EUVD-2010-1545

Malware in sbrugna...

Design/Logic Flaw

The GIGABYTE Dldrv2 ActiveX control 1.4.206.11 allows remote attackers to 1 download arbitrary programs onto a client system, and execute these programs, via vectors involving the dl method; and 2 download arbitrary programs onto a client system via vectors involving the SetDLInfo method in...

CVE-2010-1517

The GIGABYTE Dldrv2 ActiveX control 1.4.206.11 allows remote attackers to 1 download arbitrary programs onto a client system, and execute these programs, via vectors involving the dl method; and 2 download arbitrary programs onto a client system via vectors involving the SetDLInfo method in...

CVE-2010-1517

The GIGABYTE Dldrv2 ActiveX control 1.4.206.11 allows remote attackers to 1 download arbitrary programs onto a client system, and execute these programs, via vectors involving the dl method; and 2 download arbitrary programs onto a client system via vectors involving the SetDLInfo method in...

CVE-2010-1517

The CVE concerns the GIGABYTE Dldrv2 ActiveX control version 1.4.206.11. The vulnerability allows remote attackers to download arbitrary programs onto a client system and execute them via the dl method, and also via SetDLInfo with the Bdl method. The affected component is the Dldrv2 ActiveX contr...

CVE-2010-1518

The CVE-2010-1518 issue affects GIGABYTE Dldrv2 ActiveX Control 1.4.206.11. A missing input validation of the item argument to SetDLInfo leads to array-indexing/overflow, causing memory corruption that enables remote code execution or denial of service. Affected component: Dldrv2 ActiveX Control;...

CVE-2010-1517: Improper Input Validation

The GIGABYTE Dldrv2 ActiveX control 1.4.206.11 allows remote attackers to 1 download arbitrary programs onto a client system, and execute these programs, via vectors involving the dl method; and 2 download arbitrary programs onto a client system via vectors involving the SetDLInfo method in...

CVE-2010-1518: Improper Input Validation

Array index error in the SetDLInfo method in the GIGABYTE Dldrv2 ActiveX control 1.4.206.11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via the item argument...

Secunia Research: GIGABYTE Dldrv2 ActiveX Control Array Indexing Vulnerability

====================================================================== Secunia Research 15/07/2010 - GIGABYTE Dldrv2 ActiveX Control Array Indexing Vulnerability - ====================================================================== Table of Contents Affected...