Microsoft Office Visio Viewer Remote Code Execution Vulnerabilities (2663510)

This host is missing an important security update according to Microsoft Bulletin MS12-015. OpenVAS Vulnerability Test $Id: secpodms12-015.nasl 6538 2017-07-05 11:38:27Z cfischer $ Microsoft Office Visio Viewer Remote Code Execution Vulnerabilities 2663510 Authors: Antu Sanadi Copyright: Copyrigh...

Memory corruption

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019...

Memory corruption

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019...

CVE-2012-0138

CVE-2012-0138 affects Microsoft Visio Viewer 2010 Gold and SP1. The vulnerability arises from improper memory handling while parsing Visio files, allowing remote code execution via crafted attributes in a VSD file. Microsoft issued MS12-015 to address these Visio parsing memory corruption flaws (...

Microsoft Visio Viewer VSD File Format CVE-2012-0138 Remote Code Execution Vulnerability

Description Microsoft Visio Viewer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected...

MS12-015: Vulnerabilities in Microsoft Visio Viewer 2010 Could Allow Remote Code Execution (2663510)

The version of Microsoft Visio Viewer installed on the remote Windows host is reportedly affected by several memory corruption vulnerabilities due to the way the application handles memory when parsing specially crafted Visio files. An attacker who tricked a user on the affected host into opening...

Microsoft Visio Viewer File Format Code Execution (MS12-015; CVE-2012-0138)

A remote code execution vulnerability has been reported in Microsoft Visio Viewer...

Apple Safari Multiple Vulnerabilities (Mar 2011) - Mac OS X

Apple Safari web browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...

Safari < 5.0.4 Multiple Vulnerabilities

The version of Safari installed on the remote Windows host is earlier than 5.0.4. It therefore is potentially affected by several issues in the following components : - ImageIO - libxml - WebKit C Tenable Network Security, Inc. include"compat.inc"; if description scriptid52613; scriptversion"1.18...

CVE-2011-0138

The CVE-2011-0138 entry concerns WebKit usage in Apple iTunes for Windows prior to version 10.2. The underlying issue, as described in the available documents, is a memory corruption vulnerability in WebKit triggered via iTunes Store browsing vectors, which could allow an attacker to execute arbi...

Apple iTunes < 10.2 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is older than 10.2. As such, it is affected by numerous issues in the following components : - ImageIO - libxml - WebKit C Tenable Network Security, Inc. include"compat.inc"; if description scriptid52534; scriptversion"1.21";...

CVE-2010-0138

CiscoWorks Internetwork Performance Monitor (IPM) for Windows, version 2.6 and earlier (bundled with CiscoWorks LMS), contains a buffer overflow in CORBA GIOP request handling (getProcessName). The flaw can be triggered remotely by a crafted GIOP request, enabling arbitrary code execution with SY...

Cisco Security Advisory: CiscoWorks Internetwork Performance Monitor CORBA GIOP Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: CiscoWorks Internetwork Performance Monitor CORBA GIOP Overflow Vulnerability Advisory ID: cisco-sa-20100120-ipm Revision 1.0 For Public Release 2010 January 20 1600 UTC GMT...

CVE-2009-0138

CVE-2009-0138 affects Apple Mac OS X 10.5.6 where servermgrd (Server Manager) fails to validate authentication credentials, enabling remote attackers to modify system configuration. The issue is documented in NVD and reflected in OpenVAS MAC OS X Security Update 2009-001, which covers servermgrd ...

Apple Mac OS X 2009-001更新修复多个安全漏洞

BUGTRAQ ID: 33759 CVECAN ID: CVE-2009-0009,CVE-2009-0020,CVE-2009-0142,CVE-2009-0011,CVE-2009-0012,CVE-2009-0013,CVE-2009-0014,CVE-2009-0015,CVE-2009-0017,CVE-2009-0018,CVE-2009-0019,CVE-2009-0137,CVE-2009-0138,CVE-2009-0139,CVE-2009-0140,CVE-2009-0141 Mac OS X是苹果家族机器所使用的操作系统。 Apple...

Debian Security Advisory DSA 269-2 (heimdal)

The remote host is missing an update to heimdal announced via advisory DSA 269-2. OpenVAS Vulnerability Test $Id: deb2692.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 269-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1082-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-0138

Summary : CVE-2008-0138 concerns the XoopsGallery mod_gallery module for XOOPS, specifically the init_basic.php script. When register_globals is disabled, the GALLERY_BASEDIR parameter can be controlled by a remote attacker to cause a remote file inclusion, allowing execution of arbitrary PHP cod...

CVE-2008-0138

PHP remote file inclusion vulnerability in xoopsgallery/initbasic.php in the modgallery module for XOOPS, when registerglobals is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the GALLERYBASEDIR parameter...

CVE-2007-0138

The CVE-2007-0138 entry concerns Fersch Formbankserver 1.9. The vulnerability arises when PATH_INFO begins with AbfrageForm or EingabeForm, allowing remote attackers to trigger a denial of service (daemon crash) by sending multiple requests containing many /../ sequences in the Name parameter. Th...