Symantec AppStream Client LaunchObj ActiveX Control installAppMgr vulnerability

Added: 03/31/2009 CVE: CVE-2008-4388 BID: 33247 OSVDB: 51410 Background Symantec AppStream is an application deployment framework. Problem The LaunchObj ActiveX control exposes the installAppMgr method, which can be used to download and execute arbitrary code. This could allow command execution...

SAP AG SAPgui EAI WebViewer3D ActiveX control stack buffer overflow

Overview The Siemens Unigraphics Solutions Teamcenter Visualization EAI WebViewer3D ActiveX control, which comes with SAPgui, contains a stack buffer overflow. This may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description SAP AG SAPgui includes an...

SAP GUI SAPBExCommonResources ActiveX Command Execution

Added: 03/29/2009 Background The SAP GUI is the GUI client in SAP's 3-tier architecture of database, application server and client. The SAP GUI family is available for Windows, Java, and HTML/Internet Transaction Server ITS environment. SAP GUI for Windows registers the...

SAP GUI SAPBExCommonResources ActiveX Command Execution

Added: 03/29/2009 Background The SAP GUI is the GUI client in SAP's 3-tier architecture of database, application server and client. The SAP GUI family is available for Windows, Java, and HTML/Internet Transaction Server ITS environment. SAP GUI for Windows registers the...

SAP GUI SAPBExCommonResources ActiveX Command Execution

Added: 03/29/2009 Background The SAP GUI is the GUI client in SAP's 3-tier architecture of database, application server and client. The SAP GUI family is available for Windows, Java, and HTML/Internet Transaction Server ITS environment. SAP GUI for Windows registers the...

SAP GUI SAPBExCommonResources ActiveX Command Execution

Added: 03/29/2009 Background The SAP GUI is the GUI client in SAP's 3-tier architecture of database, application server and client. The SAP GUI family is available for Windows, Java, and HTML/Internet Transaction Server ITS environment. SAP GUI for Windows registers the...

Design/Logic Flaw

Argument injection vulnerability in orbitmxt.dll 2.1.0.2 in the Orbit Downloader 2.8.7 and earlier ActiveX control allows remote attackers to overwrite arbitrary files via whitespace and a command-line switch, followed by a full pathname, in the third argument to the download method...

Expert PDF EditorX ActiveX File Overwrite Vulnerability

This host is installed with Expert PDF EditorX and is prone to ActiveX file overwrite vulnerability. OpenVAS Vulnerability Test $Id: secpodexpertpdfeditorxactivexvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ Expert PDF EditorX ActiveX File Overwrite Vulnerability Authors: Sujit Ghosal Copyright:...

Expert PDF EditorX ActiveX File Overwrite Vulnerability

Expert PDF EditorX is prone to ActiveX file overwrite vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-1092

Use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control in LIVEAU1.OCX 7.0 for GeoVision DVR systems allows remote attackers to execute arbitrary code by calling the GetAudioPlayingTime method with certain arguments...

Design/Logic Flaw

Use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control in LIVEAU1.OCX 7.0 for GeoVision DVR systems allows remote attackers to execute arbitrary code by calling the GetAudioPlayingTime method with certain arguments...

CVE-2009-1092

Use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control in LIVEAU1.OCX 7.0 for GeoVision DVR systems allows remote attackers to execute arbitrary code by calling the GetAudioPlayingTime method with certain arguments...

CVE-2009-1092

The CVE-2009-1092 entry describes a use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control (LIVEAU~1.OCX 7.0) used by GeoVision DVR systems. The flaw allows remote code execution when an attacker calls GetAudioPlayingTime with certain arguments, enabling arbitrary code exec...

CVE-2009-0215

Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as distributed on IBM and Lenovo computers, allows remote attackers to execute arbitrary code via unspecified vectors...

DSquare Exploit Pack: D2SEC_IBMEGATH

Name| d2secibmegath ---|--- CVE| CVE-2009-0215 Exploit Pack| D2ExploitPack Description| IBM Access Support ActiveX Stack Overflow Vulnerability Notes|...

Stack overflow

Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as distributed on IBM and Lenovo computers, allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2009-0215

Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as distributed on IBM and Lenovo computers, allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2009-0215

Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as distributed on IBM and Lenovo computers, allows remote attackers to execute arbitrary code via unspecified vectors...

IBM Access Support ActiveX控件GetXMLValue()方式栈溢出漏洞

BUGTRAQ ID: 34228 CVECAN ID: CVE-2009-0215 IBM Access Support ActiveX是一些联想和IBM计算机中所预装的用于收集系统信息的控件。 IBM Access Support ActiveX控件（IbmEgath.dll）没有正确地验证对GetXMLValue方式所提供的输入。如果用户受骗访问了恶意网页并向该方式传送了超长参数的话，就可以触发栈溢出，导致浏览器崩溃或执行任意代码。 IBM Access Support ActiveX 临时解决方法： 在IE中禁用IBM Access Support...

CVE-2009-1064

Argument injection vulnerability in orbitmxt.dll 2.1.0.2 in the Orbit Downloader 2.8.7 and earlier ActiveX control allows remote attackers to overwrite arbitrary files via whitespace and a command-line switch, followed by a full pathname, in the third argument to the download method...