Design/Logic Flaw

Microsoft Office 2003 allows user-assisted remote attackers to cause a denial of service application crash by attempting to insert a corrupted WMF file...

CVE-2007-1238

Microsoft Office 2003 allows user-assisted remote attackers to cause a denial of service application crash by attempting to insert a corrupted WMF file...

CVE-2007-1239

Microsoft Excel 2003 does not properly parse .XLS files, which allows remote attackers to cause a denial of service application crash via a file with a 1 corrupted XML format or a 2 corrupted XLS format, which triggers a NULL pointer dereference...

CVE-2007-1238

Microsoft Office 2003 is affected by CVE-2007-1238 where a user-assisted remote attacker can cause an application crash (DoS) by attempting to insert a corrupted WMF file. The root cause is the handling of malformed WMF content, leading to denial of service in affected Office components. The avai...

CVE-2007-1239

Microsoft Excel 2003 contains a vulnerability in parsing .XLS files; a file with corrupted XML format or corrupted XLS format triggers a NULL pointer dereference, allowing remote attackers to cause a denial-of-service (application crash). The affected component is Excel’s workbook parsing for XLS...

Microsoft Windows OLE Dialog内存破坏漏洞（MS07-011）

Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows提供的OLE Dialog组件中存在一个远程执行代码漏洞。当用户与RTF文件中的畸形嵌入OLE对象进行交互时，就可能导致内存破坏，在用户系统上执行任意代码。 成功利用此漏洞的攻击者可以完全控制受影响的系统。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。那些帐户被配置为拥有较少系统用户权限的用户比具有管理用户权限的用户受到的影响要小。要利用此漏洞，需要进行用大量的户交互。 Microsoft Windows XP SP2 Microsoft Windows...

Windows 图像捕获服务中的漏洞可能允许特权提升(MS07-007)

在 Windows XP Service Pack 2 内，Window 图像捕获启动应用程序的方式中存在一个特权提升漏洞。 已登录的用户可通过利用此漏洞完全控制系统。 Microsoft Windows 2000 Service Pack 4 Microsoft Windows XP Professional x64 Edition Microsoft Windows Server 2003 和 Microsoft Windows Server 2003 Service Pack 1 Microsoft Windows Server 2003（用于基于 Itanium 的系统）和...

CVE-2003-1320

SonicWALL firmware before 6.4.0.1 is affected by CVE-2003-1320, where crafted IKE responses (notably large SPI, many payloads, or long payload) can cause denial of service and potentially allow arbitrary code execution. Impact: DoS with possible code execution; remediation is upgrading to firmwar...

Windows 2 0 0 3 Enterprise Edition and IIS6 . ASP directory to perform defect-vulnerability warning-the black bar safety net

Writing this article a few days ago I found a IIS6 greater vulnerability,to make me happy for a whole 2 to 4 hours. It is a pity that vulnerability is my manual configuration. Method to achieve is the ASP drop out instead of JPG drop out,the JPG is copied to IIS publish directory,find JPG in the...

Design/Logic Flaw

Microsoft Windows Explorer on Windows XP and 2003 allows remote user-assisted attackers to cause a denial of service crash via a malformed WMF file, which triggers the crash when the user browses the folder...

CVE-2007-1090

CVE-2007-1090 affects Microsoft Windows Explorer on Windows XP and Windows Server 2003. A vulnerability exists in handling a malformed WMF file, which can cause a denial-of-service (crash) when a user browses a folder, reported as remote user‑assisted. Core details indicate the flaw is triggered ...

Microsoft HTML帮助ActiveX控件远程代码执行漏洞（MS07-008）

Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows的HTML帮助ActiveX控件中存在远程执行代码漏洞。攻击者可以通过构建特制网页来利用此漏洞，如果用户访问该网页，则有可能允许远程执行代码。成功利用此漏洞的攻击者可以完全控制受影响的系统。 Microsoft Windows XP SP2 Microsoft Windows Server 2003 SP1 Microsoft Windows Server 2003 Microsoft Windows 2000SP4 临时解决方法： 暂时禁止在Internet...

Code injection

Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac does not correctly check the properties of certain documents and warn the user of macro content, which allows user-assisted remote attackers to execute arbitrary code...

CVE-2007-0208

CVE-2007-0208 is the Microsoft Word Macro Vulnerability described in MS07-014. Word 2000 SP3, Word 2002/XP SP3, Word 2003 SP2, Works 2004–2006, and Word 2004 for Mac are affected by a flaw where Word does not properly validate the document’s properties, failing to display the macro security warni...

Hardcoded credentials

The hardware detection functionality in the Windows Shell in Microsoft Windows XP SP2 and Professional, and Server 2003 SP1 allows local users to gain privileges via an unvalidated parameter to a function related to the "detection and registration of new hardware."...

CVE-2007-0211

CVE-2007-0211 concerns a privilege-escalation vulnerability in the Windows Shell Hardware Detection component. The issue arises from an unvalidated parameter used during hardware detection and initialization, which could allow a local, authenticated user to gain complete control over the affected...

CVE-2007-0025

The MFC component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 and Visual Studio .NET 2000, 2002 SP1, 2003, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code via an RTF file with a malformed OLE object that triggers memory corruption. NOTE: this might be due to a...

Security Update for Office 2003 (KB920813)

Microsoft has released a security update for Microsoft Office 2003. This update addresses a vulnerability that could enable malicious code execution. Additionally, other fixes may be included in the update...

Security Update for Office 2003 (KB929064)

A security vulnerability exists in Microsoft Office 2003 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Microsoft HTML Help ActiveX Control Remote Code Execution Vulnerability

Description The Microsoft HTML Help ActiveX control is prone to a remote code-execution vulnerability. An attacker could exploit this issue to execute code in the context of the user visiting a malicious web page. Technologies Affected Avaya Agent Access Avaya Basic Call Management System Reporti...