dll ActiveX Control HPTicketMgr.dll 2.7.2.0. Code execution can be achieved by...

Cisco AnyConnect VPN Client ActiveX Code Execution (CVE-2011-2039)

A remote code execution vulnerability has been reported in Cisco Anyconnect VPN Client. Annyconnect provides secured remote connection software solution for PCs and mobile devices. The vulnerability exists in the application VPN client's Activex control which aids in downloading and executing its...

Black Ice BIImgFrm.ocx ActiveX Code Execution (CVE-2008-2683)

A remote code execution vulnerability has been reported in Black Ice BIImgFrm.ocx. The vulnerability is due to a design flaw in the application which allows uploading of specially crafted files to an affected system. An attacker could exploit this vulnerability by enticing a victim to open a...

HP Easy Printer Care Software ActiveX Control Remote Code Execution Vulnerabilities

The version of the HPTicketMgr.dll ActiveX control, part of HP Easy Printer Care Software and installed on the remote Windows host, is affected by several vulnerabilities : - The 'SaveXML' method in the XMLSimpleAccessor class ActiveX control is prone to a directory traversal attack and can be...

CVE-2011-2404

A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-4786 and CVE-2011-4787...

DSquare Exploit Pack: D2SEC_HPEASY

Name| d2sechpeasy ---|--- CVE| CVE-2011-2404 Exploit Pack| D2ExploitPack Description| HP Easy Printer Care ActiveX Control Remote Code Execution Vulnerability Notes|...

CVE-2011-2404

CVE-2011-2404 affects HP Easy Printer Care Software 2.5 and earlier, via an ActiveX control in HPTicketMgr.dll. It allows remote attackers to download an arbitrary program to a client machine and execute it, via unspecified vectors; this is a separate vulnerability from CVE-2011-4786 and CVE-2011...

CVE-2011-2404

A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-4786 and CVE-2011-4787...

TeeChart Professional ActiveX Control <= 2010.0.0.3 Trusted Integer

Exploit for windows platform in category remote exploits $Id: teechartpro.rb 13522 2011-08-11 11:17:30Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

Microsoft Windows ActiveX Control Multiple Vulnerabilities (2562937)

This script will list all the vulnerable activex controls installed on the remote windows machine with references and cause. OpenVAS Vulnerability Test $Id: gbmsactivebaractivexcontrolmultvuln.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Windows ActiveX Control Multiple Vulnerabilities 2562937...

TeeChart Professional ActiveX Control Trusted Integer Dereference

This module exploits an integer overflow in TeeChart Pro ActiveX control. When sending an overly large/negative integer value to the AddSeries property of TeeChart2010.ocx, the code will perform an arithmetic operation that wraps the value and is later directly trusted and called upon. This modul...

Microsoft Windows ActiveX Control Multiple Vulnerabilities (2562937)

This script will list all the vulnerable activex controls installed on the remote windows machine with references and cause. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

TeeChart Professional ActiveX Control 2010.0.0.3 - Trusted Integer Dereference (Metasploit)

$Id: teechartpro.rb 13522 2011-08-11 11:17:30Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...