NCTAVIFile File Creation / Execution

""""""""""""""""""""""""""""""""""""""""""""""""""""""""""" """ :::::: :: :: :: :: :: :::: """ """ :: :: :: :: :::::: .. :::: :: """ """ ::::: ::: ::::: :: :: :: :: :: :::: """ """ :: :: :: :: : :: :: :: :: :: :: """ """ :::::: :: :: ::::: :: :::::: :: :: :::: rs.ir """ """ :: """ """ """...

CVE-2008-7168

Insecure method vulnerability in the UUSee UUUpgrade ActiveX control UUUpgrade.ocx 3.0.2.12 allows remote attackers to force the download and overwrite of arbitrary files via crafted arguments to the Update method, as exploited in the wild in June 2009...

Security feature bypass

Insecure method vulnerability in ChilkatMailv79.dll in the Chilkat Software IMAP ActiveX control ChilkatMail2.ChilkatMailMan2.1 allows remote attackers to execute arbitrary programs via the LoadXmlEmail method...

Security feature bypass

Insecure method vulnerability in the Acer LunchApp aka AcerCtrls.APlunch ActiveX control in acerctrl.ocx allows remote attackers to execute arbitrary commands via the Run method, a different vulnerability than CVE-2006-6121...

CVE-2008-6959

CVE-2008-6959 affects the ChilkatSocket.dll 2.3.1.1 Chilkat Socket ActiveX control (ChilkatSocket.ChilkatSocket.1). The vulnerability is an insecure SaveLastError method that allows remote attackers to overwrite arbitrary files. A CIRCL/Exploit-DB entry (Exploit-DB 7142) confirms at least one wor...

COMRaider Insecure Method

!/usr/bin/perl COMRaider Idefense Labs CreateFolder and Copy Insecure Method Hard Disk Filler Exploit Discovered and Exploited by : Khashayar Fereidani Http://IRCRASH.com & Http://Fereidani.ir  Help : perl comraider.pl Please enter the foldername C:\ircrash\ for example : C:\ircrash\ Please ente...

Security feature bypass

Insecure method vulnerability in Awingsoft Awakening Winds3D Viewer plugin 3.5.0.0, 3.0.0.5, and possibly other versions allows remote attackers to force the download and execution of arbitrary files via the GetURL method...

CVE-2009-2386

Insecure method vulnerability in Awingsoft Awakening Winds3D Viewer plugin 3.5.0.0, 3.0.0.5, and possibly other versions allows remote attackers to force the download and execution of arbitrary files via the GetURL method...

Edraw PDF Viewer ActiveX Control Insecure Method Vulnerability

This host is installed with Edraw PDF Viewer ActiveX Control and is prone to Insecure Method vulnerability. OpenVAS Vulnerability Test $Id: secpodedrawpdfvieweractvxctrlvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ Edraw PDF Viewer ActiveX Control Insecure Method Vulnerability Authors: Sharath S...

Edraw PDF Viewer ActiveX Control Insecure Method Vulnerability

Edraw PDF Viewer ActiveX Control is prone to Insecure Method vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-2169

CVE-2009-2169: In Edraw PDF Viewer Component, the PDFVIEWER.PDFViewerCtrl.1 ActiveX control (pdfviewer.ocx) before 3.2.0.126 contains an insecure method vulnerability. An attacker can remotely create and overwrite arbitrary files by passing a URL argument to FtpConnect and a target filename to Ft...

CVE-2009-2169

Insecure method vulnerability in the PDFVIEWER.PDFViewerCtrl.1 ActiveX control pdfviewer.ocx in Edraw PDF Viewer Component before 3.2.0.126 allows remote attackers to create and overwrite arbitrary files via a URL argument to the FtpConnect argument and a target filename argument to the...

iDefense COMRaider - ActiveX Control Multiple Insecure Method Vulnerabilities

iDefense COMRaider - ActiveX Control Multiple Insecure Method Vulnerabilities source: https://www.securityfocus.com/bid/35725/info The iDefense COMRaider ActiveX control is prone to multiple insecure-method vulnerabilities. Successfully exploiting these issues allows remote attackers to create...

iDefense COMRaider - ActiveX Control Multiple Insecure Method Vulnerabilities

source: https://www.securityfocus.com/bid/35725/info The iDefense COMRaider ActiveX control is prone to multiple insecure-method vulnerabilities. Successfully exploiting these issues allows remote attackers to create arbitrary directories and copy arbitrary local files. This may lead to a...

Secunia Research: SAP GUI KWEdit ActiveX Control "SaveDocumentAs()" Insecure Method

====================================================================== Secunia Research 15/04/2009 - SAP GUI KWEdit ActiveX Control "SaveDocumentAs" Insecure Method - ====================================================================== Table of Contents Affected...

Versalsoft HTTP Image Uploader ActiveX Vulnerability

This host is installed with Versalsoft HTTP Image Uploader and is prone to ActiveX vulnerability. OpenVAS Vulnerability Test $Id: gbversalsofthttpimageupldractvxvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ Versalsoft HTTP Image Uploader ActiveX Vulnerability Authors: Nikita MR Copyright: Copyright c...

CVE-2008-4830

Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 KWEDIT.DLL 6400.1.1.41 and 7.10 Patch 5 KWEDIT.DLL 7100.1.1.43 allows remote attackers to 1 overwrite arbitrary files via the SaveDocumentAs method or 2 read or execute arbitrary files via the OpenDocument method...

SAP GUI KWEdit ActiveX Control SaveDocumentAs() Insecure Method

The version of the KWEdit ActiveX control on the remote host is reportedly affected by a remote code execution vulnerability. The control provides the insecure method 'SaveDocumentAs', which saves an HTML document to a specified location. This can be exploited in combination with e.g. the...

CVE-2009-0218

CVE-2009-0218 involves Particle Software’s IntraLaunch ActiveX control (IntraLaunch.ocx) used by LDRA TBbrowse. The ActiveX control is not restricted to any domain/zone and is marked Safe for Scripting, enabling web pages to trigger arbitrary code execution on affected systems. Exploitation could...

CVE-2009-0218

Insecure method vulnerability in Particle Software IntraLaunch Application Launcher ActiveX control in IntraLaunch.ocx, as used in LDRA TBbrowse and possibly other products, allows remote attackers to execute arbitrary code via unknown vectors...