CVE-2010-1250

Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with malformed 1 EDG 0x88 and 2 Publisher 0x89 records, aka "Excel EDG Memory...

Security Update for Microsoft Excel 2002 (KB982299)

A security vulnerability exists in Microsoft Excel 2002 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

CVE-2010-2002

Cross-site scripting XSS vulnerability in the Wordfilter module 5.x before 5.x-1.1 and 6.x before 6.x-1.1 for Drupal allows remote authenticated users, with "administer words filtered" privileges, to inject arbitrary web script or HTML via the word list...

CVE-2010-2002

CVE-2010-2002 affects Drupal’s Wordfilter module (5.x before 5.x-1.1 and 6.x before 6.x-1.1). The vulnerability is a cross-site scripting (XSS) issue where remote authenticated users with the "administer words filtered" privilege can inject arbitrary web script or HTML via the word list. The avai...

CVE-2010-2002

Cross-site scripting XSS vulnerability in the Wordfilter module 5.x before 5.x-1.1 and 6.x before 6.x-1.1 for Drupal allows remote authenticated users, with "administer words filtered" privileges, to inject arbitrary web script or HTML via the word list...

Microsoft Visio DXF file insertion buffer overflow

Added: 05/07/2010 CVE: CVE-2010-1681 BID: 39836 Background Microsoft Visio is a component of the Microsoft Office suite which provides the capability to produce diagrams. Problem A buffer overflow vulnerability allows command execution when a user inserts a specially crafted DXF file into a Visio...

Microsoft SQL Server - Resolution Overflow (MS02-039) (Metasploit)

$Id: ms02039slammer.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

CVE-2002-1123

creationtimestamp| type| source ---|---|--- 2010-04-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16398 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/mssql/ms02056hello.rb 2025-02-06 03:13:37+00:00| seen|...

CVE-2002-1059

creationtimestamp| type| source ---|---|--- 2010-04-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16460 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ssh/securecrtssh1.rb 2025-02-06 03:13:37+00:00| seen|...

Microsoft Security Bulletin MS10-023 - Important Vulnerability in Microsoft Office Publisher Could Allow Remote Code Execution (981160)

Microsoft Security Bulletin MS10-023 - Important Vulnerability in Microsoft Office Publisher Could Allow Remote Code Execution 981160 Published: April 13, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Microsoft Office...

CVE-2010-0254

CVE-2010-0254 is a Visio memory‑corruption vulnerability in Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1/SP2. The flaw arises from improper validation of Visio file attributes, allowing a remote attacker to execute arbitrary code by opening a crafted Visio file. The issue is part of a ...

Microsoft Visio Remote Code Execution Vulnerabilities (980094)

This host is missing a critical security update according to Microsoft Bulletin MS10-028. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Security Update for Microsoft Publisher 2002 (KB980466)

A security vulnerability exists in Microsoft Publisher 2002 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft Visio 2002 (KB979364)

A security vulnerability exists in Microsoft Visio 2002 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Microsoft Visio Index Calculation Memory Corruption Remote Code Execution Vulnerability

Description Microsoft Visio is prone to a remote code-execution vulnerability. This issue arises when the application processes a malicious file. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Failed exploit attempts will result in a...

CVE-2002-2433

CVE-2002-2433 affects NWFTPD.nlm in the Novell NetWare FTP server, prior to version 5.03b. A crafted ABOR command can be used by remote authenticated users to trigger an abend/denial of service. Evidence across sources confirms the affected component and the impact as a DoS, with 5.03b cited as t...

CVE-2002-2432

CVE-2002-2432 describes an unspecified vulnerability in NWFTPD.nlm prior to 5.03b of the Novell NetWare FTP server, allowing remote attackers to cause a denial of service (abend) via a crafted username. The available connected documents corroborate this description across multiple sources (NVD, R...

Microsoft Excel DbOrParamQry memory corruption

Added: 03/11/2010 CVE: CVE-2010-0264 BID: 38555 OSVDB: 62823 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem A memory corruption vulnerability in Microsoft Excel allows command execution when a user...

Memory corruption

Microsoft Office Excel 2002 SP3 does not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Microsoft Office Excel Record Memory Corruption Vulnerability."...

Microsoft Excel DbOrParamQry对象解析内存破坏漏洞（MS10-017）

BUGTRAQ ID: 38555 CVE ID: CVE-2010-0264 Excel是微软Office套件中的电子表格工具。 Excel在解析包含有畸形DbOrParamQry记录的.XLS文件时存在内存破坏漏洞，用户受骗打开了恶意的.XLS文件就可能导致执行任意代码。 DbOrParamQry记录指定了DbQuery或ParamQry记录，具体取决于之前的记录。记录查询参数（ParamQry）偏移DCh包含有有关ODBC参数化查询的记录，格式如下： /----- Offset Name Size Contents 4 wTypeSql 2 Used for ODBC querie...