CVE-2015-7918

Multiple buffer overflows in the F1BookView ActiveX control in F1 Bookview in Schneider Electric ProClima before 6.2 allow remote attackers to execute arbitrary code via the (1) Attach, (2) DefinedName, (3) DefinedNameLocal, (4) ODBCPrepareEx, (5) ObjCreatePolygon, (6) SetTabbedTextEx, or (7) SetValidationRule method, a different vulnerability than CVE-2015-8561.

• CWE-119

• http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-329-01Vendor Advisory
• http://www.zerodayinitiative.com/advisories/ZDI-15-625
• http://www.zerodayinitiative.com/advisories/ZDI-15-630
• http://www.zerodayinitiative.com/advisories/ZDI-15-631
• http://www.zerodayinitiative.com/advisories/ZDI-15-632
• http://www.zerodayinitiative.com/advisories/ZDI-15-633
• http://www.zerodayinitiative.com/advisories/ZDI-15-634
• http://www.zerodayinitiative.com/advisories/ZDI-15-635
• https://ics-cert.us-cert.gov/advisories/ICSA-15-335-02Third Party Advisory, US Government Resource
• http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-329-01Vendor Advisory
• http://www.zerodayinitiative.com/advisories/ZDI-15-625
• http://www.zerodayinitiative.com/advisories/ZDI-15-630
• http://www.zerodayinitiative.com/advisories/ZDI-15-631
• http://www.zerodayinitiative.com/advisories/ZDI-15-632
• http://www.zerodayinitiative.com/advisories/ZDI-15-633
• http://www.zerodayinitiative.com/advisories/ZDI-15-634
• http://www.zerodayinitiative.com/advisories/ZDI-15-635
• https://ics-cert.us-cert.gov/advisories/ICSA-15-335-02Third Party Advisory, US Government Resource

Published

Dec 15, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-7912The Ice Faces servlet in ag_server_service.exe in the AggreG…
• CVE-2015-7913ag_server_service.exe in the AggreGate Server Service in Tib…
• CVE-2015-7914Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remot…
• CVE-2015-7915Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 sends cleart…
• CVE-2015-7916Cross-site scripting (XSS) vulnerability in Sauter EY-WS505F…6.5
• CVE-2015-7917Untrusted search path vulnerability in Open Automation OPC S…
• CVE-2015-7919SearchBlox 8.3 before 8.3.1 allows remote attackers to write…
• CVE-2015-7920Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2015-7921The FTP server in Pro-face GP-Pro EX EX-ED before 4.05.000, …9.1
• CVE-2015-7922Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2015-7923Westermo WeOS before 4.19.0 uses the same SSL private key ac…
• CVE-2015-7924eWON devices with firmware before 10.1s0 do not trigger the …