fkie_cve-2011-0331

Use-after-free vulnerability in the addOSPLext method in the Honeywell ScanServer ActiveX control 780.0.20.5 allows remote attackers to execute arbitrary code via a crafted HTML document.

GHSA-q73v-rr94-8cgh

Use-after-free vulnerability in the addOSPLext method in the Honeywell ScanServer ActiveX control 780.0.20.5 allows remote attackers to execute arbitrary code via a crafted HTML document.

VAR-201103-0157

Use-after-free vulnerability in the addOSPLext method in the Honeywell ScanServer ActiveX control 780.0.20.5 allows remote attackers to execute arbitrary code via a crafted HTML document. When processing the \"addOSPLext()\" method, there is a post-release error. The Honeywell ScanServer ActiveX control is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user to view a malicious webpage. Honeywell ScanServer ActiveX control 780.0.20.5 is vulnerable; other versions may also be affected. ----------------------------------------------------------------------

Meet Secunia @ Microsoft Management Summit (MMS) in Las Vegas, USA (21-25 March).

http://secunia.com/company/events/mms_2011/

----------------------------------------------------------------------

TITLE: Honeywell ScanServer ActiveX Control Use-After-Free Vulnerability

SECUNIA ADVISORY ID: SA43360

VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/43360/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=43360

RELEASE DATE: 2011-03-22

DISCUSS ADVISORY: http://secunia.com/advisories/43360/#comments

AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s)

http://secunia.com/advisories/43360/

ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Se…

Most recent entries from all

fkie_cve-2011-0331

GHSA-q73v-rr94-8cgh

gsd-2011-0331

VAR-201103-0157