Honeywell OPOS Suite Multiple ActiveX Controls Open Method Stack Buffer Overflow (CVE-2014-8269)

A buffer overflow vulnerability has been reported in Honeywell OPOS Suite. The vulnerability is due to improper bounds checking while processing the Open method calls within the HWOPOSScale.ocx ActiveX control and the HWOPOSSCANNER.ocx ActiveX control. An attacker can exploit this vulnerability b...

CVE-2014-8269

Honeywell OPOS Suite (pre-1.13.4.15) contains two ActiveX controls, HWOPOSScale.ocx and HWOPOSSCANNER.ocx, with a stack-based buffer overflow in the Open method. The flaw does not validate the length of an attacker-supplied string before copying into a fixed-size stack buffer, enabling remote cod...

Honeywell OPOS suite Stack Buffer Overflow vulnerability

Overview The Honeywell OPOS OLE for Retail Point-of-Sale POS Suite is vulnerable to a stack buffer overflow attack. Description The Honeywell OPOS Suite provides a standard programming interface that allows POS hardware to be easily integrated into retail POS systems based on Microsoft Windows...