CVE-2012-2515

Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHelp Module aka the HTML Help component, as used in EMC Documentum ApplicationXtender Desktop 5.4; EMC Captiva Quickscan Pro 4.6 SP1; GE Intelligent Platforms Proficy Historian 3.1...

CVE-2012-2515

CVE-2012-2515 describes multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control (KeyHelp.ocx 1.2.312) in the KeyWorks KeyHelp Module (HTML Help component). The flaws allow remote code execution via a long string passed to the (1) JumpMappedID or (2) JumpURL methods, affecti...

PT-2012-3920

Name of the Vulnerable Software and Affected Versions EMC RSA Access Manager Server versions prior to 6.1 SP4 EMC RSA Access Manager Agent affected versions not specified Description The issue is related to improper validation of session tokens after a logout, which could allow remote attackers t...

CVE-2012-2281: Improper Authentication

EMC RSA Access Manager Server 6.x before 6.1 SP4 and RSA Access Manager Agent do not properly validate session tokens after a logout, which might allow remote attackers to conduct replay attacks via unspecified vectors...

EMC Data Protection Advisor Denial of Service

A denial of service vulnerability has been reported in EMC Data Protection Advisor...

CVE-2012-0409

Multiple buffer overflows in EMC AutoStart 5.3.x and 5.4.x before 5.4.3 allow remote attackers to cause a denial of service agent crash or possibly execute arbitrary code via crafted packets...

Buffer overflow

Multiple buffer overflows in EMC AutoStart 5.3.x and 5.4.x before 5.4.3 allow remote attackers to cause a denial of service agent crash or possibly execute arbitrary code via crafted packets...

CVE-2012-0409

The CVE-2012-0409 issue affects EMC AutoStart, specifically the ftAgent component. The vulnerability stems from parsing routines for op-codes in EMC AutoStart ftAgent’s network protocol, where values read from the network are used in memory size calculations without validation. This can cause int...

CVE-2012-0409

Multiple buffer overflows in EMC AutoStart 5.3.x and 5.4.x before 5.4.3 allow remote attackers to cause a denial of service agent crash or possibly execute arbitrary code via crafted packets...

PT-2012-2551

Name of the Vulnerable Software and Affected Versions EMC AutoStart versions 5.3.x through 5.4.x before 5.4.3 Description The issue allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted packets. Multiple buffer overflows are present in the affected...

CVE-2012-0409: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in EMC AutoStart 5.3.x and 5.4.x before 5.4.3 allow remote attackers to cause a denial of service agent crash or possibly execute arbitrary code via crafted packets...

ESA-2012-020: EMC AutoStart Multiple Buffer Overflow Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-020: EMC AutoStart Multiple Buffer Overflow Vulnerabilities. EMC Identifier: ESA-2012-020 CVE Identifier: CVE-2012-0409 Severity Rating: CVSS v2 Base Score: 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C Affected products: EMC AutoStart 5.3.x EMC AutoStart...

CVE-2012-2276

The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via input data that 1 lacks FIPS fields or 2 has an invalid version number...

CVE-2012-2277

The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial of service pvcontrol.exe process hang via \n line feed characters in the Id fields of many "batch begin untethered" commands...

Design/Logic Flaw

The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial of service pvcontrol.exe process hang via \n line feed characters in the Id fields of many "batch begin untethered" commands...

Null pointer dereference

The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via input data that 1 lacks FIPS fields or 2 has an invalid version number...

CVE-2012-2276

The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via input data that 1 lacks FIPS fields or 2 has an invalid version number...

CVE-2012-2277

The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial of service pvcontrol.exe process hang via \n line feed characters in the Id fields of many "batch begin untethered" commands...

CVE-2012-2276

CVE-2012-2276 affects EMC Documentum Information Rights Management (IRM) Server 4.x (before 4.7.0100) and 5.x (before 5.0.1030). The vulnerability is a NULL pointer dereference in the IRM Server when processing input data that (1) lacks FIPS fields or (2) has an invalid version number, leading to...

CVE-2012-2277

CVE-2012-2277 affects EMC Documentum Information Rights Management (IRM) Server 4.x before 4.7.0100 and 5.x before 5.0.1030. A DoS condition arises when remote attackers send newline characters in Id fields of multiple batch begin untethered commands, causing pvcontrol.exe to hang. Impact is a de...