123 matches found
MS10-038: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2027452) (Mac OS X)
The remote Mac OS X host is running a version of Microsoft Excel that is affected by several vulnerabilities. If an attacker can trick a user on the affected host into opening a specially crafted Excel file, these issues could be leveraged to execute arbitrary code subject to the user's privilege...
Microsoft Excel - WOPT Record Parsing Heap Memory Corruption
Microsoft Excel - WOPT Record Parsing Heap Memory Corruption ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | day 21 binary analysis | | | | || / \ || | | | || ||// \/|/ ''' Title : Microsoft Excel WOPT Record Parsing Heap Memory Corruption Version : Excel 2002...
Microsoft Excel - WOPT Record Parsing Heap Memory Corruption
''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | day 21 binary analysis | | | | || / \ || | | | || ||// \/|/ ''' Title : Microsoft Excel WOPT Record Parsing Heap Memory Corruption Version : Excel 2002 SP3 Analysis : http://www.abysssec.com Vendor :...
Microsoft Excel HFPicture Record Parsing Remote Code Execution Vulnerability
No description provided by source. ''' Title : Microsoft Excel HFPicture Record Parsing Remote Code Execution Vulnerability Version : Excel 2002 SP3 Analysis : http://www.abysssec.com Vendor : http://www.microsoft.com Impact : High Contact : shahin at abysssec.com , info at abysssec.com Twitter :...
Microsoft Excel - HFPicture Record Parsing Remote Code Execution
Microsoft Excel - HFPicture Record Parsing Remote Code Execution ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | day 16 binary anlysis | | | | || / \ || | | | || ||// \/|/ ''' Title : Microsoft Excel HFPicture Record Parsing Remote Code Execution Vulnerability...
CVE-2010-1248
creationtimestamp| type| source ---|---|--- 2010-09-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15019 2010-09-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15065...
Microsoft Excel - HFPicture Record Parsing Remote Code Execution
''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | day 16 binary anlysis | | | | || / \ || | | | || ||// \/|/ ''' Title : Microsoft Excel HFPicture Record Parsing Remote Code Execution Vulnerability Version : Excel 2002 SP3 Analysis : http://www.abysssec.com...
VUPEN Security Research - Microsoft Office Excel HFPicture Buffer Overflow Vulnerability (CVE-2010-1248)
VUPEN Security Research - Microsoft Office Excel HFPicture Buffer Overflow Vulnerability CVE-2010-1248 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Microsoft Office Excel is a powerful tool you can use to create and format spreadsheets, and analyze and share...
MS10-038: Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (2027452)
The remote host contains a version of Microsoft Office Excel 2002, Microsoft Office Excel 2003, Microsoft Office Excel 2007, Microsoft Office Excel Viewer, or Microsoft Office Compatibility Pack that is affected by several vulnerabilities. If an attacker can trick a user on the affected system in...
CVE-2010-1248
CVE-2010-1248 affects Microsoft Office Excel 2002 SP3 (and Excel 2004 for Mac) due to parsing errors in HFPicture and WOPT records, causing heap/buffer memory corruption and potential remote code execution. The vulnerability arises when opening specially crafted Excel files containing malformed H...
Microsoft Excel HFPicture Record Stack Overflow (MS10-038; CVE-2010-1248)
Microsoft Excel is a popular spreadsheet application. A stack overflow vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this flaw by...
CVE-2009-1248
creationtimestamp| type| source ---|---|--- 2009-03-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8291...
CVE-2008-1248
The affected product is the Snom 320 SIP Phone. The vulnerability exists in the web interface (web server on port 1800) that allows remote attackers to place calls to arbitrary numbers via the "Call a number" field. Root cause details are not explicitly provided in the documents beyond this behav...
CVE-2008-1248
The web interface on the central phone server for the Snom 320 SIP Phone allows remote attackers to make arbitrary phone calls via the "Call a number" field. NOTE: this might overlap CVE-2007-3440...
CVE-2007-1248
CVE-2007-1248 affects built2go News Manager Blog 1.0 with multiple reflected XSS vulnerabilities. The issue allows remote attackers to inject arbitrary script or HTML via the cid, uid, and nid parameters to news.php, and the nid parameter to rating.php. The connected records confirm the same desc...
CVE-2006-1248
The provided documents identify CVE-2006-1248 as an HP-UX local vulnerability affecting the usermod(1M) utility on HP-UX B.11.00, B.11.11, and B.11.23. The issue occurs when usermod is run with certain options that involve creating a user’s new home directory, in which case ownership of all direc...
CVE-2003-1248
CVE-2003-1248 affects H-Sphere WebShell 2.3. The vulnerability allows remote command execution by passing shell metacharacters in the mode and zipfile URL parameters. Impact is partial confidentiality, integrity, and availability. No explicit exploitation status is provided in the documents; expl...
CVE-2005-1248
CVE-2005-1248 describes a buffer overflow in Apple iTunes prior to 4.8 that can be triggered by a crafted MPEG‑4 file, allowing a remote attacker to execute arbitrary code. The description and related references consistently point to a vulnerability in the MPEG‑4 parsing path of iTunes, with impa...
CVE-2002-1248
The CVE-2002-1248 issue affects Northern Solutions’ Xeneo Web Server (notably versions 2.1.0.0 and 2.0.759.6, prior to 2.1.5). The vulnerability arises from improper handling of a specially crafted web request for a “%” URI, allowing remote attackers to trigger a denial of service (crash). OpenVA...