10868 matches found
Novell iPrint Client ActiveX Control <= 5.52 Buffer Overflow
$Id: novelliprintgetdriversettings2.rb 11886 2011-03-06 20:27:06Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
PIPI Player PIPIWebPlayer ActiveX Control Buffer Overflow Vulnerability
This host is installed with PIPI Player and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodpipiplayeractivexctrlbofvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ PIPI Player PIPIWebPlayer ActiveX Control Buffer Overflow Vulnerability Authors: Madhuri D Copyright:...
Topaz Systems SigPlus Pro ActiveX Control Multiple Vulnerabilities
SigPlus Pro ActiveX Control is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Topaz Systems SigPlus Pro ActiveX Control Multiple Vulnerabilities
The host is installed with SigPlus Pro ActiveX Control and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbsigplusproactivexcontrolmultvuln.nasl 7024 2017-08-30 11:51:43Z teissa $ Topaz Systems SigPlus Pro ActiveX Control Multiple Vulnerabilities Authors: Madhuri D...
PIPI Player PIPIWebPlayer ActiveX Control Buffer Overflow Vulnerability
PIPI Player is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2011-0925
The CSDWebInstallerCtrl ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop CSD allows remote attackers to download an unintended Cisco program onto a client machine, and execute this program, by identifying a Cisco program with a Cisco digital signature and then renaming this program ...
Code injection
The CSDWebInstallerCtrl ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop CSD allows remote attackers to download an unintended Cisco program onto a client machine, and execute this program, by identifying a Cisco program with a Cisco digital signature and then renaming this program ...
CVE-2011-0925
The CSDWebInstallerCtrl ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop CSD allows remote attackers to download an unintended Cisco program onto a client machine, and execute this program, by identifying a Cisco program with a Cisco digital signature and then renaming this program ...
CVE-2011-0925
Cisco Secure Desktop (CSD) 3.x contains an ActiveX flaw in CSDWebInstaller.ocx (CSDWebInstallerCtrl) that allows remote code execution. The vulnerability stems from a lack of validation of executables downloaded by the CSDWebInstaller Web control, enabling an attacker to corrupt a downloaded prog...
(0Day) Cisco Secure Desktop CSDWebInstaller Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco Secure Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CA20110223-01: Security Notice for CA Host-Based Intrusion Prevention System
CA20110223-01: Security Notice for CA Host-Based Intrusion Prevention System Issued: February 23, 2011 Updated: February 24, 2011 CA Technologies support is alerting customers to a security risk associated with CA Host-Based Intrusion Prevention System HIPS. A vulnerability exists that can allow ...
(0Day) Cisco Secure Desktop CSDWebInstaller ActiveX Control Cleaner.cab Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco Secure Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
Oracle Document Capture EasyMail ActiveX Control Information Disclosure (CVE-2010-3595)
Oracle Document Capture supplies document scanning and indexing capabilities. It installs an ActiveX control EasyMail on web clients An information disclosure vulnerability has been reported in the EasyMail ActiveX control included with Oracle Document Capture. The vulnerability is due to imprope...
Oracle Document Capture ActiveX Control WriteJPG Buffer Overflow (CVE-2010-3599)
Oracle Document Capture supplies document scanning and indexing capabilities. It installs an ActiveX control NCSECWLib on web clients. A buffer overflow vulnerability has been reported in the NCSECWLib ActiveX control included with Oracle Document Capture. The vulnerability is due to improper...
Edraw Office Viewer Component V7.4 ActiveX Stack Buffer Overflow
Exploit for windows platform in category remote exploits function heapspray //exec calc.exe var shellcode = unescape "%u9090%u9090%u9090%u9090" ; shellcode += unescape...
CVE-2011-0926
A certain ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop CSD does not properly verify the signature of an unspecified downloaded program, which allows remote attackers to execute arbitrary code by spoofing the CSD installation process, a different vulnerability than CVE-2010-0589...
Code injection
A certain ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop CSD does not properly verify the signature of an unspecified downloaded program, which allows remote attackers to execute arbitrary code by spoofing the CSD installation process, a different vulnerability than CVE-2010-0589...
CVE-2011-0926
A certain ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop CSD does not properly verify the signature of an unspecified downloaded program, which allows remote attackers to execute arbitrary code by spoofing the CSD installation process, a different vulnerability than CVE-2010-0589...
CVE-2011-1036
CVE-2011-1036 affects CA HIPS and CA ISS where the XMLSecDB ActiveX control (XMLSecDB in HIPSEngine) can be exploited via SetXml/Save to write an arbitrary file on a target host, enabling remote code execution. Affected: HIPS Management Server <8.1.0.88 and clients
CVE-2011-0926
Cisco Secure Desktop (CSD) 3.x is affected by CVE-2011-0926 due to the CSDWebInstaller.ocx ActiveX control not properly validating the signature of a downloaded program during installation, enabling remote code execution by spoofing the CSD installation process. Exploitation details are described...