141 matches found
CVE-2009-0200
Integer underflow in OpenOffice.org OOo before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via crafted records in the document table of a Word document, leading to a heap-based buffer overflow...
CVE-2009-0200
CVE-2009-0200 affects OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, 9, where an integer underflow in parsing Word document records can cause a heap-based buffer overflow and allow remote code execution. The issue arises from how certain records in Word documents are parsed, per...
OpenOffice Word文档表格解析整数溢出和堆溢出漏洞
BUGTRAQ ID: 36186 CVECAN ID: CVE-2009-0200,CVE-2009-0201 OpenOffice是个整合性的软件，包含了许多文字处理、表格、公式等办公工具。 OpenOffice在解析Word文档表格中的某些记录时存在堆溢出和整数下溢漏洞，用户受骗打开畸形的文档就可能触发这些溢出，导致执行任意指令。 OpenOffice 3.1.1 厂商补丁： OpenOffice ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Secunia Research: OpenOffice.org Word Document Table Parsing Integer Underflow
====================================================================== Secunia Research 01/09/2009 - OpenOffice.org Word Document Table Parsing Integer Underflow - ====================================================================== Table of Contents Affected...
Gentoo Security Advisory GLSA 200501-41 (tikiwiki)
The remote host is missing updates announced in advisory GLSA 200501-41. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
CVE-2008-0200
CVE-2008-0200: Multiple cross-site scripting (XSS) in account/index.html of RotaBanner Local 3 and earlier. Vulnerable parameters are (1) user and (2) drop; remote attackers can inject arbitrary script/HTML. Documents do not provide exploit details or specific mitigations.
CVE-2007-0200
CVE-2007-0200 affects Geoffrey Golliher Axiom Photo/News Gallery (axiompng) 0.8.6. The issue is a PHP remote file inclusion in template.php exploited via the baseAxiomPath parameter, enabling remote attackers to execute arbitrary PHP code. This is the described vulnerability and its impact; no re...
RHEL 4 : firefox (RHSA-2006:0200)
The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2006:0200 advisory. - security flaw CVE-2005-4134, CVE-2006-0292, CVE-2006-0296 Note that Nessus has not tested for these issues but has instead relied only on...
CVE-2006-0200
Format string vulnerability in the error-reporting feature in the mysqli extension in PHP 5.1.0 and 5.1.1 might allow remote attackers to execute arbitrary code via format string specifiers in MySQL error messages...
CVE-2006-0200
Format string vulnerability in the error-reporting feature in the mysqli extension in PHP 5.1.0 and 5.1.1 might allow remote attackers to execute arbitrary code via format string specifiers in MySQL error messages...
Microsoft Windows GDI JPEG Processing Buffer Overrun (MS04-028; CVE-2004-0200)
...
GLSA-200501-41 : TikiWiki: Arbitrary command execution
The remote host is affected by the vulnerability described in GLSA-200501-41 TikiWiki: Arbitrary command execution TikiWiki does not validate files uploaded to the 'temp' directory. Impact : A malicious user could run arbitrary commands on the server by uploading and calling a PHP script...
CVE-2005-0200
CVE-2005-0200 affects TikiWiki prior to 1.8.5, where uploaded files in the temp directory could bypass validation and allow a remote attacker to upload and execute arbitrary PHP scripts (a separate issue from CVE-2004-1386). Open-source/advisory references (GLSA GLSA-200501-41, GLSA-200501-12) in...
CVE-2004-0200
Buffer overflow in the JPEG JPG parsing engine in the Microsoft Graphic Device Interface Plus GDI+ component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy...
CVE-2004-0200
CVE-2004-0200 is a buffer-overflow vulnerability in the JPEG parsing engine of Microsoft GDI+ (GDIPlus.dll). The flaw allows remote code execution when a specially crafted JPEG image is processed, with the attack vector involving JPEG data that is mis-sized during a memory copy. The vulnerability...
CVE-2002-0200
Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service via an HTTP request for an MS-DOS device name...
CVE-2002-0200
The CVE-2002-0200 entry concerns Cyberstop Web Server for Windows 0.1. Affected: the HTTP handling of the server. Root cause: an HTTP request for an MS-DOS device name (e.g., CON\CON, AUX.*) can trigger a denial of service by freezing/rebooting Windows. Impact: Partial availability loss as the se...
CVE-2001-0200
HSWeb 2.0 HTTP server allows remote attackers to obtain the physical path of the server via a request to the /cgi/ directory, which will list the path if directory browsing is enabled...
CVE-2001-0200
HSWeb 2.0 HTTP server is affected by a path-disclosure vulnerability: remote attackers can obtain the server’s physical path by requesting the /cgi/ directory if directory browsing is enabled. This results in partial confidentiality impact. The available sources do not provide exploit details, af...