CVE-2015-2096

Use-after-free vulnerability in the Connect function in the WESPMonitor.WESPMonitorCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via an invalid IP address and a page reload...

CVE-2015-2096

WebGate eDVR Manager exposes the WESPMonitor.WESPMonitorCtrl.1 ActiveX control. CVE-2015-2096 is a use-after-free in the Connect() method that can allow remote code execution when an attacker provides an invalid IP address and reloads the page. The vulnerability is triggered by a freed pointer be...