Microsoft Excel Could Allow Remote Code Execution Vulnerabilities (954066)

This host is missing critical security update according to Microsoft Bulletin MS08-043. OpenVAS Vulnerability Test $Id: secpodms08-043900028.nasl 6538 2017-07-05 11:38:27Z cfischer $ Description: Microsoft Excel Could Allow Remote Code Execution Vulnerabilities 954066 Authors: Chandan S Copyright...

Cumulative Security Update for Internet Explorer (953838)

This host is missing critical security update according to Microsoft Bulletin MS08-045. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows IPsec信息泄露漏洞（MS08-047）

BUGTRAQ ID: 30634 CVECAN ID: CVE-2008-2246 Microsoft Windows是微软发布的非常流行的操作系统。 在从Windows Server 2003域向Windows Server 2008域导入IPsec策略时，系统可能会忽略IPsec策略，这样会以明文传输本应加密的数据。导致泄露在网络上本应被加密的信息，查看网络通讯的攻击者能够查看并且可能修改通讯的内容。请注意此漏洞不允许攻击者直接执行代码或提升他们的用户权限，但可能用于收集有用的信息，从而试图进一步入侵受影响的系统或网络。 Microsoft Windows Vista SP1...

CVE-2008-2245

Heap-based buffer overflow in the InternalOpenColorProfile function in mscms.dll in Microsoft Windows Image Color Management System MSCMS in the Image Color Management ICM component on Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code...

CVE-2008-0121

A "memory calculation error" in Microsoft PowerPoint Viewer 2003 allows remote attackers to execute arbitrary code via a PowerPoint file with an invalid picture index that triggers memory corruption, aka "Memory Calculation Vulnerability."...

CVE-2008-0120

CVE-2008-0120 concerns Microsoft PowerPoint Viewer 2003. The issue is an integer overflow in the handling of embedded CString objects within a PowerPoint file’s picture index, leading to remote code execution if a user opens a malformed file. Technical sources (NVD, SAINT/OSVDB mirrors, and OpenV...

iDefense Security Advisory 08.12.08: Microsoft Windows Color Management Module Heap Buffer Overflow Vulnerability

iDefense Security Advisory 08.12.08 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 12, 2008 I. BACKGROUND Microsoft Windows Color Management Module provides consistent color mappings between different devices and applications. It is also used to transform colors between color spaces...

CVE-2008-0121

Microsoft PowerPoint Viewer 2003 is affected by CVE-2008-0121 due to a memory calculation error when processing certain records (invalid picture index) in PowerPoint files, leading to remote code execution via crafted presentations. iDefense and related advisories describe an out-of-bounds/ memor...

Design/Logic Flaw

Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of a PICT file, which allows remote attackers to execute arbitrary code via a crafted PICT file with an invalid bitsperpixel field, aka the "PICT Filter Parsing Vulnerability," a...

CVE-2008-3019

CVE-2008-3019 describes a remote code execution vulnerability in Microsoft Office filters related to malformed Encapsulated PostScript (EPS) handling. A crafted EPS file could allow code execution when opened with affected Office products: Office 2000 SP3, XP SP3, and 2003 SP2, plus the Office Co...

Security Update for Microsoft Office Excel Viewer 2003 (KB951589)

A security vulnerability exists in Microsoft Office Excel Viewer 2003 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Microsoft Security Bulletin MS08-048 - Important Security Update for Outlook Express and Windows Mail (951066)

Microsoft Security Bulletin MS08-048 - Important Security Update for Outlook Express and Windows Mail 951066 Published: August 12, 2008 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Outlook Express and Windows Mail. The...

Microsoft Windows Event System Array Index Verification Remote Code Execution Vulnerability

Description Microsoft Windows Event System is prone to a remote code-execution vulnerability. Remote authenticated attackers can exploit this issue to execute arbitrary code with SYSTEM privileges. A successful attack can result in a full compromise of the affected computer. Technologies Affected...

Microsoft Security Bulletin MS08-042 – Important Vulnerability in Microsoft Word Could Allow Remote Code Execution (955048)

Microsoft Security Bulletin MS08-042 – Important Vulnerability in Microsoft Word Could Allow Remote Code Execution 955048 Published: August 12, 2008 Version: 1.0 General Information Executive Summary This security update resolves a publicly reported vulnerability in Microsoft Word. This...

Microsoft Security Bulletin MS08-051 – Critical Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution (949785) Microsoft Security Bulletin MS08-051 – Critical

Microsoft Security Bulletin MS08-051 – Critical Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution 949785 Published: August 12, 2008 Version: 1.0 General Information Executive Summary This security update resolves three privately reported vulnerabilities in Microsoft Office...

Microsoft Security Bulletin MS08-049 – Important Vulnerabilities in Event System Could Allow Remote Code Execution (950974)

Microsoft Security Bulletin MS08-049 – Important Vulnerabilities in Event System Could Allow Remote Code Execution 950974 Published: August 12, 2008 Version: 1.0 General Information Executive Summary This update resolves two privately reported vulnerabilities in Microsoft Windows Event System tha...

Microsoft Windows Image Color Management Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability because of a flaw in the Microsoft Color Management System MSCMS module of the Image Color Management System ICM. An attacker could exploit this issue by enticing a victim to open a malicious image file. Successfully...

Microsoft Windows Event System User Subscription Request Remote Code Execution Vulnerability

Description Microsoft Windows Event System is prone to a remote code-execution vulnerability. Remote authenticated attackers can exploit this issue to execute arbitrary code with SYSTEM privileges. A successful attack can result in a full compromise of the affected computer. Technologies Affected...

ZENworks 6.5 Desktop/Server Management Remote Stack Overflow

No description provided by source. package Msf::Exploit::zenworksdesktopagent; use strict; use base "Msf::Exploit"; use Pex::Text; my $advanced = ; my $info = 'Name' = 'ZENworks 6.5 Desktop/Server Management Remote Stack Overflow', 'Version' = '$Revision: 1.1 $', 'Authors' = 'Anonymous', , 'Arch'...

MS Windows Plug-and-Play Service Remote Universal Exploit (MS05-039)

No description provided by source. / HOD-ms05039-pnp-expl.c: 2005-08-10: PUBLIC v.0.2 Copyright c 2005 houseofdabus. MS05-039 Microsoft Windows Plug-and-Play Service Remote Overflow Universal Exploit + no crash shellcode .:: houseofdabus ::...