SAP GUI KWEdit ActiveX Control SaveDocumentAs() Insecure Method

The version of the KWEdit ActiveX control on the remote host is reportedly affected by a remote code execution vulnerability. The control provides the insecure method 'SaveDocumentAs', which saves an HTML document to a specified location. This can be exploited in combination with e.g. the...

CVE-2009-0218

CVE-2009-0218 involves Particle Software’s IntraLaunch ActiveX control (IntraLaunch.ocx) used by LDRA TBbrowse. The ActiveX control is not restricted to any domain/zone and is marked Safe for Scripting, enabling web pages to trigger arbitrary code execution on affected systems. Exploitation could...

CVE-2009-0218

Insecure method vulnerability in Particle Software IntraLaunch Application Launcher ActiveX control in IntraLaunch.ocx, as used in LDRA TBbrowse and possibly other products, allows remote attackers to execute arbitrary code via unknown vectors...

Security feature bypass

Insecure method vulnerability in the Versalsoft HTTP Image Uploader ActiveX control UUploaderSvrD.dll 6.0.0.35 allows remote attackers to delete arbitrary files via the RemoveFileOrDir method...

CVE-2008-6638

The CVE-2008-6638 entry concerns the Versalsoft HTTP Image Uploader ActiveX control. The affected component is UUploaderSvrD.dll version 6.0.0.35, and the vulnerability arises from an insecure method that allows an attacker to delete arbitrary files via the RemoveFileOrDir function. This is a cli...

CVE-2008-6638: Undefined Security Weakness

Insecure method vulnerability in the Versalsoft HTTP Image Uploader ActiveX control UUploaderSvrD.dll 6.0.0.35 allows remote attackers to delete arbitrary files via the RemoveFileOrDir method...

CVE-2009-1212

PrecisionID Data Matrix ActiveX control (DMATRIXLib.Datamatrix) contains insecure input validation in SaveBarCode and SaveEnhWMF, enabling remote arbitrary file writes. Affected component: PRECIS~2.DLL within PrecisionID Data Matrix ActiveX. Impact: potential overwrite of arbitrary files on the h...

Security feature bypass

Insecure method vulnerability in the VSPDFEditorX.VSPDFEdit ActiveX control in VSPDFEditorX.ocx 1.0.200.0 in VISAGESOFT eXPert PDF EditorX allows remote attackers to create or overwrite arbitrary files via the first argument to the extractPagesToFile method...

Morovia Barcode ActiveX 3.6.2 (MrvBarCd.dll) Insecure Method Exploit

No description provided by source. HTML Morovia Barcode ActiveX Control 3.6.2 MrvBarCd.dll Insecure Method Exploitbr br Description There is Insecure Method in Save fonctionbr Download Product : http://download.morovia.com/demo/MrvBarCdDemoV3.4.0.0.msibr Found By : Cyber-Zonebr Tested Under : sp2...

Morovia Barcode ActiveX 3.6.2 (MrvBarCd.dll) Insecure Method Exploit

Exploit for unknown platform in category remote exploits ==================================================================== Morovia Barcode ActiveX 3.6.2 MrvBarCd.dll Insecure Method Exploit ==================================================================== Morovia Barcode ActiveX Control 3.6...

Morovia Barcode Insecure Method

Morovia Barcode ActiveX Control 3.0 MrvBarCd.dll Insecure Method Exploit Description There is Insecure Method in Save fonction Download Product : http://download.morovia.com/demo/MrvBarCdDemoV3.4.0.0.msi Found By : Cyber-Zone Tested Under : sp2 fr E-mail : [email protected] Home :...

Morovia Barcode ActiveX 3.6.2 - 'MrvBarCd.dll' Insecure Method

Morovia Barcode ActiveX Control 3.6.2 MrvBarCd.dll Insecure Method Exploit Description There is Insecure Method in Save fonction Download Product : http://download.morovia.com/demo/MrvBarCdDemoV3.4.0.0.msi Found By : Cyber-Zone Tested Under : sp2 fr E-mail : [email protected] Home :...

Morovia Barcode ActiveX 3.6.2 - MrvBarCd.dll Insecure Method

Morovia Barcode ActiveX 3.6.2 - MrvBarCd.dll Insecure Method Morovia Barcode ActiveX Control 3.6.2 MrvBarCd.dll Insecure Method Exploit Description There is Insecure Method in Save fonction Download Product : http://download.morovia.com/demo/MrvBarCdDemoV3.4.0.0.msi Found By : Cyber-Zone Tested...

CVE-2008-6442

Insecure method vulnerability in Sina Inc. DLoader Class ActiveX Control allows remote attackers to overwrite arbitrary files via a URL in the first parameter to the DonwloadAndInstall method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Design/Logic Flaw

Insecure method vulnerability in the ImeraIEPlugin ActiveX control ImeraIEPlugin.dll 1.0.2.54 in Imera TeamLinks Client allows remote attackers to force the download and execution of arbitrary URLs via modified DownloadProtocol, DownloadHost, DownloadPort, and DownloadURI parameters...

CVE-2009-0813

Insecure method vulnerability in the ImeraIEPlugin ActiveX control ImeraIEPlugin.dll 1.0.2.54 in Imera TeamLinks Client allows remote attackers to force the download and execution of arbitrary URLs via modified DownloadProtocol, DownloadHost, DownloadPort, and DownloadURI parameters...

CVE-2009-0811

Insecure method vulnerability in the SopCast SopCore ActiveX control in sopocx.ocx 3.0.3.501 allows remote attackers to execute arbitrary programs via an executable file name in the argument to the SetExternalPlayer method...

CVE-2009-0811

CVE-2009-0811 describes an insecure method vulnerability in the SopCast SopCore ActiveX control (sopocx.ocx 3.0.3.501). The vulnerability allows remote attackers to cause arbitrary code execution by supplying an executable file name to the SetExternalPlayer method. Affected product: SopCast SopCo...

CVE-2009-0811

Insecure method vulnerability in the SopCast SopCore ActiveX control in sopocx.ocx 3.0.3.501 allows remote attackers to execute arbitrary programs via an executable file name in the argument to the SetExternalPlayer method...

CVE-2009-0389

Multiple insecure method vulnerabilities in the Web On Windows WOW ActiveX control in WOW ActiveX 2 allow remote attackers to 1 create and overwrite arbitrary files via the WriteIniFileString method, 2 execute arbitrary programs via the ShellExecute method, 3 read from the registry via unspecifie...