Microsoft PowerPoint Could Allow Remote Code Execution Vulnerabilities (949785)

This host is missing critical security update according to Microsoft Bulletin MS08-051. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2008-1455

A "memory calculation error" in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP2, and 2007 through SP1; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 through SP1; and Office 2004 for Mac allows remote attackers to execute arbitrary code via a PowerPoint file with crafted...

CVE-2008-1455

CVE-2008-1455 describes a remote code execution vulnerability in Microsoft PowerPoint caused by a memory handling flaw while parsing bullet list values in specially crafted PowerPoint files (memory calculation/parsing overflow). Affected products include PowerPoint 2000 SP3, 2002 SP3, 2003 SP2, 2...

Debian DSA-1455-1 : libarchive - denial of service

Several local/remote vulnerabilities have been discovered in libarchive1, a single library to read/write tar, cpio, pax, zip, iso9660 archives. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3641 It was discovered that libarchive1 would miscompute...

CVE-2003-1455

PoPToP VPN software is affected by a local-privilege-elevation vulnerability in the launch_bcrelay function (pptpctrl.c). The issue impacts PoPToP 1.1.4-b1 through 1.1.4-b3, enabling local users to execute arbitrary code due to multiple buffer overflows. Connected documents specify the vulnerable...

CVE-2007-1455

CVE-2007-1455 describes multiple absolute path traversal vulnerabilities in Fantastico used with cPanel 10.x , where remote authenticated users can cause arbitrary local files to be included and executed through (1) the userlanguage parameter to includes/load_language.php and (2) the fantasticopa...

CVE-2006-1455

The CVE-2006-1455 issue affects Apple QuickTime Streaming Server on Mac OS X 10.3.9 and 10.4.6. The vulnerability allows remote attackers to cause a denial of service (crash and connection interruption) by processing a QuickTime movie with a missing track, which triggers a null dereference. Impac...

Mac OS X Multiple Vulnerabilities (Security Update 2006-003)

The remote host is running Apple Mac OS X, but lacks Security Update 2006-003. This security update contains fixes for the following applications : AppKit ImageIO BOM CFNetwork ClamAV Mac OS X Server only CoreFoundation CoreGraphics Finder FTPServer Flash Player KeyCHain LaunchServices libcurl Ma...

freeradius security update

CentOS Errata and Security Advisory CESA-2005:524 Updated freeradius packages that fix a buffer overflow and possible SQL injection attacks in the sql module are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. FreeRADIUS is a...

CVE-2005-1455

CVE-2005-1455 describes a buffer overflow in the sql_escape_func function of the FreeRADIUS SQL module (versions 1.0.2 and earlier) that enables remote attackers to cause a crash/DoS. The connected documents corroborate that freeradius has multiple advisories across platforms (FreeBSD, Gentoo, Re...

CVE-2001-1455

CVE-2001-1455 affects Netegrity SiteMinder 3.6–4.5.1. The vulnerability allows remote attackers to bypass filtering by using URLs containing Unicode characters, potentially compromising filtering/ access control. No remediation details are provided in the supplied documents. If exploit informatio...

CVE-2004-1455

CVE-2004-1455 describes a stack-based buffer overflow in xine-lib-rc5 (xine-lib 1_rc5-r2 and earlier) that allows remote attackers to execute arbitrary code via crafted playlists producing a long vcd:// URL. This is the core vulnerability reported by multiple sources (NVD, CVE listing, Gentoo GLS...

CVE-2004-1455

Stack-based buffer overflow in Xine-lib-rc5 in xine-lib 1rc5-r2 and earlier allows remote attackers to execute arbitrary code via crafted playlists that result in a long vcd:// URL...

CVE-2004-1455

Stack-based buffer overflow in Xine-lib-rc5 in xine-lib 1rc5-r2 and earlier allows remote attackers to execute arbitrary code via crafted playlists that result in a long vcd:// URL...

CVE-2004-1455

Stack-based buffer overflow in Xine-lib-rc5 in xine-lib 1rc5-r2 and earlier allows remote attackers to execute arbitrary code via crafted playlists that result in a long vcd:// URL...

CVE-2003-1455

Multiple buffer overflows in the launchbcrelay function in pptpctrl.c in PoPToP 1.1.4-b1 through PoPToP 1.1.4-b3 allow local users to execute arbitrary code...

CVE-2002-1455

Multiple cross-site scripting XSS vulnerabilities in OmniHTTPd allow remote attackers to insert script or HTML into web pages via 1 test.php, 2 test.shtml, or 3 redir.exe...

CVE-2002-1455

CVE-2002-1455 describes multiple cross-site scripting (XSS) vulnerabilities in OmniHTTPd that allow remote attackers to inject script or HTML into web pages. Exploitation via (1) test.php, (2) test.shtml, or (3) redir.exe is indicated in the description. The connected documents corroborate the pr...

CVE-1999-1455

RSH service utility RSHSVC in Windows NT 3.5 through 4.0 does not properly restrict access as specified in the .Rhosts file when a user comes from an authorized host, which could allow unauthorized users to access the service by logging in from an authorized host...

CVE-1999-1455

The CVE-1999-1455 entry concerns the RSH service utility RSHSVC on Windows NT 3.5–4.0. It states that access is not properly restricted as defined by the .Rhosts file, potentially allowing login by unauthorized users from an authorized host. This is the only publicly reported description provided...