MS11-021 / MS11-022 / MS11-023: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2489279 / 2489283 / 2489293) (Mac OS X)

The remote Mac OS X host is running a version of Microsoft Office that is affected by several vulnerabilities. If an attacker can trick a user on the affected host into opening a specially crafted Office file, these issues could be leveraged to execute arbitrary code subject to the user's...

MS11-021: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2489279)

The remote Windows host is running a version of Microsoft Excel or Excel Viewer that is affected by several vulnerabilities. If an attacker can trick a user on the affected host into opening a specially crafted Excel file, they could leverage this issue to execute arbitrary code subject to the...

Microsoft Office Excel CatSerRange Record Remote Code Execution (MS11-021; CVE-2011-0978)

Microsoft Excel is a popular spreadsheet application. A remote attacker could exploit this issue via a malformed Excel file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system. A memory corruption vulnerability has been identified in Microsoft...

Microsoft Office Excel Axis and Art Object Parsing Remote Code Execution Vulnerabilities

This host is installed with Microsoft Office Excel and is prone to multiple remote code execution vulnerabilities. This NVT has been replaced by NVT secpodms11-021.nasl OID:1.3.6.1.4.1.25623.1.0.902410. OpenVAS Vulnerability Test $Id: gbmsofficeexcelmultcodeexecvuln.nasl 6538 2017-07-05 11:38:27Z...

CVE-2011-0978

Stack-based buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via vectors related to an axis properties...

CVE-2011-0978

CVE-2011-0978 is a remote code execution vulnerability in Microsoft Excel and related Office components caused by a memory corruption/stack-based overflow while parsing the Axis Properties/ SxView records (vulnerable in Excel 2002 SP3, 2003 SP3, 2007 SP2, Office for Mac 2004, Excel Viewer SP2, an...

CVE-2010-0978

KMSoft Guestbook aka GBook 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/db.mdb...

CVE-2010-0978

The CVE-2010-0978 entry affects KMSoft Guestbook (aka GBook) 1.0, where sensitive data is stored under the web root with insufficient access control. This allows remote attackers to directly download the database file (db/db.mdb), exposing stored information. The root cause is improper access con...

Oracle Database Server LT.ROLLBACKWORKSPACE SQL Injection (CVE-2009-0978)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, i.e., procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...

CVE-2010-0978

creationtimestamp| type| source ---|---|--- 2010-01-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11005...

CVE-2009-0975

Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-0978...

Design/Logic Flaw

Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-0978...

CVE-2009-0978

CVE-2009-0978 affects Oracle Database Workspace Manager: a SQL injection flaw in the SYS.LT.ROLLBACKWORKSPACE procedure can allow a user with execute privilege on SYS.LT.ROLLBACKWORKSPACE to run privileged SQL via crafted calls. The public material references a Metasploit module exploiting this v...

CentOS Update for firefox CESA-2008:0978 centos4 i386

Check for the Version of firefox OpenVAS Vulnerability Test CentOS Update for firefox CESA-2008:0978 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

RHEL 4 / 5 : firefox (RHSA-2008:0978)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:0978 advisory. - Mozilla buffer overflow in http-index-format parser CVE-2008-0017 - Mozilla crash and remote code execution via proto tampering...

CVE-2008-0978

CVE-2008-0978 affects Double-Take 5.0.0.2865 and earlier (HP StorageWorks Storage Mirroring name and other names). A remote attacker can obtain sensitive information by sending a crafted packet of type 0x2728 (OS/path info), 0x274e (Ethernet adapters), 0x2726 (filesystem info), 0x274f (printer dr...

CVE-2007-0978

CVE-2007-0978 affects IBM AIX 5.3; a buffer overflow in the swcons component of bos.rte.console allows local users to gain privileges via long input data. The root cause is a buffer overflow in the swcons command. Reported impact is local privilege escalation; exploitation details are not provide...

CVE-2005-0978

Directory traversal vulnerability in the Object Push service in IVT BlueSoleil 1.4 allows remote attackers to upload arbitrary files via a .. dot dot in a PUSH command...

CVE-2005-0978

Directory traversal vulnerability in the Object Push service in IVT BlueSoleil 1.4 allows remote attackers to upload arbitrary files via a .. dot dot in a PUSH command...

CVE-2005-0978

The CVE-2005-0978 entry describes a directory traversal flaw in the IVT BlueSoleil 1.4 Object Push service, exploitable by sending a PUSH command containing .. to upload arbitrary files. Affected component: Object Push service of IVT BlueSoleil 1.4. Root cause: directory traversal in PUSH handlin...