CVE-2011-1719

CVE-2011-1719 involves multiple stack-based buffer overflows in the CA Output Management Web Viewer ActiveX controls (PPSView.ocx and UOMWV_HelperActiveX.ocx). The root cause is boundary/overflow errors in the ActiveX components used by the Web Viewer (versions 11.0 and 11.5). The flaws permit re...

RealPlayer 11 Browser Active-X Code Execution

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Gesytec ElonFmt ActiveX 1.1.14 (ElonFmt.ocx) pid Item Buffer Overflow

Exploit for windows platform in category remote exploits !exchain 0013e7ec: ntdll!ExecuteHandler2+3a 7c9032bc 0013ecf0: cccccccc Invalid exception stack at bbbbbbbb 0:000 u 0013ecf0 0013ecf0 bbbbbbbbcc mov ebx,0CCBBBBBBh 0013ecf5 cc int 3 0013ecf6 cc...

VulnCheck KEV: CVE-2008-1898

A certain ActiveX control in WkImgSrv.dll 7.03.0616.0, as distributed in Microsoft Works 7 and Microsoft Office 2003 and 2007, allows remote attackers to execute arbitrary code or cause a denial of service browser crash via an invalid WksPictureInterface property value, which triggers an...

Gesytec ElonFmt ActiveX 1.1.14 - ElonFmt.ocx pid Item Buffer Overflow (SEH)

Gesytec ElonFmt ActiveX 1.1.14 - ElonFmt.ocx pid Item Buffer Overflow SEH !exchain 0013e7ec: ntdll!ExecuteHandler2+3a 7c9032bc 0013ecf0: cccccccc Invalid exception stack at bbbbbbbb 0:000 u 0013ecf0 0013ecf0 bbbbbbbbcc mov ebx,0CCBBBBBBh 0013ecf5 cc int 3 0013ecf6 cc int 3 00...

Gesytec ElonFmt Active-X 1.1.14 Buffer Overflow

!exchain 0013e7ec: ntdll!ExecuteHandler2+3a 7c9032bc 0013ecf0: cccccccc Invalid exception stack at bbbbbbbb 0:000 u 0013ecf0 0013ecf0 bbbbbbbbcc mov ebx,0CCBBBBBBh 0013ecf5 cc int 3 0013ecf6 cc int 3 0013ecf7 cc int 3 0013ecf8 dddd fstp st5 0013ecfa dddd fstp st5 0013ecfc d...

CA20110420-02: Security Notice for CA Output Management Web Viewer

CA20110420-02: Security Notice for CA Output Management Web Viewer Issued: April 20, 2011 CA Technologies support is alerting customers to security risks associated with CA Output Management Web Viewer. Two vulnerabilities exist that can allow a remote attacker to execute arbitrary code. CA...

Gesytec ElonFmt ActiveX 1.1.14 (ElonFmt.ocx) pid Item Buffer Overflow (SEH)

Summary Connects LonWorks networks to process control, visualization, SCADA and office software. Description The ElonFmt ActiveX Control Module suffers from a buffer overflow vulnerability. When a large buffer is sent to the pid item of the GetItem1 function in elonfmt.ocx module, we get a few...

Gesytec ElonFmt ActiveX 1.1.14 - 'ElonFmt.ocx' pid Item Buffer Overflow (SEH)

!exchain 0013e7ec: ntdll!ExecuteHandler2+3a 7c9032bc 0013ecf0: cccccccc Invalid exception stack at bbbbbbbb 0:000 u 0013ecf0 0013ecf0 bbbbbbbbcc mov ebx,0CCBBBBBBh 0013ecf5 cc int 3 0013ecf6 cc int 3 0013ecf7 cc int 3 0013ecf8 dddd fstp st5 0013...

Yahoo! CD Player - ActiveX Control open() Method Stack Buffer Overflow

Yahoo! CD Player - ActiveX Control open Method Stack Buffer Overflow source: https://www.securityfocus.com/bid/51011/info The Yahoo! CD Player ActiveX control 'YoPlyCd.dll' is prone to a remote stack-based buffer-overflow vulnerability because the application fails to properly bounds check...

Yahoo! CD Player - ActiveX Control 'open()' Method Stack Buffer Overflow

source: https://www.securityfocus.com/bid/51011/info The Yahoo! CD Player ActiveX control 'YoPlyCd.dll' is prone to a remote stack-based buffer-overflow vulnerability because the application fails to properly bounds check user-supplied input. Attackers can exploit this issue to execute arbitrary...

Wonderware Information Server

Overview ICS-CERT Advisory ICSA-11-195-01P was originally released to the US-CERT Portal on July 14, 2011. This web page release was delayed to allow users sufficient time to download and install the update. Independent security researchers Billy Rios and Terry McCorkle have identified a...

CVE-2011-1243

The Windows Messenger ActiveX control in msgsc.dll in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via unspecified vectors that "corrupt the system state," aka "Microsoft Windows Messenger ActiveX Control Vulnerability."...

Design/Logic Flaw

The Windows Messenger ActiveX control in msgsc.dll in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via unspecified vectors that "corrupt the system state," aka "Microsoft Windows Messenger ActiveX Control Vulnerability."...

CVE-2011-1243

The Windows Messenger ActiveX control in msgsc.dll in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via unspecified vectors that "corrupt the system state," aka "Microsoft Windows Messenger ActiveX Control Vulnerability."...

CVE-2011-1243

The CVE-2011-1243 issue affects the Windows Messenger ActiveX control (msgsc.dll) in Windows XP SP2/SP3. The vulnerability allows remote code execution via unspecified vectors that corrupt the system state. Affected product/component: Windows Messenger ActiveX in msgsc.dll. Root cause: control co...

Multiple ActiveX components security vulnerabilities

kill bit update for multiple components of different vendors...

Microsoft IE Developer Tools WMITools and Windows Messenger ActiveX Control Vulnerability (2508272)

This host is missing a critical security update according to Microsoft Bulletin MS11-027. OpenVAS Vulnerability Test $Id: secpodms11-027.nasl 8724 2018-02-08 15:02:56Z cfischer $ Microsoft IE Developer Tools WMITools and Windows Messenger ActiveX Control Vulnerability 2508272 Authors: Veerendra G...

Microsoft IE Developer Tools WMITools and Windows Messenger ActiveX Control Vulnerability (2508272)

This host is missing a critical security update according to Microsoft Bulletin MS11-027. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS11-027: Cumulative Security Update of ActiveX Kill Bits (2508272)

The remote Windows host has one or more ActiveX controls installed that could be abused to execute arbitrary code remotely if a user can be tricked into viewing a malicious web page using Internet Explorer. Three of these controls are from Microsoft itself while the others are from third-party...