1932 matches found
CVE-2008-0953
The StartApp function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary programs via a .exe filename in the argument, a different vulnerability than CVE-2007-5608 and CVE-2008-0953...
CVE-2007-5607
CVE-2007-5607 is a buffer overflow in the HPISDataManager.dll HP Instant Support ActiveX control (RegistryString function) that could allow a remote attacker to execute arbitrary code via a long first argument. Connected documents corroborate that this family of HP ActiveX vulnerabilities centers...
CVE-2008-0952
The AppendStringToFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to create files with arbitrary content via a full pathname in the first argument and the content in the second argument, a differe...
CVE-2007-5606
HP Instant Support’s HPISDataManager.dll ActiveX control contains MoveFile() in the HPISDataManager, a buffer overflow that can be exploited by a remote attacker to execute arbitrary code. Public details indicate exploitation requires convincing a user to visit a malicious page to trigger the vul...
HP Instant Support 1.0.22 - HPISDataManager.dll RegistryString Buffer Overflow
HP Instant Support 1.0.22 - HPISDataManager.dll RegistryString Buffer Overflow source: https://www.securityfocus.com/bid/29534/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on...
HP Instant Support 1.0.22 - 'HPISDataManager.dll RegistryString' Buffer Overflow
source: https://www.securityfocus.com/bid/29534/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. An attacker can exploit this issue to execute arbitrary cod...
HP Instant Support 1.0.22 - HPISDataManager.dll ActiveX Control Arbitrary File Delete
HP Instant Support 1.0.22 - HPISDataManager.dll ActiveX Control Arbitrary File Delete source: https://www.securityfocus.com/bid/29536/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to a vulnerability that lets attackers delete arbitrary files on the affected computer in th...
HP Instant Support 1.0.22 - HPISDataManager.dll ExtractCab ActiveX Control Buffer Overflow
HP Instant Support 1.0.22 - HPISDataManager.dll ExtractCab ActiveX Control Buffer Overflow source: https://www.securityfocus.com/bid/29529/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary...
HP Instant Support 1.0.22 - 'HPISDataManager.dll' ActiveX Control Arbitrary File Delete
source: https://www.securityfocus.com/bid/29536/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to a vulnerability that lets attackers delete arbitrary files on the affected computer in the context of the application using the ActiveX control. Successful attacks can result ...
HP Instant Support 1.0.22 - HPISDataManager.dll ActiveX Control Arbitrary File Creation
HP Instant Support 1.0.22 - HPISDataManager.dll ActiveX Control Arbitrary File Creation source: https://www.securityfocus.com/bid/29535/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to a vulnerability that lets attackers create and overwrite files with arbitrary,...
HP Instant Support 1.0.22 - HPISDataManager.dll StartApp ActiveX Control Insecure Method
HP Instant Support 1.0.22 - HPISDataManager.dll StartApp ActiveX Control Insecure Method source: https://www.securityfocus.com/bid/29533/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to an insecure-method vulnerability. Successfully exploiting this issue allows remote...
HP Instant Support 1.0.22 - 'HPISDataManager.dll' ActiveX Control Arbitrary File Creation
source: https://www.securityfocus.com/bid/29535/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to a vulnerability that lets attackers create and overwrite files with arbitrary, attacker-controlled content. Successful exploits may compromise affected computers and aid in...
HP Instant Support 1.0.22 - 'HPISDataManager.dll ExtractCab' ActiveX Control Buffer Overflow
source: https://www.securityfocus.com/bid/29529/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. An attacker can exploit this issue to execute arbitrary cod...
HP Instant Support 1.0.22 - 'HPISDataManager.dll StartApp' ActiveX Control Insecure Method
source: https://www.securityfocus.com/bid/29533/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to an insecure-method vulnerability. Successfully exploiting this issue allows remote attackers to launch arbitrary applications with the privileges of the application running th...
IBM Lotus Sametime Community Services Multiplexer buffer overflow
Added: 05/30/2008 CVE: CVE-2008-2499 BID: 29328 OSVDB: 45610 Background IBM Lotus Sametime is enterprise instant messaging and web conferencing software. Problem A buffer overflow vulnerability in the Community Services Multiplexer allows remote attackers to execute arbitrary commands by requesti...
FileMaker cross-site scripting vulnerability
Overview FileMaker from FileMaker, Inc. contains a cross-site scripting vulnerability. FileMaker is database software from FileMaker, Inc. FileMaker contains a cross-site scripting vulnerability in its "Instant Web Publishing" function that enables users to publish database contents on the web...
HP OpenView Network Node Manager (OV NNM) 7.5.1 - 'OVAS.exe' Overflow (SEH)
!/usr/bin/python HP OpenView NNM 7.5.1 OVAS.EXE Pre Authentication SEH Overflow Tested on Windows 2003 Server SP1. Coded by Mati Aharoni muts..at..offensive-security.com http://www.offensive-security.com/0day/hp-nnm-ov.py.txt shameless plug This vulnerability was found, analysed and exploited as...
CVE-2008-1337
CVE-2008-1337 affects Timbuktu Pro 8.6.5 RC 229 for Windows, where the instant message service is vulnerable to remote DoS. An attacker can trigger a daemon crash by sending an invalid Version field, or cause CPU exhaustion and daemon termination via an invalid or partial message. The issue is do...
Design/Logic Flaw
Ipswitch Instant Messaging IM 2.0.8.1 and earlier allows remote attackers to cause a denial of service NULL dereference and application crash via a version field containing zero...
