NTR ActiveX Control StopModule() Remote Code Execution (CVE-2012-0267)

A remote code execution vulnerability has been reported in the NTR ActiveX 1.1.8...

Secunia Research: NTR ActiveX Control "StopModule()" Input Validation Vulnerability

====================================================================== Secunia Research 11/01/2012 - NTR ActiveX Control "StopModule" Input Validation Vulnerability - ====================================================================== Table of Contents Affected...

PT-2012-2449

Name of the Vulnerable Software and Affected Versions NTR ActiveX control versions prior to 2.0.4.8 Description The issue allows remote attackers to execute arbitrary code via a crafted lModule parameter that triggers use of an arbitrary memory address as a function pointer. This occurs in the...

CVE-2012-0267: Improper Input Validation

The StopModule method in the NTR ActiveX control before 2.0.4.8 allows remote attackers to execute arbitrary code via a crafted lModule parameter that triggers use of an arbitrary memory address as a function pointer...