More on Office 2003 Zero Day Vulnerability Patch

This week’s patch and security advisory for a vulnerability in Microsoft Office is the perfect example of why enterprise administrators need to take Microsoft’s criticality ratings as a suggestion and not gospel. Microsoft pushed security update MS13-051 through on Tuesday with a rating of...

CVE-2013-1331

Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading to improper memory allocation, aka "Office Buffer Overflow Vulnerability."...

CVE-2013-1331

CVE-2013-1331 is a buffer overflow in Microsoft Office 2003 SP3 and Office for Mac 2011 triggered when parsing PNG data embedded in an Office document, allowing remote attackers to execute arbitrary code. The vulnerability can be exploited through crafted PNG content, potentially via documents th...

Microsoft Office PNG File CVE-2013-1331 Buffer Overflow Vulnerability

Description Microsoft Office is prone to a remote stack-based buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue by enticing a victim to open a malicious PNG file. Successfully exploiting this issu...

MySQL < 4.0.14 libmysqlclient Buffer Overflow

The version of MySQL installed on the remote host is older than 4.0.14. The client library libmysqlclient is thus reportedly affected by a buffer overflow. A local attacker could execute arbitrary code through a long socket name. Note that RedHat does not consider that this flaw is a security...

CVE-2011-1331

CVE-2011-1331 affects JustSystems Ichitaro family (Ichitaro 2005–2011, Ichitaro Government 6, 2006–2010, Ichitaro Portable, Ichitaro Pro, Ichitaro Viewer). The vulnerability enables remote attackers to execute arbitrary code or cause a denial of service via a crafted document, due to heap memory ...

VulnCheck KEV: CVE-2011-1331

JustSystems Ichitaro 2005 through 2011, Ichitaro Government 6, Ichitaro Government 2006 through 2010, Ichitaro Portable, Ichitaro Pro, and Ichitaro Viewer allow remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via a crafted document, as exploited in...

CVE-2010-1331

SQL injection vulnerability in Heartlogic HL-SiteManager allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2010-1331

The CVE-2010-1331 entry concerns Heartlogic HL-SiteManager, a CMS product, with a SQL injection vulnerability that could allow a remote attacker to view or modify information stored by the product. Affected component is HL-SiteManager; underlying issue is SQL injection via unspecified vectors. Ex...

Microsoft Windows GDIplus PNG Chunk Processing Integer Overflow (MS09-062; CVE-2009-2501; CVE-2013-1331)

An integer overflow vulnerability exists in Microsoft Windows GDI+. The vulnerability is due to lack of input validation when Microsoft Windows GDI+ handles PNG files. A remote attacker can exploit this vulnerability by enticing the target to open a specially crafted PNG file. Successful...

Internet Explorer execCommand File Type Spoofing (CVE-2004-1331)

Internet Explorer is a popular web-browser released by the Microsoft Corporation. It supports various content available on the web including HTML documents, images, dynamic scripting, and so on. Internet Explorer also provides the Dynamic Hypertext Markup Language DHTML application programming...

CVE-2009-1331

Microsoft Windows Media Player (WMP) is affected by CVE-2009-1331 due to a MID file integer overflow vulnerability in WMP 11.0.5721.5260, enabling remote attackers to crash the program (DoS) by processing a crafted crash.mid. OpenVAS entries confirm the same issue and describe a denial-of-service...

CVE-2009-1331

creationtimestamp| type| source ---|---|--- 2009-04-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8445...

DSECRG-08-020-1.txt

Digital Security Research Group DSecRG Advisory DSECRG-08-020 Application: Alcatel OmniPCX Office Versions Affected: Alcatel OmniPCX Office since release 210/061.1 Vendor URL: http://alcatel.com Bugs: Remote command execution Exploits: YES Risk: High CVSS Score: 7.31 CVE-number: 2008-1331 Reporte...

[DSECRG-08-020] Alcatel OmniPCX Office Remote Comand Execution

Digital Security Research Group DSecRG Advisory DSECRG-08-020 Application: Alcatel OmniPCX Office Versions Affected: Alcatel OmniPCX Office since release 210/061.1 Vendor URL: http://alcatel.com Bugs: Remote command execution Exploits: YES Risk: High CVSS Score: 7.31 CVE-number: 2008-1331 Reporte...

OmniPCX Office远程信息泄露漏洞

BUGTRAQ ID: 28758 CVECAN ID: CVE-2008-1331 阿尔卡特的OmniPCX Office是一套为中小型企业设计的统一通信解决方案。 OmniPCX Office的Internet Access服务所使用的一个CGI脚本没有正确地过滤某些特定参数，允许远程攻击者从Internet检索敏感信息。 Alcatel-Lucent OmniPCX Office = 210/061.1 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 禁止从Internet的WBM/WCA访问 对于R2.1到R4.1版本：...

CVE-2008-1331

CVE-2008-1331 is a remote command-execution vulnerability in Alcatel-Lucent OmniPCX Office Internet Access service via CGI script FastJSData.cgi (id2 parameter). Affected: OmniPCX Office OXO210 before 210/091.001 and OXO600 before 610/014.001 (and other versions). Impact: remote attackers can exe...

Debian: Security Advisory (DSA-1331-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2003-1331

CVE-2003-1331: Stack-based buffer overflow in the MySQL client library libmysqlclient (up to and including 4.0.13) allows local users to execute arbitrary code via a long socket name. The vulnerability is tied to MySQL client code (not the server) and is documented across multiple sources (RH adv...

CVE-2007-1331

Multiple cross-site scripting XSS vulnerabilities in TKS Banking Solutions ePortfolio 1.0 Java allow remote attackers to inject arbitrary web script or HTML via unspecified vectors that bypass the client-side protection scheme, one of which may be the q parameter to the search program. NOTE: some...