Trend Micro OfficeScan client ActiveX control buffer overflow

Added: 02/21/2007 CVE: CVE-2007-0325 BID: 22585 OSVDB: 33040 Background Trend Micro OfficeScan is a centralized virus and security scan management system. Problem The OfficeScan Web-Deployment SetupINICtrl ActiveX control, which is vulnerable to buffer overflows in multiple methods, is...

Trend Micro OfficeScan client ActiveX control buffer overflow

Added: 02/21/2007 CVE: CVE-2007-0325 BID: 22585 OSVDB: 33040 Background Trend Micro OfficeScan is a centralized virus and security scan management system. Problem The OfficeScan Web-Deployment SetupINICtrl ActiveX control, which is vulnerable to buffer overflows in multiple methods, is...

CVE-2007-1023: Undefined Security Weakness

SQL injection vulnerability in popprofile.asp in Snitz Forums 2000 3.1 SR4 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Trend Micro OfficeScan client ActiveX control buffer overflow

Added: 02/21/2007 CVE: CVE-2007-0325 BID: 22585 OSVDB: 33040 Background Trend Micro OfficeScan is a centralized virus and security scan management system. Problem The OfficeScan Web-Deployment SetupINICtrl ActiveX control, which is vulnerable to buffer overflows in multiple methods, is...

Snitz Forums 2000 Version 3.1 SR4 (pop_profile.asp) Remote SQL Injection Vulnerability

=================================X=O=R=O=N================================= Snitz Forums 2000 Version 3.1 SR4 popprofile.asp Remote SQL Injection Vulnerability =================================X=O=R=O=N================================= Bulan: xoron xoron.info - xoron.biz...

Snitz Forums 2000 v3.1 SR4 (pop_profile.asp) SQL Injection Vulnerability

No description provided by source. =================================X=O=R=O=N================================= Snitz Forums 2000 Version 3.1 SR4 popprofile.asp Remote SQL Injection Vulnerability =================================X=O=R=O=N================================= Bulan: xoron xoron.info -...

Snitz Forums 2000 3.1 SR4 - pop_profile.asp SQL Injection

Snitz Forums 2000 3.1 SR4 - popprofile.asp SQL Injection =================================X=O=R=O=N================================= Snitz Forums 2000 Version 3.1 SR4 popprofile.asp Remote SQL Injection Vulnerability =================================X=O=R=O=N================================= Bula...

Snitz Forums 2000 v3.1 SR4 (pop_profile.asp) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================== Snitz Forums 2000 v3.1 SR4 popprofile.asp SQL Injection Vulnerability ========================================================================...

Snitz Forums 2000 3.1 SR4 - 'pop_profile.asp' SQL Injection

=================================X=O=R=O=N================================= Snitz Forums 2000 Version 3.1 SR4 popprofile.asp Remote SQL Injection Vulnerability =================================X=O=R=O=N================================= Bulan: xoron xoron.info - xoron.biz...

Microsoft Security Advisory (933052) Vulnerability in Microsoft Word Could Allow Remote Code Executio

Microsoft Security Advisory 933052 Vulnerability in Microsoft Word Could Allow Remote Code Execution Published: February 14, 2007 Microsoft is investigating new public reports of very limited, targeted attacks against Microsoft Word “zero-day” using a vulnerability in Microsoft Office 2000 and...

Code injection

Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac does not correctly check the properties of certain documents and warn the user of macro content, which allows user-assisted remote attackers to execute arbitrary code...

CVE-2007-0208

CVE-2007-0208 is the Microsoft Word Macro Vulnerability described in MS07-014. Word 2000 SP3, Word 2002/XP SP3, Word 2003 SP2, Works 2004–2006, and Word 2004 for Mac are affected by a flaw where Word does not properly validate the document’s properties, failing to display the macro security warni...

CVE-2007-0025

The MFC component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 and Visual Studio .NET 2000, 2002 SP1, 2003, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code via an RTF file with a malformed OLE object that triggers memory corruption. NOTE: this might be due to a...

Microsoft Windows OLE Dialog Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability that occurs when the application attempts to parse malformed Rich Text Files RTF. An attacker could exploit this issue by enticing a victim to load a malicious RTF file. If the vulnerability is successfully exploited,...

Microsoft HTML Help ActiveX Control Remote Code Execution Vulnerability

Description The Microsoft HTML Help ActiveX control is prone to a remote code-execution vulnerability. An attacker could exploit this issue to execute code in the context of the user visiting a malicious web page. Technologies Affected Avaya Agent Access Avaya Basic Call Management System Reporti...

Microsoft MFC Embedded OLE Object Remote Code Execution Vulnerability

Description The Microsoft MFC component for Microsoft Windows and Microsoft Visual Studio .NET is prone to a remote code-execution vulnerability. This issue occurs when the application using the component attempts to parse malformed Rich Text Files RTF. An attacker could exploit this issue by...

Microsoft Security Bulletin MS07-008 Vulnerability in HTML Help ActiveX Control Could Allow Remote Code Execution (928843)

Microsoft Security Bulletin MS07-008 Vulnerability in HTML Help ActiveX Control Could Allow Remote Code Execution 928843 Published: February 13, 2007 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum...

Microsoft Security Bulletin MS07-011 Vulnerability in Microsoft OLE Dialog Could Allow Remote Code Execution (926436)

Microsoft Security Bulletin MS07-011 Vulnerability in Microsoft OLE Dialog Could Allow Remote Code Execution 926436 Published: February 13, 2007 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity...

CVE-2006-1311: Undefined Security Weakness

The RichEdit component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1; Office 2000 SP3, XP SP3, 2003 SP2, and Office 2004 for Mac; and Learning Essentials for Microsoft Office 1.0, 1.1, and 1.5 allows user-assisted remote attackers to execute arbitrary code via a malformed OLE object in an R...

Microsoft Security Bulletin MS07-015 Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (932554)

Microsoft Security Bulletin MS07-015 Vulnerabilities in Microsoft Office Could Allow Remote Code Execution 932554 Published: February 13, 2007 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Office Impact of Vulnerability: Remote Code Execution Maximum Severity...