Imera ImeraIEPlugin - ActiveX Control Remote Code Execution

Who: Imerahttp://www.imera.com Imera TeamLinks Clienthttp://teamlinks.imera.com/install.html What: ImeraIEPlugin.dll Version 1.0.2.54 Dated 12/02/2008 75CC8584-86D4-4A50-B976-AA72618322C6 http://teamlinks.imera.com/ImeraIEPlugin.cab How: This control is used to install the Imera TeamLinks Client...

iDefense COMRaider - ActiveX Control write() Arbitrary File Overwrite

iDefense COMRaider - ActiveX Control write Arbitrary File Overwrite source: https://www.securityfocus.com/bid/33942/info iDefense COMRaider ActiveX control is prone to a vulnerability that lets attackers overwrite arbitrary local files on the victim's computer in the context of the vulnerable...

HP Virtual Rooms ActiveX控件不安全方式调用漏洞

BUGTRAQ ID: 33918 CVECAN ID: CVE-2009-0208 HP Virtual Rooms是一款在线协作软件。 HP Virtual Rooms需要使用Internet Explorer才能运行，因为HPVirtualRooms32.dll库提供了一个名为HPVirtualRooms32的ActiveX控件组件。该控件包含有多个危险的调用方式，但对可使用这个控件的站点没有任何限制。如果用户受骗访问了恶意网页的话，就可能通过这些调用向用户系统上下载并执行任意程序。 HP Virtual Rooms 7 HP Virtual Rooms 6 临时解决方法：...

iDefense COMRaider - ActiveX Control 'write()' Arbitrary File Overwrite

source: https://www.securityfocus.com/bid/33942/info iDefense COMRaider ActiveX control is prone to a vulnerability that lets attackers overwrite arbitrary local files on the victim's computer in the context of the vulnerable application using the ActiveX control typically Internet Explorer...

HP Virtual Rooms ActiveX code execution

No description provided...

HP Virtual Rooms ActiveX control fails to restrict access to dangerous methods

Overview The HP Virtual Rooms ActiveX control contains methods that can be used to download and execute arbitrary code from an arbitrary server. Description HP Virtual Rooms is software for online collaboration. HP Virtual Rooms requires Internet Explorer, as one of the components is an ActiveX...

JVN#16767117 Buffer overflow vulnerability in ActiveX Control for Sony SNC series network cameras

The ActiveX Control for Sony SNC series network cameras is a software to monitor images over the network using a web browser. This ActiveX Control contains a heap-based buffer overflow vulnerability triggered by the improper processing of some configuration variables. Impact A remote attacker cou...

GeoVision LiveX ActiveX控件SnapShotToFile()方式任意文件覆盖漏洞

BUGTRAQ ID: 33782 GeoVision LiveX是用于管理GeoVision视频监控系统的软件。 GeoVision的LiveXv7000（clsid DA8484DE-52DB-4860-A986-61A8682E298A）和LiveXv8120（clsid F4421170-DB22-4551-BBFB-FFCFFB419F6F）ActiveX控件没有正确地验证对SnapShotToFile和SnapShotX方式输入的参数，如果用户受骗访问了恶意网页并向上述方式传送了恶意参数的话，就会导致向用户系统写入任意文件。 GeoVision LiveX ActiveX...

GeoVision LiveX_v8200 ActiveX (LIVEX_~1.OCX) File Corruption PoC

Exploit for unknown platform in category remote exploits ================================================================ GeoVision LiveXv8200 ActiveX LIVEX1.OCX File Corruption PoC ================================================================ function sleepn var now = new Date; var exitTime =...

GeoVision LiveX_v8200 ActiveX (LIVEX_~1.OCX) File Corruption PoC

No description provided by source. !-- GeoVision LiveXv8200 ActiveX Control LIVEX1.OCX remote file corruption poc by Nine:Situations:Group::SnoopyAssault site: http://retrogod.altervista.org/ working against IE8b/xpsp3, safe for scripting and for initialize. LiveXv7000 with clsid...

GeoVision LiveX 8200 - ActiveX 'LIVEX_~1.OCX' File Corruption

function sleepn var now = new Date; var exitTime = now.getTime + n1000; while true now = new Date; if now.getTime exitTime return; param name="SvrType" va...

GeoVision ActiveX File Corruption

function sleepn var now = new Date; var exitTime = now.getTime + n1000; while true now = new Date; if now.getTime exitTime return; param name="AutoLogin" v...

GeoVision LiveX 8200 - ActiveX LIVEX_~1.OCX File Corruption

GeoVision LiveX 8200 - ActiveX LIVEX1.OCX File Corruption function sleepn var now = new Date; var exitTime = now.getTime + n1000; while true now = new Date; if now.getTime exitTime return; par...

Update Protection against Akamai Download Manager Arbitrary Program Execution

In its Update Rollup for ActiveX Kill Bits from February 2009 960715, Microsoft has released a security update to set a kill bit for an ActiveX control developed by Akamai Technologies. Akamai Technologies has released a security update that addresses a vulnerability in the affected...

BlackBerry Application Web Loader ActiveX控件栈溢出漏洞

BUGTRAQ ID: 33663 CVECAN ID: CVE-2009-0305 BlackBerry Application Web Loader是用于通过PC和Internet Explorer向BlackBerry设备加载应用程序的ActiveX控件。 BlackBerry Application Web Loader ActiveX控件（AxLoader.ocx或AxLoader.dll）的load和loadJad方式存在栈溢出漏洞。如果用户受骗访问了恶意网页并向上述方式传送了超长输入的话，就可以触发这个溢出，导致在用户浏览器会话中执行任意代码。 Research In...

Synactis All-In-The-Box ActiveX Remote Code Execution Vulnerability

This host is installed with All-In-The-Box ActiveX and is prone to Remote Code Execution Vulnerability. OpenVAS Vulnerability Test $Id: gbsynactisallintheboxactivexcodeexecvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ Synactis All-In-The-Box ActiveX Remote Code Execution Vulnerability Authors: Sujit...

Nokia Phoenix Service Software ActiveX控件多个缓冲区溢出漏洞

BUGTRAQ ID: 33726 Nokia Phoenix Service Software是用于刷机诺基亚手机的软件。 Nokia Phoenix Service...

Synactis All-In-The-Box ActiveX RCE Vulnerability

All-In-The-Box ActiveX is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nokia Phoenix Service Software ActiveX buffer overflow

SelectDevice method buffer overflow...

MS KB960715: Cumulative Security Update of ActiveX Kill Bits

The remote host is missing a list of kill bits for ActiveX controls that are known to contain vulnerabilities. If these ActiveX controls are ever installed on the remote host, either now or in the future, they would expose it to various security issues. %NASLMINLEVEL 70300 C Tenable Network...