Microsoft Windows iSNS Server Memory Corruption (MS17-012: CVE-2017-0104)

A memory corruption vulnerability exist in Windows iSNS Server. The vulnerability is due to incorrect input validation of malformed attribute in iSNS packet. A remote attacker can exploit this vulnerability to execute arbitrary code on the server...

CVE-2017-0104

CVE-2017-0104 is a memory corruption vulnerability in the Windows iSNS Server service. The issue arises from incorrect input validation of malformed attributes in iSNS packets, allowing an unauthenticated, remote attacker to issue crafted requests and execute arbitrary code in the context of the ...

Virtuozzo Linux Errata and Bugfix Advisory 2017:0104

Upstream security update. Follow RHBA-2017-0104 for details...

CVE-2016-0104

CVE-2016-0104 affects Microsoft Internet Explorer 10. It is a remote memory-corruption vulnerability triggered by visiting a crafted webpage, caused by improper memory object handling that can lead to arbitrary code execution or memory corruption. Public exploits exist for this vulnerability (as ...

Microsoft Internet Explorer Memory Corruption (MS16-023: CVE-2016-0104)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...

CVE-2007-0104

The Adobe PDF specification 1.3, as implemented by a xpdf 3.0.1 patch 2, b kpdf in KDE before 3.5.5, c poppler before 0.5.4, and other products, allows remote attackers to have an unknown impact, possibly including denial of service infinite loop, arbitrary code execution, or memory corruption, v...

CVE-2015-0109

Cross-site scripting XSS vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.8, and Maximo Asset Management 7.1 through 7.1.1.8 and 7.2 for Tivoli IT Asset Management for IT and certain other products, allows remote authenticated users to inject arbitrary web script or HTML via...

IBM Tivoli Service Automation Manager 7.2.4 - Remote Code Execution Vulnerability

Exploit for jsp platform in category web applications Exploit Title: IBM Tivoli Service Automation Manager Remote Code Execution Date: 12\12\2014 Exploit Author: Jakub Palaczynski Vendor Homepage: http://www.ibm.com/ Version: All versions of IBM Tivoli Service Automation Manager up to 7.2.4 VU/CV...

RHEL 5 : libxml2 (RHSA-2012:0104)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0104 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. A heap-based buffer overflow flaw was found in th...

Oracle GlassFish Server Multiple Unspecified Vulnerabilities

The host is running GlassFish Server and is prone to multiple unspecified vulnerabilities. OpenVAS Vulnerability Test $Id: gboracleglassfishservermultunspecifiedvuln.nasl 5999 2017-04-21 09:02:32Z teissa $ Oracle GlassFish Server Multiple Unspecified Vulnerabilities Authors: Antu Sanadi Copyright...

CVE-2012-0104

Removed by vendor...

CVE-2011-0104

CVE-2011-0104 affects Microsoft Excel 2002 SP3, Excel 2003 SP3, Office 2004/2008 for Mac, and Open XML File Format Converter for Mac. A crafted HLink record in an Excel file can trigger memory corruption, allowing remote code execution or causing a denial of service. Exploitation details or in‑th...

MS11-021: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2489279)

The remote Windows host is running a version of Microsoft Excel or Excel Viewer that is affected by several vulnerabilities. If an attacker can trick a user on the affected host into opening a specially crafted Excel file, they could leverage this issue to execute arbitrary code subject to the...

MS11-021 / MS11-022 / MS11-023: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2489279 / 2489283 / 2489293) (Mac OS X)

The remote Mac OS X host is running a version of Microsoft Office that is affected by several vulnerabilities. If an attacker can trick a user on the affected host into opening a specially crafted Office file, these issues could be leveraged to execute arbitrary code subject to the user's...

Microsoft Excel Crafted URL Unicode Buffer Overflow (MS06-050; CVE-2006-3086; CVE-2011-0104)

Microsoft Excel is a popular spreadsheet application. The application can create complex spreadsheets with multiple workbooks, formulas, and various data sources. The common extension used for Microsoft Excel documents is .xls. A buffer overflow vulnerability has been reported in Microsoft Excel...

Check Point response to "Jedi Packet Trick" (CVE-2010-0104)

...

CVE-2010-0104

The CVE affects Broadcom NetXtreme/Integrated NIC Management Firmware on HP Small Form Factor and Microtower PCs. Vulnerable firmware versions are Broadcom Broadcom Integrated NIC Management Firmware before 1.40.0.0 and before 8.08 (i.e., 1.x pre-1.40.0.0 and 8.x pre-8.08). The issue allows remot...

LANDesk command injection

Advisory ID Internal CORE-2010-0104 1. Advisory Information Title: LANDesk command injection Advisory Id: CORE-2010-0104 Date published: 2010-02-04 Date of last update: 2010-02-04 Vendors contacted: LANDesk Team Release mode: Coordinated release 2. Vulnerability Information Class: Cross site...

Metamail Format String And Buffer Overflow (CVE-2004-0104)

Metamail is a system for handling multimedia mail, using the mailcapfile. Metamail reads the mailcap file, which tells Metamail what helper program to call in order to handle a particular type of non-text mail. There exist multiple vulnerabilities in MetaMail that may provide for arbitrary code...

SLES9: Security update for cups

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: cups-devel cups-client cups-libs cups For more information, please visit the referenced security advisories. More details may also be found by searching for...