CVE-2009-0215

Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as distributed on IBM and Lenovo computers, allows remote attackers to execute arbitrary code via unspecified vectors...

Stack overflow

Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as distributed on IBM and Lenovo computers, allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2009-0215

Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as distributed on IBM and Lenovo computers, allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2009-0215

Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as distributed on IBM and Lenovo computers, allows remote attackers to execute arbitrary code via unspecified vectors...

IBM Access Support ActiveX控件GetXMLValue()方式栈溢出漏洞

BUGTRAQ ID: 34228 CVECAN ID: CVE-2009-0215 IBM Access Support ActiveX是一些联想和IBM计算机中所预装的用于收集系统信息的控件。 IBM Access Support ActiveX控件（IbmEgath.dll）没有正确地验证对GetXMLValue方式所提供的输入。如果用户受骗访问了恶意网页并向该方式传送了超长参数的话，就可以触发栈溢出，导致浏览器崩溃或执行任意代码。 IBM Access Support ActiveX 临时解决方法： 在IE中禁用IBM Access Support...

CVE-2009-1064

Argument injection vulnerability in orbitmxt.dll 2.1.0.2 in the Orbit Downloader 2.8.7 and earlier ActiveX control allows remote attackers to overwrite arbitrary files via whitespace and a command-line switch, followed by a full pathname, in the third argument to the download method...

CVE-2009-1064

CVE-2009-1064 targets Orbit Downloader (ActiveX control orbitmxt.dll 2.1.0.2) and affects Orbit Downloader versions 2.8.7 and earlier. The issue is an argument-injection flaw in the download method that allows a remote attacker to overwrite arbitrary files by crafting whitespace, a command-line s...

IBM Access Support ActiveX control stack buffer overflow

Overview The IBM Access Support ActiveX control contains a stack buffer overflow, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The IBM Access Support ActiveX control has the ability to collect system information, such as make,...

Imera TeamLinks ImeraIEPlugin.dll ActiveX Control DoS Vulnerability

Imera ImeraIEPlugin ActiveX is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Imera TeamLinks ImeraIEPlugin.dll ActiveX Control DoS Vulnerability

This host is installed with Imera ImeraIEPlugin ActiveX and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodimeraiepluginactvxctrlvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ Imera TeamLinks ImeraIEPlugin.dll ActiveX Control DoS Vulnerability Authors: Nikita MR...

CVE-2008-6496

Insecure method vulnerability in the VSPDFEditorX.VSPDFEdit ActiveX control in VSPDFEditorX.ocx 1.0.200.0 in VISAGESOFT eXPert PDF EditorX allows remote attackers to create or overwrite arbitrary files via the first argument to the extractPagesToFile method...

Security feature bypass

Insecure method vulnerability in the VSPDFEditorX.VSPDFEdit ActiveX control in VSPDFEditorX.ocx 1.0.200.0 in VISAGESOFT eXPert PDF EditorX allows remote attackers to create or overwrite arbitrary files via the first argument to the extractPagesToFile method...

VulnCheck KEV: CVE-2006-6884

Buffer overflow in the WZFILEVIEW.FileViewCtrl.61 ActiveX control aka Sky Software "FileView" ActiveX control for WinZip 10.0 Build 6667 allows remote attackers to execute arbitrary code via a long argument to the CreateNewFolderFromName method, a different vulnerability than CVE-2006-5198...

CVE-2008-6496

Insecure method vulnerability in the VSPDFEditorX.VSPDFEdit ActiveX control in VSPDFEditorX.ocx 1.0.200.0 in VISAGESOFT eXPert PDF EditorX allows remote attackers to create or overwrite arbitrary files via the first argument to the extractPagesToFile method...

CVE-2008-6496

CVE-2008-6496 affects VISAGESOFT eXPert PDF EditorX (VSPDFEditorX.ocx 1.0.200.0). The VSPDFEdit ActiveX control exposes extractPagesToFile’s first argument, allowing remote attackers to create or overwrite arbitrary files. Documented impact is arbitrary file overwrite; no remediation details are ...

Integrity Clientless Security (ICS) Update 3.7.256.0

Check Point Integrity ™ Clientless Security ICS protects your Web site by detecting and disabling spyware processes and allowing you to enforce security policies before a user logs onto your network. Using ICS you can prevent users with potentially harmful software from accessing your Web site, a...

GeoVision LiveAudio ActiveX控件GetAudioPlayingTime()方式代码执行漏洞

BUGTRAQ ID: 34115 GeoVision LiveAudio ActiveX控件是GeoVision监控软件中用于同步音频的工具。 GeoVision LiveAudio ActiveX控件（CLSID：814A3C52-B6F7-4AEA-A9BC-7849B9B0ECA8，Progid：LIVEAUDIO.LiveAudioCtrl.1）没有正确地验证对GetAudioPlayingTime方式所提供的输入参数。如果用户受骗访问了恶意网页的话，就可能导致访问已经释放的内存。成功利用这个漏洞的攻击者可以在用户系统上执行任意代码。 GeoVision LiveAudio...

Morovia Barcode ActiveX Control < 3.6.0 Arbitrary File Overwrite

The version of the Morovia Barcode ActiveX control installed on the remote Windows host allows overwriting of arbitrary files via calls to the control's 'Save' and 'ExportImage' methods. If an attacker can trick a user on the affected host into viewing a specially crafted HTML document, he can...

Morovia Barcode ActiveX 3.6.2 (MrvBarCd.dll) Insecure Method Exploit

No description provided by source. HTML Morovia Barcode ActiveX Control 3.6.2 MrvBarCd.dll Insecure Method Exploitbr br Description There is Insecure Method in Save fonctionbr Download Product : http://download.morovia.com/demo/MrvBarCdDemoV3.4.0.0.msibr Found By : Cyber-Zonebr Tested Under : sp2...

GeoVision LiveAudio ActiveX Remote Freed-Memory Access Exploit

No description provided by source. !-- 02/03/2009 14.57.46 GeoVision LiveAudio ActiveX Control GetAudioPlayingTime remote freed-memory access exploit IE7 by Nine:Situations:Group::trotzkista vendor site: http://www.geovision.com.tw/ our site: http://retrogod.altervista.org/ details: CLSID:...