CVE-2013-10057 Synactis PDF In-The-Box ConnectToSynactic Stack-Based Buffer Overflow

A stack-based buffer overflow vulnerability exists in Synactis PDF In-The-Box ActiveX control PDFIN1.ocx, specifically the ConnectToSynactis method. When a long string is passed to this method—intended to populate the ldCmdLine argument of a WinExec call—a strcpy operation overwrites a saved...

CVE-2013-10057

Synactis PDF In-The-Box ActiveX control (PDF_IN_1.ocx) contains a stack-based buffer overflow in the ConnectToSynactis method. A long string passed to populate ldCmdLine for WinExec can overwrite a saved TRegistry pointer on the stack, enabling remote code execution when a user visits a malicious...

PT-2025-31691 · Synactis +1 · Synactis Pdf In-The-Box +1

Name of the Vulnerable Software and Affected Versions: Synactis PDF In-The-Box ActiveX control PDF IN 1.ocx affected versions not specified Description: A stack-based buffer overflow vulnerability exists in the ConnectToSynactis method of the Synactis PDF In-The-Box ActiveX control PDF IN 1.ocx. ...

CVE-2025-34128

A buffer overflow vulnerability exists in the X360 VideoPlayer ActiveX control VideoPlayer.ocx version 2.6 when handling overly long arguments to the ConvertFile method. An attacker can exploit this vulnerability by supplying crafted input to cause memory corruption and execute arbitrary code...

CVE-2025-34128

A buffer overflow vulnerability exists in the X360 VideoPlayer ActiveX control VideoPlayer.ocx version 2.6 when handling overly long arguments to the ConvertFile method. An attacker can exploit this vulnerability by supplying crafted input to cause memory corruption and execute arbitrary code...

CVE-2025-34128 X360 VideoPlayer ActiveX Control Buffer Overflow via ConvertFile()

A buffer overflow vulnerability exists in the X360 VideoPlayer ActiveX control VideoPlayer.ocx version 2.6 when handling overly long arguments to the ConvertFile method. An attacker can exploit this vulnerability by supplying crafted input to cause memory corruption and execute arbitrary code...

CVE-2025-34128

CVE-2025-34128 describes a buffer overflow in X360 VideoPlayer ActiveX control (VideoPlayer.ocx) v2.6 triggered by overly long arguments to ConvertFile(), leading to memory corruption and arbitrary code execution in the executing process. Affected component is the ActiveX control; root cause is a...

CVE-2025-34128 X360 VideoPlayer ActiveX Control Buffer Overflow via ConvertFile()

A buffer overflow vulnerability exists in the X360 VideoPlayer ActiveX control VideoPlayer.ocx version 2.6 when handling overly long arguments to the ConvertFile method. An attacker can exploit this vulnerability by supplying crafted input to cause memory corruption and execute arbitrary code...

CVE-2020-7804

ActiveX ControlHShell.dll in Handy Groupware 1.7.3.1 for Windows 7, 8, and 10 allows an attacker to execute arbitrary command via the ShellExec method...

CVE-2020-5897

In versions 7.1.5-7.1.9, there is use-after-free memory vulnerability in the BIG-IP Edge Client Windows ActiveX component...

CVE-2020-1402

An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows ActiveX Installer Service Elevation of Privilege Vulnerability'...

CVE-2020-0860

An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows ActiveX Installer Service Elevation of Privilege Vulnerability'. Thi...

CVE-2020-0773

An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows ActiveX Installer Service Elevation of Privilege Vulnerability'. Thi...

CVE-2020-0770

An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows ActiveX Installer Service Elevation of Privilege Vulnerability'. Thi...

CVE-2014-1617

Microsys PROMOTIC 8.2.13 contains an ActiveX Control Start Buffer Overflow vulnerability which can lead to denial of service...

CVE-2010-3751

Multiple heap-based buffer overflows in an ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 allow remote attackers to execute arbitrary code via a long .smil argument to the 1 tfile, 2 pnmm, or 3 cdda protocol handler...

CVE-2012-3034

WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers to discover a username and password via crafted parameters to unspecified methods in ActiveX controls...

CVE-2012-5879

An ActiveX control in McHealthCheck.dll in McAfee Virtual Technician MVT and ePO-MVT 6.5.0.2101 and earlier allows remote attackers to modify or create arbitrary files via a full pathname argument to the Save method...

CVE-2012-2990

The MASetupCaller ActiveX control before 1.4.2012.508 in MASetupCaller.dll in MarkAny ContentSAFER, as distributed in Samsung KIES before 2.3.2.120741313, does not properly implement unspecified methods, which allows remote attackers to download an arbitrary program onto a client machine, and...

CVE-2012-2495

The HostScan downloader implementation in Cisco AnyConnect Secure Mobility Client 3.x before 3.0 MR8 and Cisco Secure Desktop before 3.6.6020 does not compare the timestamp of offered software to the timestamp of installed software, which allows remote attackers to force a version downgrade by...