A stack-based buffer overflow vulnerabilities was disclosed in an ActiveX control required by the ICONICS WebHMI interface.

A stack buffer overflow vulnerability was disclosed in Creative Software AutoUpdate Engine. When sending an overly long string to the cachefolder() property of CTSUEng.ocx an attacker may be able to execute arbitrary code.

The vulnerability is due to NULL pointer errors in the IMAP service when omitting the arguments of the "SEARCH" and "APPEND" commands. Remote attackers could exploit this vulnerability by omission of the required arguments for the "SEARCH" and "APPEND" commands. Successful exploitation would result in a denial of service condition.

A buffer overflow vulnerability exists in HP Database Archiving Software. Specifically, the application uses a user-supplied value to control a copy operation when processing GIOP packets.

Threat Encyclopedia

1139051

ICS WEB-ACTIVEX ICONICS WebHMI ActiveX Buffer Overflow -2 (CVE-2011-2089)

High

2022/09/20

1054991

WEB-ACTIVEX Creative Software AutoUpdate Engine ActiveX Control Buffer Overflow (CVE-2008-0955)

High

2022/09/20

1056520

IMAP Service Multiple Commands Buffer Overflow -2a (CVE-2008-1276)

High

2022/09/20

1056284

DB HP Database Archiving Software GIOP Parsing Buffer Overflow (CVE-2011-4164)

High

2022/09/20