Integer overflow

Integer overflow in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers an improper allocation-size calculation, aka "Publisher Integer Overflow Vulnerability."...

Xxe

Microsoft Visio 2003 SP3 2007 SP3, and 2010 SP1 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, aka "XML External Entities Resolution Vulnerability."...

CVE-2013-1301

Microsoft Visio 2003 SP3 2007 SP3, and 2010 SP1 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, aka "XML External Entities Resolution Vulnerability."...

CVE-2013-1317

Integer overflow in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers an improper allocation-size calculation, aka "Publisher Integer Overflow Vulnerability."...

CVE-2013-1335

Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code via crafted shape data in a Word document, aka "Word Shape Corruption Vulnerability."...

CVE-2013-1321

Microsoft Publisher 2003 SP3 does not properly check the data type of an unspecified return value, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Return Value Validation Vulnerability."...

CVE-2013-1316

Microsoft Publisher 2003 SP3 does not properly validate the size of an unspecified array, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Negative Value Allocation Vulnerability."...

CVE-2013-1319

Microsoft Publisher 2003 SP3 does not properly check the return value of an unspecified method, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Return Value Handling Vulnerability."...

CVE-2013-1323

Microsoft Publisher (Office Publisher) Remote Code Execution vulnerability CVE-2013-1323 arises from incorrect NULL value handling when processing unspecified data items in Publisher files. Affected products, per sources, include Microsoft Publisher 2003 SP2/SP3, 2007 SP3, and 2010 SP1 (32/64‑bit...

CVE-2013-1319

CVE-2013-1319 concerns Microsoft Office Publisher, specifically Publisher 2003 SP3 (and related SPs/versions) where a return-value handling vulnerability in an unspecified method allows remote code execution when a user opens a crafted Publisher file. The vulnerability is part of a set of issues ...

CVE-2013-1321

CVE-2013-1321 affects Microsoft Publisher 2003 (including SP3) with a return-value handling/validation flaw that can allow remote code execution when a user opens a crafted Publisher file. Connected sources confirm multiple related vulnerabilities in the Publisher component (e.g., CVE-2013-1316 t...

CVE-2013-1320

Buffer overflow in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Buffer Overflow Vulnerability."...

CVE-2013-1318

Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers access to an invalid pointer, aka "Publisher Corrupt Interface Pointer Vulnerability."...

CVE-2013-1322

Microsoft Publisher 2003 SP3 does not properly check table range data, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Invalid Range Check Vulnerability."...

CVE-2013-1335

CVE-2013-1335 affects Microsoft Word 2003 SP3 and Word Viewer, where parsing of crafted shape data in Word documents can lead to remote code execution. The root cause is a memory-corruption/shape-data handling issue used to execute arbitrary code when a user opens a malicious Word file. Impact is...

CVE-2013-1334

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain...

CVE-2013-1327

Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers an improper memory allocation, aka "Publisher Signed Integer Vulnerability."...

CVE-2013-1322

Microsoft Publisher 2003 SP3 is affected by CVE-2013-1322, a remote code execution vulnerability caused by improper validation of table range data in Publisher files. A crafted Publisher document can trigger arbitrary code execution in the context of the logged-in user. The issue is part of a bro...

Microsoft Office Word Remote Code Execution Vulnerability (2830399)

This host is missing a important security update according to Microsoft Bulletin MS13-043. OpenVAS Vulnerability Test $Id: secpodwinwordms13-043.nasl 6065 2017-05-04 09:03:08Z teissa $ Microsoft Office Word Remote Code Execution Vulnerability 2830399 Authors: Antu Sanadi Copyright: Copyright c 20...

VMware vCenter Chargeback Manager ImageUploadServlet Arbitrary File Upload

This module exploits a code execution flaw in VMware vCenter Chargeback Manager, where the ImageUploadServlet servlet allows unauthenticated file upload. The files are uploaded to the /cbmui/images/ web path, where JSP code execution is allowed. The module has been tested successfully on VMware...