Microsoft Office Excel Remote Code Execution Vulnerabilities (2027452)

This host is missing a critical security update according to Microsoft Bulletin MS10-038. OpenVAS Vulnerability Test $Id: secpodms10-038.nasl 6538 2017-07-05 11:38:27Z cfischer $ Microsoft Office Excel Remote Code Execution Vulnerabilities 2027452 Authors: Madhuri D Copyright: Copyright c 2010...

Microsoft Windows OpenType Compact Font Format Driver Privilege Escalation Vulnerability (980218)

This host is missing an important security update according to Microsoft Bulletin MS10-037. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2010-0484

The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 "do not properly validate changes in certain kernel objects," which allows local users to execute arbitrary code via vectors related to...

Immunity Canvas: MS10_032

Name| ms10032 ---|--- CVE| CVE-2010-0485 Exploit Pack| CANVAS Description| ms10032 Notes| CVE Name: CVE-2010-0485 VENDOR: Microsoft Notes: This is a local kernel vulnerability for XP, 2003, and Vista. It will only work on 32 bit platform. The binary will not trigger the bug if running on a 64 bit...

Input validation

Windows Shell and WordPad in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7; Microsoft Office XP SP3; Office 2003 SP3; and Office System 2007 SP1 and SP2 do not properly validate COM objects during...

CVE-2010-1263

CVE-2010-1263 is a remote code execution vulnerability in the COM object validation during instantiation in Windows Shell and WordPad. The issue affects Windows XP SP3, Windows XPx64 SP2, Windows Server 2003 SP2 and x64 Itanium editions, Windows Vista SP1/SP2, Windows Server 2008 SP2, and Windows...

CVE-2010-1263

Windows Shell and WordPad in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7; Microsoft Office XP SP3; Office 2003 SP3; and Office System 2007 SP1 and SP2 do not properly validate COM objects during...

Security Update for Microsoft Office 2003 (KB982311)

A security vulnerability exists in Microsoft Office 2003 that could allow remote code execution. This update resolves that vulnerability...

Security Update for Microsoft Office Word 2003 (KB982134)

A security vulnerability exists in Microsoft Office Word 2003 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Microsoft Windows Media Decompression (CVE-2010-1880) Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability when handling compressed media files. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file. A successful exploit may allow arbitrary code to run in the context of the currently...

Microsoft Windows Kernel 'Win32k.sys' TrueType Font Parsing Code Execution Vulnerability

Description Microsoft Windows is prone to a local code-execution vulnerability. This issue affects the Windows kernel and arises when TrueType fonts are parsed. Successfully exploiting this issue will allow an attacker to execute arbitrary code with kernel-level privileges, completely compromisin...

PT-2010-2962 · Microsoft · Sharepoint Services +4

Name of the Vulnerable Software and Affected Versions: Microsoft Office InfoPath versions 2003 SP3 through 2007 SP2 Office SharePoint Server versions 2007 SP1 through 2007 SP2 SharePoint Services versions 3.0 SP1 through 3.0 SP2 Internet Explorer version 8 Description: The issue is related to a...

Microsoft Windows Kernel 'Win32k.sys' Window Creation Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel when a new window is created. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromis...

Microsoft Windows Kernel 'Win32k.sys' Data Validation Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers. Fail...

Microsoft Windows COM Object Validation Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious Excel, PowerPoint, Publisher, Visio, Wordpad, or Word file. Successful exploits would allow the attacker to execute arbitrary code in the...

Microsoft Windows Media Decompression (CVE-2010-1879) Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability when handling compressed media files. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file. A successful exploit may allow arbitrary code to run in the context of the currently...

HP OpenView Network Node Manager getnnmdata.exe CGI Hostname buffer overflow

Added: 05/28/2010 CVE: CVE-2010-1555 BID: 40072 OSVDB: 64976 Background HP OpenView Network Node Manager is network availability and performance management software. Problem A buffer overflow vulnerability in Network Node Manager allows remote attackers to execute arbitrary commands by sending a...

HP OpenView Network Node Manager getnnmdata.exe CGI Hostname buffer overflow

Added: 05/28/2010 CVE: CVE-2010-1555 BID: 40072 OSVDB: 64976 Background HP OpenView Network Node Manager is network availability and performance management software. Problem A buffer overflow vulnerability in Network Node Manager allows remote attackers to execute arbitrary commands by sending a...

HP OpenView Network Node Manager getnnmdata.exe CGI Hostname buffer overflow

Added: 05/28/2010 CVE: CVE-2010-1555 BID: 40072 OSVDB: 64976 Background HP OpenView Network Node Manager is network availability and performance management software. Problem A buffer overflow vulnerability in Network Node Manager allows remote attackers to execute arbitrary commands by sending a...

CVE-2010-2091

Microsoft Outlook Web Access OWA 8.2.254.0, when Internet Explorer 7 on Windows Server 2003 is used, does not properly handle the id parameter in a Folder IPF.Note action to the default URI, which might allow remote attackers to obtain sensitive information or conduct cross-site scripting XSS...