Excel SLYK Format Parsing Buffer Overrun Vulnerability PoC

Exploit for windows platform in category dos / poc Exploit Title: Excel SLYK Format Parsing Buffer Overrun Vulnerability PoC Date: date Author: webDEViL Software Link: download link if available Version: app version Tested on: ALL CVE : CVE-2011-1276 w3bd3vilatgmaildotcom twitter.com/w3bd3vil ope...

Excel - SLYK Format Parsing Buffer Overrun (PoC)

Excel - SLYK Format Parsing Buffer Overrun PoC Exploit Title: Excel SLYK Format Parsing Buffer Overrun Vulnerability PoC Date: date Author: webDEViL Software Link: download link if available Version: app version Tested on: ALL CVE : CVE-2011-1276 w3bd3vilatgmaildotcom twitter.com/w3bd3vil open...

Excel - SLYK Format Parsing Buffer Overrun (PoC)

Exploit Title: Excel SLYK Format Parsing Buffer Overrun Vulnerability PoC Date: date Author: webDEViL Software Link: download link if available Version: app version Tested on: ALL CVE : CVE-2011-1276 w3bd3vilatgmaildotcom twitter.com/w3bd3vil open FILE, 'CVE-2011-1276.slk'; print FILE "ID;P\n";...

CVE-2011-1276

CVE-2011-1276 is a remote-code-execution/denial-of-service vulnerability in Microsoft Excel and related Office components caused by a buffer overrun due to improper validation of record information. Affected products include Excel 2002 SP3, 2003 SP3, 2007 SP2; Office for Mac (2004/2008), Open XML...

MS11-045: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2537146)

The remote Windows host is running a version of Microsoft Excel or Excel Viewer that is affected by several vulnerabilities. If an attacker can trick a user on the affected host into opening a specially crafted Excel file, he or she could leverage this issue to execute arbitrary code subject to t...

Microsoft Excel Buffer Overflow CVE-2011-1276 Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability due to a buffer-overflow error. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Excel file. Successful exploits may allow attackers to execute arbitrary code with the...

Microsoft Excel SLK File Parsing Code Execution (MS11-045; CVE-2011-1276)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the SLK file format. A remote attacker could trigger this flaw by...

CVE-2010-1276

Multiple cross-site scripting XSS vulnerabilities in BBSXP 2008 SP2 allow remote attackers to inject arbitrary web script or HTML via the URI in a request to 1 AddPost.asp, 2 AddTopic.asp, 3 AdminDefault.asp, 4 Bank.asp, 5 Manage.asp, and 6 ShowPost.asp. NOTE: the provenance of this information i...

CVE-2010-1276

CVE-2010-1276 concerns multiple cross-site scripting (XSS) vulnerabilities in BBSXP 2008 SP2. The issue allows remote attackers to inject arbitrary web script or HTML via the URI in requests to six ASP pages: AddPost.asp, AddTopic.asp, Admin_Default.asp, Bank.asp, Manage.asp, and ShowPost.asp. Th...

CVE-2009-1276

Summary of CVE-2009-1276 with connected data: XScreenSaver in Sun Solaris 10 and OpenSolaris before snv_109, and Solaris 8/9 with GNOME 2.x, can leak sensitive information by letting a physically proximate attacker read popup windows that appear even when the screen is locked (e.g., Thunderbird n...

Fedora Core 9 FEDORA-2009-1276 (nss)

The remote host is missing an update to nss announced via advisory FEDORA-2009-1276. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 9 FEDORA-2009-1276 (nss)

The remote host is missing an update to nss announced via advisory FEDORA-2009-1276. OpenVAS Vulnerability Test $Id: fcore20091276.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-1276 nss Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CVE-2008-1276

creationtimestamp| type| source ---|---|--- 2008-03-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5249...

CVE-2008-1276

CVE-2008-1276 affects MailEnable Professional/Enterprise IMAP (MEIMAPS.EXE) up to version 3.13. Multiple buffer overflows allow remote authenticated attackers to execute arbitrary code via long arguments to FETCH, EXAMINE, and UNSUBSCRIBE commands. This is documented in the NVD entry and related ...

Debian Security Advisory DSA 1276-1 (krb5)

The remote host is missing an update to krb5 announced via advisory DSA 1276-1. Several remote vulnerabilities have been discovered in the MIT reference implementation of the Kerberos network authentication protocol suite, which may lead to the execution of arbitrary code. The Common...

Debian: Security Advisory (DSA-1276-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1276-1 : krb5 - several vulnerabilities

Several remote vulnerabilities have been discovered in the MIT reference implementation of the Kerberos network authentication protocol suite, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-0956 It...

CVE-2007-1276

The CVE-2007-1276 entry describes multiple cross-site scripting (XSS) vulnerabilities in Webmin’s chooser.cgi, affecting Webmin versions before 1.330 and Usermin versions before 1.260. The root cause is improper handling of crafted filename input in chooser.cgi, enabling remote attackers to injec...

CVE-2006-1276

The CVE-2006-1276 entry affects Himpfen Consulting Company PHP SimpleNEWS 1.0.0, where an attacker can bypass authentication by setting the admin parameter in a cookie. The connected sources corroborate the same description across NVD and CVE listings, confirming the vulnerable component and root...

CVE-2003-1276

Netfone.exe of NetTelephone 3.5.6 is vulnerable due to weak encryption for user PINs and plaintext storage of account numbers in the registry (HKCU\Software\MediaRing.com\SDK\NetTelephone\settings). Local users could potentially gain unauthorized access to NetTelephone accounts. The connected doc...