Versalsoft HTTP Image Uploader ActiveX Vulnerability

This host is installed with Versalsoft HTTP Image Uploader and is prone to ActiveX vulnerability. OpenVAS Vulnerability Test $Id: gbversalsofthttpimageupldractvxvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ Versalsoft HTTP Image Uploader ActiveX Vulnerability Authors: Nikita MR Copyright: Copyright c...

CVE-2008-1107

CVE-2008-1107 affects Danske Bank Danske e-Sec Control Module ActiveX control DanskeSikker.ocx 3.1.0.48 (and possibly earlier). The vulnerability is a boundary error in the error-logging function of DanskeSikker.ocx that can be triggered by overly long inputs to certain methods during initialisat...

SAP GUI unauthorized access

KWEdit ActiveX has unsafe SaveDocumentAs method...

CVE-2008-4830

Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 KWEDIT.DLL 6400.1.1.41 and 7.10 Patch 5 KWEDIT.DLL 7100.1.1.43 allows remote attackers to 1 overwrite arbitrary files via the SaveDocumentAs method or 2 read or execute arbitrary files via the OpenDocument method...

CVE-2007-2238

Multiple stack-based buffer overflows in the Whale Client Components ActiveX control WhlMgr.dll, as used in Microsoft Intelligent Application Gateway IAG before 3.7 SP2, allow remote attackers to execute arbitrary code via long arguments to the 1 CheckForUpdates or 2 UpdateComponents methods...

Stack overflow

Multiple stack-based buffer overflows in the Whale Client Components ActiveX control WhlMgr.dll, as used in Microsoft Intelligent Application Gateway IAG before 3.7 SP2, allow remote attackers to execute arbitrary code via long arguments to the 1 CheckForUpdates or 2 UpdateComponents methods...

DSquare Exploit Pack: D2SEC_MSIAG

Name| d2secmsiag ---|--- CVE| CVE-2007-2238 Exploit Pack| D2ExploitPack Description| Microsoft IAG 2007 ActiveX Stack Overflow Vulnerability Notes|...

Security feature bypass

Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 KWEDIT.DLL 6400.1.1.41 and 7.10 Patch 5 KWEDIT.DLL 7100.1.1.43 allows remote attackers to 1 overwrite arbitrary files via the SaveDocumentAs method or 2 read or execute arbitrary files via the OpenDocument method...

CVE-2008-4830

CVE-2008-4830 is an insecure method vulnerability in SAP GUI’s KWEdit ActiveX control (KWEDIT.DLL 6400.1.1.41 and 7100.1.1.43). The SaveDocumentAs method can allow an attacker to overwrite arbitrary files, and the OpenDocument method can read or execute arbitrary files on a remote host. Affected ...

CVE-2008-4830

Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 KWEDIT.DLL 6400.1.1.41 and 7.10 Patch 5 KWEDIT.DLL 7100.1.1.43 allows remote attackers to 1 overwrite arbitrary files via the SaveDocumentAs method or 2 read or execute arbitrary files via the OpenDocument method...

CVE-2007-2238

Multiple stack-based buffer overflows in the Whale Client Components ActiveX control WhlMgr.dll, as used in Microsoft Intelligent Application Gateway IAG before 3.7 SP2, allow remote attackers to execute arbitrary code via long arguments to the 1 CheckForUpdates or 2 UpdateComponents methods...

CVE-2007-2238

CVE-2007-2238 describes multiple stack-based buffer overflows in the Whale Client Components ActiveX control (WhlMgr.dll) used by Microsoft Intelligent Application Gateway (IAG) before 3.7 SP2. The vulnerabilities allow remote code execution when an attacker supplies overly long arguments to the ...

Microsoft IAG 2007 ActiveX控件栈溢出漏洞

BUGTRAQ ID: 34532 CVECAN ID: CVE-2007-2238 Microsoft的Intelligent Application Gateway（IAG）2007是全面的远程访问网关，提供基于SSL的应用程序访问、保护和端点安全管理。 IAG所使用的Whale客户端组件（由WhlMgr.dll文件提供）没有正确地验证对CheckForUpdates和 UpdateComponents方式所传送的输入参数。如果用户受骗访问了恶意网页并向上述方式提供了超长输入参数的话，就可以触发栈溢出，导致执行任意代码。 Microsoft Intelligent Applicati...

SAP GUI KWEdit ActiveX控件不安全SaveDocumentAs()调用漏洞

BUGTRAQ ID: 34524 CVECAN ID: CVE-2008-4830 SAPgui是SAP软件的图形用户界面客户端。 SAPgui所捆绑的KWEdit ActiveX控件（KWEDIT.DLL）提供了不安全的SaveDocumentAs函数。如果用户受骗访问了恶意网页的话，该函数可能将 HTML文档保存到指定的位置。如果结合OpenDocument方式的话，远程攻击者就可以泄露任意文件的内容，或在用户系统上执行任意代码。 SAP Sapgui 7.10 Patch 5 SAP Sapgui 6.40 Patch 29 SAP ---...

Microsoft Whale Intelligent Application Gateway ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in Microsoft Whale Intelligent Application Gateway Whale Client. When sending an overly long string to CheckForUpdates method of WhlMgr.dll 3.1.502.64 an attacker may be able to execute arbitrary code. This module requires Metasploit:...

SAP GUI KWEdit ActiveX Control SaveDocumentAs() Insecure Method

The version of the KWEdit ActiveX control on the remote host is reportedly affected by a remote code execution vulnerability. The control provides the insecure method 'SaveDocumentAs', which saves an HTML document to a specified location. This can be exploited in combination with e.g. the...

Microsoft Whale Intelligent Application Gateway Whale Client Components ActiveX control stack buffer overflows

Overview The Microsoft Whale Intelligent Application Gateway Whale Client Components ActiveX control contains multiple stack buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Whale Communications Intelligent...

CVE-2009-0218

Insecure method vulnerability in Particle Software IntraLaunch Application Launcher ActiveX control in IntraLaunch.ocx, as used in LDRA TBbrowse and possibly other products, allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2009-0218

Insecure method vulnerability in Particle Software IntraLaunch Application Launcher ActiveX control in IntraLaunch.ocx, as used in LDRA TBbrowse and possibly other products, allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2009-0218

CVE-2009-0218 involves Particle Software’s IntraLaunch ActiveX control (IntraLaunch.ocx) used by LDRA TBbrowse. The ActiveX control is not restricted to any domain/zone and is marked Safe for Scripting, enabling web pages to trigger arbitrary code execution on affected systems. Exploitation could...