CVE-2009-1064

CVE-2009-1064 targets Orbit Downloader (ActiveX control orbitmxt.dll 2.1.0.2) and affects Orbit Downloader versions 2.8.7 and earlier. The issue is an argument-injection flaw in the download method that allows a remote attacker to overwrite arbitrary files by crafting whitespace, a command-line s...

IBM Access Support ActiveX control stack buffer overflow

Overview The IBM Access Support ActiveX control contains a stack buffer overflow, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The IBM Access Support ActiveX control has the ability to collect system information, such as make,...

IBM Access Support ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in IBM Access Support. When sending an overly long string to the GetXMLValue method of IbmEgath.dll 3.20.284.0 an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/browser/ibmegath/getxmlvalue msf undefinedgetxmlval...

Imera TeamLinks ImeraIEPlugin.dll ActiveX Control DoS Vulnerability

Imera ImeraIEPlugin ActiveX is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Imera TeamLinks ImeraIEPlugin.dll ActiveX Control DoS Vulnerability

This host is installed with Imera ImeraIEPlugin ActiveX and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodimeraiepluginactvxctrlvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ Imera TeamLinks ImeraIEPlugin.dll ActiveX Control DoS Vulnerability Authors: Nikita MR...

CVE-2008-6496

Insecure method vulnerability in the VSPDFEditorX.VSPDFEdit ActiveX control in VSPDFEditorX.ocx 1.0.200.0 in VISAGESOFT eXPert PDF EditorX allows remote attackers to create or overwrite arbitrary files via the first argument to the extractPagesToFile method...

Security feature bypass

Insecure method vulnerability in the VSPDFEditorX.VSPDFEdit ActiveX control in VSPDFEditorX.ocx 1.0.200.0 in VISAGESOFT eXPert PDF EditorX allows remote attackers to create or overwrite arbitrary files via the first argument to the extractPagesToFile method...

VulnCheck KEV: CVE-2006-6884

Buffer overflow in the WZFILEVIEW.FileViewCtrl.61 ActiveX control aka Sky Software "FileView" ActiveX control for WinZip 10.0 Build 6667 allows remote attackers to execute arbitrary code via a long argument to the CreateNewFolderFromName method, a different vulnerability than CVE-2006-5198...

CVE-2008-6496

Insecure method vulnerability in the VSPDFEditorX.VSPDFEdit ActiveX control in VSPDFEditorX.ocx 1.0.200.0 in VISAGESOFT eXPert PDF EditorX allows remote attackers to create or overwrite arbitrary files via the first argument to the extractPagesToFile method...

CVE-2008-6496

CVE-2008-6496 affects VISAGESOFT eXPert PDF EditorX (VSPDFEditorX.ocx 1.0.200.0). The VSPDFEdit ActiveX control exposes extractPagesToFile’s first argument, allowing remote attackers to create or overwrite arbitrary files. Documented impact is arbitrary file overwrite; no remediation details are ...

Integrity Clientless Security (ICS) Update 3.7.256.0

Check Point Integrity ™ Clientless Security ICS protects your Web site by detecting and disabling spyware processes and allowing you to enforce security policies before a user logs onto your network. Using ICS you can prevent users with potentially harmful software from accessing your Web site, a...

GeoVision LiveAudio ActiveX控件GetAudioPlayingTime()方式代码执行漏洞

BUGTRAQ ID: 34115 GeoVision LiveAudio ActiveX控件是GeoVision监控软件中用于同步音频的工具。 GeoVision LiveAudio ActiveX控件（CLSID：814A3C52-B6F7-4AEA-A9BC-7849B9B0ECA8，Progid：LIVEAUDIO.LiveAudioCtrl.1）没有正确地验证对GetAudioPlayingTime方式所提供的输入参数。如果用户受骗访问了恶意网页的话，就可能导致访问已经释放的内存。成功利用这个漏洞的攻击者可以在用户系统上执行任意代码。 GeoVision LiveAudio...

Morovia Barcode ActiveX Control < 3.6.0 Arbitrary File Overwrite

The version of the Morovia Barcode ActiveX control installed on the remote Windows host allows overwriting of arbitrary files via calls to the control's 'Save' and 'ExportImage' methods. If an attacker can trick a user on the affected host into viewing a specially crafted HTML document, he can...

Morovia Barcode ActiveX 3.6.2 (MrvBarCd.dll) Insecure Method Exploit

No description provided by source. HTML Morovia Barcode ActiveX Control 3.6.2 MrvBarCd.dll Insecure Method Exploitbr br Description There is Insecure Method in Save fonctionbr Download Product : http://download.morovia.com/demo/MrvBarCdDemoV3.4.0.0.msibr Found By : Cyber-Zonebr Tested Under : sp2...

GeoVision LiveAudio ActiveX Remote Freed-Memory Access Exploit

No description provided by source. !-- 02/03/2009 14.57.46 GeoVision LiveAudio ActiveX Control GetAudioPlayingTime remote freed-memory access exploit IE7 by Nine:Situations:Group::trotzkista vendor site: http://www.geovision.com.tw/ our site: http://retrogod.altervista.org/ details: CLSID:...

Morovia Barcode ActiveX 3.6.2 (MrvBarCd.dll) Insecure Method Exploit

Exploit for unknown platform in category remote exploits ==================================================================== Morovia Barcode ActiveX 3.6.2 MrvBarCd.dll Insecure Method Exploit ==================================================================== Morovia Barcode ActiveX Control 3.6...

GeoVision LiveAudio ActiveX Remote Freed-Memory Access Exploit

Exploit for unknown platform in category remote exploits ============================================================== GeoVision LiveAudio ActiveX Remote Freed-Memory Access Exploit ==============================================================...

Morovia Barcode Insecure Method

Morovia Barcode ActiveX Control 3.0 MrvBarCd.dll Insecure Method Exploit Description There is Insecure Method in Save fonction Download Product : http://download.morovia.com/demo/MrvBarCdDemoV3.4.0.0.msi Found By : Cyber-Zone Tested Under : sp2 fr E-mail : [email protected] Home :...

GeoVision LiveAudio Memory Access

// win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" + "%u4948%u4949%u4949%u4949%u...

Morovia Barcode ActiveX 3.6.2 - MrvBarCd.dll Insecure Method

Morovia Barcode ActiveX 3.6.2 - MrvBarCd.dll Insecure Method Morovia Barcode ActiveX Control 3.6.2 MrvBarCd.dll Insecure Method Exploit Description There is Insecure Method in Save fonction Download Product : http://download.morovia.com/demo/MrvBarCdDemoV3.4.0.0.msi Found By : Cyber-Zone Tested...