5507 matches found
CVE-2011-0104
CVE-2011-0104 affects Microsoft Excel 2002 SP3, Excel 2003 SP3, Office 2004/2008 for Mac, and Open XML File Format Converter for Mac. A crafted HLink record in an Excel file can trigger memory corruption, allowing remote code execution or causing a denial of service. Exploitation details or in‑th...
Microsoft Office Excel Remote Code Execution Vulnerabilities (2489279)
This host is missing a critical security update according to Microsoft Bulletin MS11-021. OpenVAS Vulnerability Test $Id: secpodms11-021.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Office Excel Remote Code Execution Vulnerabilities 2489279 Authors: Antu Sanadi Copyright: Copyright c 2011 SecPo...
CVE-2011-0101: Improper Restriction of Operations within the Bounds of a Memory Buffer
Microsoft Excel 2002 SP3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted RealTimeData record, related to a stTopic field, double-byte characters, and an incorrect pointer calculation, aka "Excel Record Parsing WriteAV Vulnerability."...
CVE-2011-0103: Improper Restriction of Operations within the Bounds of a Memory Buffer
Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted record information in an Excel file, aka "Excel Memory Corruption...
Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (2489283)
This host is missing a critical security update according to Microsoft Bulletin MS11-022. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Security Update for Microsoft PowerPoint 2002 (KB2464617)
A security vulnerability exists in Microsoft PowerPoint 2002 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
PT-2011-2088
Name of the Vulnerable Software and Affected Versions Microsoft Excel version 2002 SP3 Description A remote code execution issue exists in the way Microsoft Excel handles specially crafted Excel files, potentially allowing an attacker to take complete control of an affected system. This could...
Design/Logic Flaw
Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse Office Art objects, which allows remote attackers to execute arbitrary code via vectors related to a function pointer, aka "Excel Dangling Pointer Vulnerability."...
Memory corruption
ELEMENTS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 does not properly parse structures during the opening of a Visio file, which allows remote attackers to execute arbitrary code via a file containing a malformed structure, aka "Visio Data Type Memory Corruption Vulnerability."...
CVE-2011-0980: Undefined Security Weakness
Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse Office Art objects, which allows remote attackers to execute arbitrary code via vectors related to a function pointer, aka "Excel Dangling Pointer Vulnerability."...
Kolibri HTTP Server HEAD Buffer Overflow
This exploits a stack buffer overflow in version 2 of the Kolibri HTTP server. Module Options msf use exploit/windows/http/kolibri/http msf undefinedhttp show actions ...actions... msf undefinedhttp set ACTION msf undefinedhttp show options ...show and set options... msf undefinedhttp run This...
CVE-2010-3955
pubconv.dll aka the Publisher Converter DLL in Microsoft Publisher 2002 SP3 does not properly perform array indexing, which allows remote attackers to execute arbitrary code via a crafted Publisher file that uses an old file format, aka "Array Indexing Memory Corruption Vulnerability."...
Memory corruption
pubconv.dll aka the Publisher Converter DLL in Microsoft Publisher 2002 SP3 does not properly perform array indexing, which allows remote attackers to execute arbitrary code via a crafted Publisher file that uses an old file format, aka "Array Indexing Memory Corruption Vulnerability."...
CVE-2010-3955
pubconv.dll aka the Publisher Converter DLL in Microsoft Publisher 2002 SP3 does not properly perform array indexing, which allows remote attackers to execute arbitrary code via a crafted Publisher file that uses an old file format, aka "Array Indexing Memory Corruption Vulnerability."...
PT-2010-5191
Name of the Vulnerable Software and Affected Versions Microsoft Publisher 2002 SP3 Description The issue allows remote attackers to execute arbitrary code via a crafted Publisher file that uses an old file format. A remote code execution vulnerability exists in the way that Microsoft Publisher...
VUPEN Security Research - Microsoft Office Publisher "pubconv.dll" Array Indexing Vulnerability (VUPEN-SR-2010-206)
VUPEN Security Research - Microsoft Office Publisher "pubconv.dll" Array Indexing Vulnerability VUPEN-SR-2010-206 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Microsoft Publisher, is a desktop publishing application from Microsoft. It is an entry-level applicatio...
CVE-2010-3955: Improper Control of Generation of Code
pubconv.dll aka the Publisher Converter DLL in Microsoft Publisher 2002 SP3 does not properly perform array indexing, which allows remote attackers to execute arbitrary code via a crafted Publisher file that uses an old file format, aka "Array Indexing Memory Corruption Vulnerability."...
CVE-2010-2571: Improper Input Validation
Array index error in pubconv.dll aka the Publisher Converter DLL in Microsoft Publisher 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher 97 file, aka "Memory Corruption Due To Invalid Index Into Array in Pubconv.dll Vulnerability."...
CVE-2010-2569: Improper Control of Generation of Code
pubconv.dll aka the Publisher Converter DLL in Microsoft Publisher 2002 SP3, 2003 SP3, and 2007 SP2 does not properly handle an unspecified size field in certain older file formats, which allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via a...
Microsoft Publisher Remote Code Execution Vulnerability (2292970)
This host is missing a critical security update according to Microsoft Bulletin MS10-103. OpenVAS Vulnerability Test $Id: secpodms10-103.nasl 6538 2017-07-05 11:38:27Z cfischer $ Microsoft Publisher Remote Code Execution Vulnerability 2292970 Authors: Antu Sanadi Copyright: Copyright c 2010 SecPo...