VUPEN Security Research - Microsoft Office Publisher Memory Corruption Vulnerability (VUPEN-SR-2010-041)

VUPEN Security Research - Microsoft Office Publisher Memory Corruption Vulnerability VUPEN-SR-2010-041 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Microsoft Publisher, is a desktop publishing application from Microsoft. It is an entry-level application, differin...

Microsoft Publisher Remote Code Execution Vulnerability (2292970)

This host is missing a critical security update according to Microsoft Bulletin MS10-103. OpenVAS Vulnerability Test $Id: secpodms10-103.nasl 6538 2017-07-05 11:38:27Z cfischer $ Microsoft Publisher Remote Code Execution Vulnerability 2292970 Authors: Antu Sanadi Copyright: Copyright c 2010 SecPo...

Microsoft Office Publisher Pointer Reference Memory Corruption (MS10-103; CVE-2010-3954)

Microsoft Publisher is a desktop publishing application for creating marketing materials, managing customer lists and more The vulnerability is due to an error Microsoft Publisher that fails to properly clear a pointer when certain objects are deleted. A remote attacker could trigger this flaw by...

Microsoft Office Publisher pubconv.dll Size Value Heap Corruption (MS10-103; CVE-2010-2569)

Microsoft Publisher is a desktop publishing application for creating marketing materials, managing customer lists and more. The vulnerability is due to an error in pubconv.dll, Publisher Converter DLL that is used to open Publisher files created in versions earlier than Microsoft Publisher 2007. ...

Microsoft Office Publisher pubconv.dll Heap Overrun (MS10-103; CVE-2010-2570)

Microsoft Publisher is a desktop publishing application for creating marketing materials, managing customer lists and more. The vulnerability is due to an error in pubconv.dll, Publisher Converter DLL that is used to open Publisher files created in versions earlier than Microsoft Publisher 2007. ...

SA-CONTRIB-2010-103 - Node Relativity - Multiple vulnerabilities

The Node Relativity module allows parent-child relationships between nodes to be established, managed and searched. The Node Relativity module does not sanitize some of the user supplied data before displaying it, leading to a Cross Site Scripting XSS vulnerability which can be used by a maliciou...

Sonique 2.0 - .xpl Remote Stack Buffer Overflow

Sonique 2.0 - .xpl Remote Stack Buffer Overflow source: https://www.securityfocus.com/bid/42434/info Sonique is prone to a remote stack-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue t...

Sonique 2.0 - '.xpl' Remote Stack Buffer Overflow

source: https://www.securityfocus.com/bid/42434/info Sonique is prone to a remote stack-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to execute arbitrary code in the context of the...

Microsoft Excel DBQueryExt record parsing vulnerability

Added: 07/08/2010 CVE: CVE-2010-1253 BID: 40531 OSVDB: 65228 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem A vulnerability in Microsoft Excel allows command execution when a user opens a spreadshee...

Microsoft Excel DBQueryExt record parsing vulnerability

Added: 07/08/2010 CVE: CVE-2010-1253 BID: 40531 OSVDB: 65228 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem A vulnerability in Microsoft Excel allows command execution when a user opens a spreadshee...

Sonique2 2.0 Beta Build 103 Proof Of Concept

!/usr/bin/python Title: Sonique2 2.0 Beta Build 103 Local Crash PoC Found by: b0telh0 Link: http://download.softpedia.com/dl/85a8a9ea142e83438019ed775c0d039f/4b59ca05/100006707/software/multimedia/audio/s2beta103install.zip Tested on: Windows XP SP3 crash = "\x41" 20000 try: file =...

Sonique2 v2.0 Beta Build 103 Local Crash PoC

Exploit for unknown platform in category dos / poc ============================================ Sonique2 v2.0 Beta Build 103 Local Crash PoC ============================================ !/usr/bin/python Title: Sonique2 2.0 Beta Build 103 Local Crash PoC Found by: b0telh0 Tested on: Windows XP SP3...

Sonique2 2.0 Beta Build 103 - Local Crash (PoC)

Sonique2 2.0 Beta Build 103 - Local Crash PoC !/usr/bin/python Title: Sonique2 2.0 Beta Build 103 Local Crash PoC Found by: b0telh0 Tested on: Windows XP SP3 crash = "\x41" 20000 try: file = open'b0t.pls','w'; file.writecrash; file.close; print "+ Created b0t.pls file." except: print "- Error can...

Sonique2 2.0 Beta Build 103 Local Crash PoC

Exploit for unknown platform in category dos / poc =========================================== Sonique2 2.0 Beta Build 103 Local Crash PoC =========================================== Exploit Title: Sonique2 2.0 Beta Build 103 Local Crash PoC Author: b0telh0 Software Link:...

MDVA-2008:103 : pidgin

A protocol change at the ICQ servers made it impossible to connect with Pidgin. This update adapts Pidgin to the new protocol version. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Networ...

Important: Red Hat Security Advisory: perl security update

Updated Perl packages that fix security a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Perl is a high-level programming language commonly used for system administration...