Code injection

jabberd2 before 2.2.14 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564...

CVE-2011-1755

jabberd2 before 2.2.14 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564...

CVE-2011-1756

Removed by vendor...

CVE-2011-2188

LuaExpat before 1.2.0 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564...

CVE-2011-1869

The Distributed File System DFS implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote DFS servers to cause a denial of service system hang via a crafted referr...

CVE-2011-1276

Buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code or cau...

CVE-2011-1868

The Distributed File System DFS implementation in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate fields in DFS responses, which allows remote DFS servers to execute arbitrary code via a crafted response, aka "DFS Memory Corruption Vulnerability."...

Integer overflow

Integer underflow in the OLE Automation protocol implementation in VBScript.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via ...

CVE-2011-1868

The CVE-2011-1868 issue affects Microsoft Windows DFS (Distributed File System) implementations on Windows XP SP2/SP3 and Windows Server 2003 SP2. The root cause is improper validation of fields in DFS responses, allowing remote DFS servers to cause arbitrary code execution via crafted responses ...

CVE-2011-1868

The Distributed File System DFS implementation in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate fields in DFS responses, which allows remote DFS servers to execute arbitrary code via a crafted response, aka "DFS Memory Corruption Vulnerability."...

CVE-2011-1264

Cross-site scripting XSS vulnerability in Active Directory Certificate Services Web Enrollment in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, R2, and R2 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "Active Directory...

Microsoft Word 'wdGetApplicationObject()'远程代码执行漏洞

Bugtraq ID: 48261 Microsoft word是一款微软开发的文字处理系统。 Microsoft Word wdGetApplicationObject函数存在一个错误，攻击者构建特制的Word文件，诱使用户解析，可导致以用户安全上下文执行任意代码。 Microsoft Word 2010 Microsoft Word 2007 SP2 Microsoft Word 2007 SP1 Microsoft Word 2007 Microsoft Word 2003 SP3 Microsoft Word 2003 SP2 Microsoft Word 2003 SP1...

Microsoft Excel存在多个安全漏洞

Bugtraq ID: 48164, 48161, 48160, 48159, 48157, 48162, 48163 CVE ID：CVE-2011-1272 CVE-2011-1273 CVE-2011-1274 CVE-2011-1275 CVE-2011-1276 CVE-2011-1277 CVE-2011-1278 CVE-2011-1279 Microsoft Excel是一款微软开发的电子表格处理程序。 Microsoft Excel存在多个安全漏洞，允许攻击者以应用程序上下文执行任意代码或使应用程序崩溃。 -当解析某些记录结构时存在输入验证错误，可被利用破坏内存。...

PT-2011-2536 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through R2 SP1 Microsoft Windows 7 versions Gold through SP1...

PT-2011-3455 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through R2 SP1 Microsoft Windows 7 versions Gold through SP1...

Microsoft对象链接和嵌入(OLE)自动化WMF文件远程代码执行漏洞

Bugtraq ID: 48174 CVE ID：CVE-2011-0658 Microsoft Object Linking and EmbeddingOLE是许多Windows产品所具有的对象技术，它包含网络连接功能，以便用户能共享对象。 在解析Windows Metafile WMF图像时对象链接和嵌入OLE自动化oleaut32.dll存在一个错误，构建恶意WEB页，诱使用户解析，可导致任意代码执行 Microsoft Windows XP Tablet PC Edition SP3 Microsoft Windows XP Tablet PC Edition SP2...

PT-2011-3434 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Windows XP SP2 Windows Server 2003 SP2 Windows Vista SP1 and SP2 Windows Server 2008 Gold, SP2, R2, and R2 SP1 Windows 7 Gold and SP1 on 64-bit platforms Description: A remote code execution issue exists due to improper parsing of specially...

Microsoft SMB Client Remote Code Execution Vulnerabilities (2536276)

This host is missing a critical security update according to Microsoft Bulletin MS11-043. OpenVAS Vulnerability Test $Id: secpodms11-043.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft SMB Client Remote Code Execution Vulnerabilities 2536276 Authors: Veerendra GG Updated By: Antu Sanadi on...

Microsoft SMB Client Remote Code Execution Vulnerabilities (2536276)

This host is missing a critical security update according to Microsoft Bulletin MS11-043. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Distributed File System Remote Code Execution Vulnerabilities (2535512)

This host is missing a critical security update according to Microsoft Bulletin MS11-042. OpenVAS Vulnerability Test $Id: secpodms11-042.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Distributed File System Remote Code Execution Vulnerabilities 2535512 Authors: Veerendra GG Copyright: Copyright ...