Solaris 5.7 (sparc) : 112594-01

SunMC 2.1.1 Patch for the snmp security vu. Date this patch was last updated by Sun : Mar/04/02 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 5.6 (sparc) : 112593-01

SunMC 2.1.1 Patch for the snmp security vu. Date this patch was last updated by Sun : Mar/04/02 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

CVE-2009-0087: Undefined Security Weakness

Unspecified vulnerability in the Word 6 text converter in WordPad in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and the Word 6 text converter in Microsoft Office Word 2000 SP3 and 2002 SP3; allows remote attackers to execute arbitrary code via a crafted Word 6 file...

Microsoft PowerPoint File Parsing Remote Code Execution Vulnerability (967340)

This host is missing a critical security update according to Microsoft Bulletin MS09-017. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2009-0556

Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an an invalid index value that triggers memory corruption, as exploited in t...

Design/Logic Flaw

The linkimage function in linker/linker.c in the dynamic linker in Bionic in Open Handset Alliance Android 1.0 on the T-Mobile G1 phone does not properly handle file descriptors 0, 1, and 2 for a setgid program, which allows local users to create arbitrary files owned by certain groups, possibly ...

Security Update for Microsoft Visio 2002 (KB955654)

A security vulnerability exists in Microsoft Visio 2002 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Microsoft Visio Memory Corruption Remote Code Execution Vulnerability

Description Microsoft Visio is prone to a remote code-execution vulnerability because it fails to adequately handle user-supplied data. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Failed exploit attempts will result in a...

CVE-2009-0097: Undefined Security Weakness

Microsoft Office Visio 2002 SP2 and 2003 SP3 does not properly validate memory allocation for Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Memory Corruption Vulnerability."...

CVE-2002-2427

The security handler in GoAhead WebServer before 2.1.1 allows remote attackers to bypass authentication and obtain access to protected web content via "an extra slash in a URL," a different vulnerability than CVE-2002-1603...

CVE-2002-2429

webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service daemon crash via an HTTP POST request that contains a negative integer in the Content-Length header...

CVE-2002-2427

CVE-2002-2427 affects GoAhead WebServer prior to 2.1.1, where the security handler could be bypassed to access protected web content via an extra slash in the URL. The issue is documented as a separate vulnerability from CVE-2002-1603. Public records in NVD indicate a base score of 5.0 (Medium) w...

CVE-2002-2428

CVE-2002-2428 affects the GoAhead WebServer (webs.c) prior to version 2.1.4. A remote attacker can trigger a NULL pointer dereference and daemon crash by sending an HTTP POST with a Content-Length header but no body data, resulting in a denial of service. Affected product: GoAhead WebServer; vuln...

CVE-2002-2429

The vulnerability affects GoAhead WebServer, specifically the webs.c component, in versions before 2.1.4. A remote attacker can crash the daemon by sending an HTTP POST with a negative integer in the Content-Length header, leading to a denial of service. The issue is documented across multiple so...

CVE-2002-2430

CVE-2002-2430 affects GoAhead WebServer prior to version 2.1.1. The vulnerability is a denial of service caused by remote-triggered socket disconnects that terminate a request before it has been fully processed, leading to increased CPU usage. The available documents identify the affected product...

CVE-2002-2431

GoAhead WebServer before 2.1.4 is affected by a vulnerability in sockGen.c caused by incorrect use of socketInputBuffered, allowing remote attackers to trigger incorrect behavior via malicious code. The issue is documented across multiple feeds (NVD/Red Hat/CVE records) and is addressed in the Go...

Memory corruption

Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac...

Memory corruption

The FlexGrid ActiveX control in Microsoft Visual Basic 6.0, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, Office FrontPage 2002 SP3, and Office Project 2003 SP3 does not properly handle errors during access to incorrectly initialized objects, which allows remote attackers to execute arbitrary code v...

Format string

Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allow remote...

Memory corruption

Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1 allow remote attackers to execute arbitrary code via crafted control...