Design/Logic Flaw

Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control VImpX.ocx 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allow remote attackers to overwrite arbitrary files via 1 the LogFile property and ClearLogFile method, and 2 the SaveToFile method...

Stack overflow

Stack-based buffer overflow in the VImpX.VImpAX ActiveX control VImpX.ocx 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allows remote attackers to execute arbitrary code via a long LogFile property...

CVE-2008-4749

Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control VImpX.ocx 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allow remote attackers to overwrite arbitrary files via 1 the LogFile property and ClearLogFile method, and 2 the SaveToFile method...

CVE-2008-4750

The CVE-2008-4750 entry describes a stack-based buffer overflow in the VImpX.VImpAX ActiveX control (VImpX.ocx) version 4.8.8.0 in DB Software Laboratory VImp X (possibly affected 4.7.7). The vulnerability is triggered by a long LogFile property, allowing remote attackers to execute arbitrary cod...

CVE-2008-4749

The CVE-2008-4749 issue affects DB Software Laboratory’s VImpX.VImpAX ActiveX control (VImpX.ocx) version 4.8.8.0 (possibly 4.7.7). The vulnerability arises from insecure methods that let remote attackers overwrite arbitrary files via the LogFile property and ClearLogFile method, and via the Save...

VImpX.ocx ActiveX控件多个文件破坏漏洞

BUGTRAQ ID: 31907 VImpX ActiveX控件允许跨表格或ODBC数据源将数据导入到Oracle、SQL Server或ODBC数据库中。 VImpX.ocx ActiveX控件（VImpX.ocx，CLSID...

Husdawg System Requirements Lab Multiple ActiveX Remote Code Execution

Instant Expert Analysis from Husdawg System Requirements Lab is installed on the remote host. Instant Expert Analysis software allows websites to perform one-click software/hardware analysis of remote systems. An ActiveX component used by Instant Expert Analysis can be exploited to download and...

CVE-2008-4729

Stack-based buffer overflow in Hummingbird.XWebHostCtrl.1 ActiveX control hclxweb.dll in Hummingbird Xweb ActiveX Control 13.0 and earlier allows remote attackers to execute arbitrary code via a long PlainTextPassword property. NOTE: code execution might not be possible in 13.0...

CVE-2008-4728

Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 DeployRun.dll ActiveX control 10.0.0.44 in Hummingbird Deployment Wizard 2008 allow remote attackers to execute arbitrary programs via the 1 Run and 2 PerformUpdateAsync methods, and 3 modify arbitrary registry values via...

Design/Logic Flaw

Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 DeployRun.dll ActiveX control 10.0.0.44 in Hummingbird Deployment Wizard 2008 allow remote attackers to execute arbitrary programs via the 1 Run and 2 PerformUpdateAsync methods, and 3 modify arbitrary registry values via...

Stack overflow

Stack-based buffer overflow in Hummingbird.XWebHostCtrl.1 ActiveX control hclxweb.dll in Hummingbird Xweb ActiveX Control 13.0 and earlier allows remote attackers to execute arbitrary code via a long PlainTextPassword property. NOTE: code execution might not be possible in 13.0...

CVE-2008-4729

Stack-based buffer overflow in Hummingbird.XWebHostCtrl.1 ActiveX control hclxweb.dll in Hummingbird Xweb ActiveX Control 13.0 and earlier allows remote attackers to execute arbitrary code via a long PlainTextPassword property. NOTE: code execution might not be possible in 13.0...

CVE-2008-4728

Affected software: Hummingbird Deployment Wizard 2008 (version 10.0.0.44) with DeployRun.DeploymentSetup.1 ActiveX control. Vulnerabilities allow remote arbitrary-program execution via DeployRun.dll methods Run and PerformUpdateAsync, and arbitrary registry modification via SetRegistryValueAsStri...

CVE-2008-4728

Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 DeployRun.dll ActiveX control 10.0.0.44 in Hummingbird Deployment Wizard 2008 allow remote attackers to execute arbitrary programs via the 1 Run and 2 PerformUpdateAsync methods, and 3 modify arbitrary registry values via...

CVE-2008-4729

CVE-2008-4729 concerns a stack-based buffer overflow in the Hummingbird XWebHostCtrl.1 ActiveX control (hclxweb.dll) used by Hummingbird Xweb ActiveX Control <= 13.0. The overflow is triggered by a too-long PlainTextPassword property, potentially enabling remote arbitrary code execution; note ...

PT-2008-5939 · Hummingbird · Hummingbird Deployment Wizard

Name of the Vulnerable Software and Affected Versions: Hummingbird Deployment Wizard 2008 version 10.0.0.44 Description: The issue concerns insecure methods in the DeployRun.DeploymentSetup.1 ActiveX control, allowing remote attackers to execute arbitrary programs via the Run and PerformUpdateAsy...

Hummingbird Deployment Wizard ActiveX Control Multiple Security Vulnerabilities

Deployment Wizard ActiveX Control is prone to multiple security vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-4729: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Hummingbird.XWebHostCtrl.1 ActiveX control hclxweb.dll in Hummingbird Xweb ActiveX Control 13.0 and earlier allows remote attackers to execute arbitrary code via a long PlainTextPassword property. NOTE: code execution might not be possible in 13.0...

Hummingbird Deployment Wizard ActiveX Control Multiple Security Vulnerabilities

This host is installed with Deployment Wizard ActiveX Control and is prone to multiple security vulnerabilities. The multiple flaws are due to error in 'SetRegistryValueAsString', 'Run' and 'PerformUpdateAsync' methods in DeployRun.DeploymentSetup.1 DeployRun.dll ActiveX control. OpenVAS...

KLA10150 ACE vulnerability in Exceed

A buffer overflow was found in Hummingbird Exceed. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially formed ActiveX control property. Original advisories - Exploitation Public exploits exist for this...