Facebook Photo Uploader ActiveX Control FileMask Method Buffer Overflow - Ver2 (CVE-2008-0660)

Facebook is a social networking website which allows its users to publish their photos. The website publishes an ActiveX control, ImageUploader4.ocx, to assist photo uploading. A buffer overflow vulnerability exists in the Facebook Photo Uploader ActiveX control. The flaw is due to a boundary err...

CVE-2014-9188

Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8513 and CVE-2014-8514. NOTE: this may be clarified later based on details provided b...

CVE-2014-8514

Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8513 and CVE-2014-9188. NOTE: this may be clarified later based on details provided b...

Buffer overflow

Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8514 and CVE-2014-9188. NOTE: this may be clarified later based on details provided b...

CVE-2014-8514

Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8513 and CVE-2014-9188. NOTE: this may be clarified later based on details provided b...

CVE-2014-8513

Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8514 and CVE-2014-9188. NOTE: this may be clarified later based on details provided b...

CVE-2014-9188 Schneider Electric ProClima Command Injection

Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8513 and CVE-2014-8514. NOTE: this may be clarified later based on details provided b...

CVE-2014-8513

CVE-2014-8513 affects Schneider Electric ProClima (ActiveX control MDraw30.ocx) with a buffer overflow vulnerability in ProClima before 6.1.7 that allows remote code execution via unspecified vectors. The issue is distinct from CVE-2014-8514 and CVE-2014-9188. Remediation guidance in the sources ...

CVE-2014-8511

The CVE-2014-8511 issue affects Schneider Electric ProClima before 6.1.7, specifically the Atx45.ocx ActiveX control. A heap/buffer overflow within Atx45.ocx (documented variants reference SetHtmlFileName/SetBodyAttribute paths) can allow remote attackers to execute arbitrary code. This is report...

A EXCEL the vulnerabilities the sample shellcode analysis-vulnerability warning-the black bar safety net

0x00 causes Recently I got a EXCEL samples, allegedly an over-all anti-virus of 0day, after the analysis after a let me disappointed, this is a 2 0 1 2-year old vulnerability, not 0day the. Although not picked to the 0day, but this sample of shellcode is still quite distinctive, it is indeed...

Hewlett-Packard Sprinter TTF16.ocx DefaultFontName Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Sprinter. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability is found in Tidestone Formula One...

Hewlett-Packard Sprinter TTF16.ocx AttachToSS Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Sprinter. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability is found in Tidestone Formula One...

Hewlett-Packard Sprinter TTF16.ocx CopyRange/CopyRangeEx Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Sprinter. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability is found in Tidestone Formula One...

Microsoft Windows Media Player 7 Embedded OCX Control Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1714/info Due to a flaw in the method Microsoft Windows Media Player 7 handles OCX controls ActiveX containers in embedded in RTF email messages, it is possible to crash RTF-enabled email clients such as Microsoft Outlook...

Excel Viewer OCX 3.1.0.6 - Multiple Methods Denial of Service Exploit

No description provided by source. span style=font: 14pt Courier New;p align=centerb2007/05/02/b/p/span pre codespan style=font: 10pt Courier New;span class=general1-symbol----------------------------------------------------------------------------- bExcelViewer.ocx v. 3.1.0.6 multiple methods...

Office Viewer OCX 3.2.0.5 - Multiple Methods Denial of Service Exploit

No description provided by source. span style=font: 14pt Courier New;p align=centerb2007/05/04/b/p/span pre codespan style=font: 10pt Courier New;span class=general1-symbol----------------------------------------------------------------------------- bOffice Viewer OA.ocx v. 3.2.0.5 multiple metho...

Data Dynamics ActiveBar ActiveX (actbar3.ocx <= 3.1) Insecure Methods

No description provided by source. pre codespan style=font: 10pt Courier New;span class=general1-symbol--------------------------------------------------------------------------------------- bData Dynamics ActiveBar ActiveX Control actbar3.ocx = 3.1 Multiple Inscure Methods/b url:...

Word Viewer OCX 3.2 - Remote File Execution exploit

No description provided by source. HTML ---------------------------------------------------------- br Word viewer OCX V 3.2 Remote File execution exploitbr ---------------------------------------------------------- br -----------------------------------br By Mountassif Moad a.k.a Stack...

Oracle Document Capture Actbar2.ocx Insecure Method

No description provided by source. Source: http://packetstormsecurity.org/files/view/97866/DSECRG-11-004.txt ActiveX components contain insecure methods. Digital Security Research Group DSecRG Advisory DSECRG-00153 Application: Oracle Document Capture Versions Affected: Release 10gR3 Vendor URL:...

CCRP Folder Treeview Control (ccrpftv6.ocx) - IE Denial of Service Exploit

No description provided by source. !-- ------------------------------------------------------------------------------- CCRP Folder Treeview Control ccrpftv6.ocx Internet Explorer Denial of Service author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org Tested on Windows...