Format string

Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allow remote...

CVE-2008-4841

The WordPad Text Converter for Word 97 files in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted 1 .doc, 2 .wri, or 3 .rtf Word 97 file that triggers memory corruption, as exploited in the wild in December 2008. NOTE: ...

CVE-2008-4261

CVE-2008-4261 describes a stack-based buffer overflow in Microsoft Internet Explorer (IE) affecting IE 5.01 SP4, IE 6 SP1 on Windows 2000, and IE 6 on Windows XP/Server 2003. The vulnerability stems from improper handling of extraneous data tied to an embedded object in a web page, enabling remot...

PT-2008-5544 · Microsoft · Internet Explorer +2

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 5.01 SP4, 6 SP1 Microsoft Internet Explorer version 6 on Windows XP and Server 2003 Description: The issue arises from a stack-based buffer overflow that occurs when Microsoft Internet Explorer does not...

Microsoft Security Bulletin MS08-071 – Critical Vulnerabilities in GDI Could Allow Remote Code Execution (956802)

Microsoft Security Bulletin MS08-071 – Critical Vulnerabilities in GDI Could Allow Remote Code Execution 956802 Published: December 9, 2008 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in GDI. Exploitation of either of the...

Microsoft Internet Explorer HTML对象远程代码执行漏洞(MS08-073)

Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the underlying computer. Failed attacks wi...

Vulnerabilities in GDI Could Allow Remote Code Execution (956802)

This host is missing a critical security update according to Microsoft Bulletin MS08-071. OpenVAS Vulnerability Test $Id: secpodms08-071.nasl 5934 2017-04-11 12:28:28Z antu123 $ Vulnerabilities in GDI Could Allow Remote Code Execution 956802 Authors: Chandan S Updated By: Madhuri D on 2010-12-07 ...

MS08-076: Vulnerabilities in Windows Media Components Could Allow Remote Code Execution (959807)

The remote host is running Windows Media Player/Components. There is a vulnerability in the remote version of this software that may allow an attacker to execute arbitrary code on the remote host thru flaws in ISATAP and SPN. C Tenable Network Security, Inc. include"compat.inc"; if description...

Microsoft Security Bulletin MS08-070 - Critical Vulnerabilities in Visual Basic 6.0 Runtime Extended Files (ActiveX Controls) Could Allow Remote Code Execution (932349)

Microsoft Security Bulletin MS08-070 - Critical Vulnerabilities in Visual Basic 6.0 Runtime Extended Files ActiveX Controls Could Allow Remote Code Execution 932349 Published: December 9, 2008 Version: 1.0 General Information Executive Summary This security update resolves five privately reported...

Cumulative Security Update for Internet Explorer (958215)

This host is missing a critical security update according to Microsoft Bulletin MS08-073. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Vulnerabilities in Windows Media Components Could Allow Remote Code Execution (959807)

This host is missing a critical security update according to Microsoft Bulletin MS08-076. OpenVAS Vulnerability Test $Id: secpodms08-076.nasl 5863 2017-04-05 07:38:11Z antu123 $ Vulnerabilities in Windows Media Components Could Allow Remote Code Execution 959807 Authors: Chandan S Updated By:...

IE7 0DAY exploit code has been in hanging horse attack by using vulnerability warning-the black bar safety net

Source: know security In view of the vulnerability of the risk, as the United States of Microsoft in the domestic security service provider, we have the first announcement and the analysis of the vulnerability details and submit it to the United States, Microsoft the relevant departments, there i...

Microsoft Windows GDI WMF Integer Overflow Vulnerability

Description The GDI component of Microsoft Windows is prone to an integer-overflow vulnerability that may be triggered by a malicious WMF Windows Metafile image. A successful exploit will let the attacker execute arbitrary code in the context of the currently logged-in user. Technologies Affected...

Microsoft Windows 'UnhookWindowsHookEx' Local DoS Vulnerability

This Microsoft Windows host is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows 'UnhookWindowsHookEx' Local DoS Vulnerability

This Microsoft Windows host is prone to denial of service vulnerability. The flaw is due to error in 'UnhookWindowsHookEx' function. This can be exploited to cause system hang. OpenVAS Vulnerability Test $Id: secpodmswinlocaldosvuln900178.nasl 7293 2017-09-27 08:49:48Z cfischer $ Description:...

CA ARCserve Backup for Laptops and Desktops LGServer password integer overflow

Added: 11/28/2008 CVE: CVE-2007-5004 BID: 24348 OSVDB: 41352 Background BrightStor ARCserve Backup for Laptops and Desktops is an automated backup solution optimized for low-bandwidth, intermittent network connections. Problem An integer overflow vulnerability allows remote attackers to execute...

CA ARCserve Backup for Laptops and Desktops LGServer password integer overflow

Added: 11/28/2008 CVE: CVE-2007-5004 BID: 24348 OSVDB: 41352 Background BrightStor ARCserve Backup for Laptops and Desktops is an automated backup solution optimized for low-bandwidth, intermittent network connections. Problem An integer overflow vulnerability allows remote attackers to execute...

CA ARCserve Backup for Laptops and Desktops LGServer password integer overflow

Added: 11/28/2008 CVE: CVE-2007-5004 BID: 24348 OSVDB: 41352 Background BrightStor ARCserve Backup for Laptops and Desktops is an automated backup solution optimized for low-bandwidth, intermittent network connections. Problem An integer overflow vulnerability allows remote attackers to execute...

CA ARCserve Backup for Laptops and Desktops LGServer password integer overflow

Added: 11/28/2008 CVE: CVE-2007-5004 BID: 24348 OSVDB: 41352 Background BrightStor ARCserve Backup for Laptops and Desktops is an automated backup solution optimized for low-bandwidth, intermittent network connections. Problem An integer overflow vulnerability allows remote attackers to execute...

GoodTech SSH Server SFTP buffer overflow

Added: 11/28/2008 CVE: CVE-2008-4726 BID: 31879 OSVDB: 49249 Background GoodTech SSH Server is an SSH Server providing secure remote console, secure file transfer, and secure port forwarding capabilities for Windows platforms. Problem Buffer overflow vulnerabilities in GoodTech SSH Server allow...