CVE-2012-1821

The Network Threat Protection module in the Manager component in Symantec Endpoint Protection SEP 11.0.600x through 11.0.700x on Windows Server 2003 allows remote attackers to cause a denial of service web-server outage, or daemon crash or hang via a flood of packets that triggers automated...

Novell Client 4.91 SP3/4 Privilege Escalation

Novell Client 4.91 SP3/4 Privilege escalation exploit Download link: http://download.novell.com/Download?buildid=SyZ1G2ti7wU SecurityFocus: http://www.securityfocus.com/bid/27209/info CVE: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5762 Patch:...

Symantec Endpoint Protection Manager 11.x Denial of Service

SUMMARY Versions of Symantec Endpoint Protection Manager 11.0 running the Network Threat Protection module on Windows Server 2003 are susceptible to a Denial of ServiceDoS. Successful exploitation could potentially result in the system hosting Symantec Endpoint Protection Manager becoming...

Novell Client 4.91 SP4 - Local Privilege Escalation

Novell Client 4.91 SP4 - Local Privilege Escalation Novell Client 4.91 SP3/4 Privilege escalation exploit Download link: http://download.novell.com/Download?buildid=SyZ1G2ti7wU SecurityFocus: https://www.securityfocus.com/bid/27209/info CVE:...

MS11-013: Vulnerabilities in Kerberos could allow elevation of privilege

Resolves a vulnerability that could allow for the elevation of privilege on a computer that is running Windows XP, Windows Server 2003, Windows 7 or Windows Server 2008 R2.IntroductionMicrosoft has released security bulletin MS11-013. To view the complete security bulletin, visit one of the...

Microsoft VPN ActiveX Control Remote Code Execution Vulnerability (2695962)

Cisco Adaptive Security Appliance is prone to ActiveX control remote code execution vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2012-0165

GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2 and Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1 does not properly validate record types in EMF images, which allows remote attackers to execute arbitrary code via a crafted image, aka "GDI+ Record Type Vulnerability."...

Memory corruption

Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel...

Memory corruption

Microsoft Word 2003 SP3 and 2007 SP2 and SP3, Office 2008 and 2011 for Mac, and Office Compatibility Pack SP2 and SP3 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted RTF data, aka "RTF Mismatch Vulnerability."...

Microsoft Excel内存破坏远程代码执行漏洞(CVE-2012-0142)(MS12-030)

BUGTRAQ ID: 53373 CVE ID: CVE-2012-0142 Excel是微软公司的办公软件Microsoft office的组件之一，是由Microsoft为Windows和Apple Macintosh操作系统的电脑而编写和运行的一款试算表软件。 Microsoft Excel在实现上存在内存破坏导致的远程代码执行漏洞，攻击者通过诱使用户打开特制的Excel文件，利用此漏洞以当前用户权限执行任意代码。 0 Microsoft Office Excel 2003 Microsoft Office Office for Mac 2011 Microsoft Office...

Microsoft Excel SXLI记录内存破坏远程代码执行漏洞(CVE-2012-0184)(MS12-030)

BUGTRAQ ID: 53375 CVE ID: CVE-2012-0184 Excel是微软公司的办公软件Microsoft office的组件之一，是由Microsoft为Windows和Apple Macintosh操作系统的电脑而编写和运行的一款试算表软件。 Microsoft Excel在实现上存在远程代码执行漏洞，攻击者通过诱使用户打开特制的Excel文件，利用此漏洞以当前用户权限执行任意代码。 0 Microsoft Office Excel 2003 Microsoft Office Office for Mac 2011 Microsoft Office Office...

Microsoft Office Word Remote Code Execution Vulnerability (2680352)

This host is missing a critical security update according to Microsoft Bulletin MS12-029. OpenVAS Vulnerability Test $Id: secpodms12-029.nasl 6533 2017-07-05 08:41:34Z santu $ Microsoft Office Word Remote Code Execution Vulnerability 2680352 Authors: Antu Sanadi Copyright: Copyright c 2012 SecPod...

CVE-2012-0165

GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2 and Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1 does not properly validate record types in EMF images, which allows remote attackers to execute arbitrary code via a crafted image, aka "GDI+ Record Type Vulnerability."...

CVE-2012-0167

CVE-2012-0167 is a heap-based buffer overflow in the Office GDI+ library affecting Microsoft Office 2003 SP3 and 2007 SP2/SP3. It allows remote attackers to execute arbitrary code by crafting an EMF image embedded in an Office document, i.e., the “GDI+ Heap Overflow Vulnerability.” The issue is t...

Microsoft Word RTF数据处理远程内存破坏漏洞(MS12-029)

BUGTRAQ ID: 53344 CVE ID: CVE-2012-0183 Microsoft Word属于办公软件是微软公司的一个文字处理器应用程序。最初是由Richard Brodie为了运行DOS的IBM计算机而在1983年编写的。 Microsoft Office Word在解析RTF数据时的错误，可被利用破坏内存，以当前用户权限执行任意代码，从而控制用户系统。 0 Microsoft Word 2008 for Mac Microsoft Word 2007 Microsoft Word 2003 Microsoft Word 2001 for Mac 厂商补丁：...

Microsoft Excel 内存破坏远程代码执行漏洞(CVE-2012-0143)(MS12-030)

BUGTRAQ ID: 53374 CVE ID: CVE-2012-0143 Excel是微软公司的办公软件Microsoft office的组件之一，是由Microsoft为Windows和Apple Macintosh操作系统的电脑而编写和运行的一款试算表软件。 Microsoft Excel在实现上存在远程代码执行漏洞，攻击者通过诱使用户打开特制的Excel文件，利用此漏洞以当前用户权限执行任意代码。 0 Microsoft Office Excel 2003 Microsoft Office Office for Mac 2011 Microsoft Office Office...

CORE-2011-1123: Windows Kernel ReadLayoutFile Heap Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Windows Kernel ReadLayoutFile Heap Overflow 1. Advisory Information Title: Windows Kernel ReadLayoutFile Heap Overflow Advisory ID: CORE-2011-1123 Advisory URL:...

CVE-2012-0180

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly handle user-mode input passed to kernel mode for 1 windows and 2...

CVE-2012-0165

CVE-2012-0165 targets GDI+ EMF processing in Windows and Office, where EMF record type validation is insufficient, enabling remote code execution via a crafted image. Affected: Windows Vista SP2, Windows Server 2008 SP2, and Office 2003 SP3, Office 2007 SP2/SP3, and Office 2010 Gold/SP1 (GDI+). I...

Microsoft GDI+ EMF图形处理远程代码执行漏洞(MS12-034)

BUGTRAQ ID: 53347 CVE ID: CVE-2012-0165 Windows是流行的计算机操作系统。 GDI+ 处理特制 EMF 图像的验证的方式中存在一个远程执行代码漏洞。如果用户打开特制的 EMF 图像文件，该漏洞可能允许远程执行代码。成功利用此漏洞的攻击者可以完全控制受影响的系统。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。那些帐户被配置为拥有较少系统用户权限的用户比具有管理用户权限的用户受到的影响要小。 0 Microsoft Office 2003 Microsoft Office Office 2010 Microsoft...