BrightStor ARCserve discovery service ASBRDCST.DLL buffer overflow

Added: 10/19/2006 CVE: CVE-2006-5143 BID: 20365 OSVDB: 29534 Background The BrightStor ARCserve Backup server includes a discovery service which listens on ports 41523/TCP and 41524/UDP. Problem A buffer overflow vulnerability in the ASBRDCST.DLL library allows remote attackers to execute arbitra...

BrightStor ARCserve discovery service ASBRDCST.DLL buffer overflow

Added: 10/19/2006 CVE: CVE-2006-5143 BID: 20365 OSVDB: 29534 Background The BrightStor ARCserve Backup server includes a discovery service which listens on ports 41523/TCP and 41524/UDP. Problem A buffer overflow vulnerability in the ASBRDCST.DLL library allows remote attackers to execute arbitra...

BrightStor ARCserve discovery service ASBRDCST.DLL buffer overflow

Added: 10/19/2006 CVE: CVE-2006-5143 BID: 20365 OSVDB: 29534 Background The BrightStor ARCserve Backup server includes a discovery service which listens on ports 41523/TCP and 41524/UDP. Problem A buffer overflow vulnerability in the ASBRDCST.DLL library allows remote attackers to execute arbitra...

BrightStor ARCserve discovery service ASBRDCST.DLL buffer overflow

Added: 10/19/2006 CVE: CVE-2006-5143 BID: 20365 OSVDB: 29534 Background The BrightStor ARCserve Backup server includes a discovery service which listens on ports 41523/TCP and 41524/UDP. Problem A buffer overflow vulnerability in the ASBRDCST.DLL library allows remote attackers to execute arbitra...

CVE-2006-5296

PowerPoint in Microsoft Office 2003 does not properly handle a container object whose position value exceeds the record length, which allows user-assisted attackers to cause a denial of service NULL dereference and application crash via a crafted PowerPoint .PPT file, as demonstrated by Nanika.pp...

CVE-2006-5296

CVE-2006-5296 is a PowerPoint parsing vulnerability in Microsoft PowerPoint (Office era) where a crafted PowerPoint PPT file can trigger a remote code execution through improper parsing of PPT records. The connected advisory (MS06-058 family) and related CPAI entries describe memory corruption ri...

Microsoft Office 2003 - '.PPT' Local Buffer Overflow (PoC)

!/bin/perl PPT 0day poc OFFICE 2003 full Patch 3001afbc 8b01 mov eax,ecx ds:0023:00000000=???????? 3001afbe 56 push esi 3001afbf ff5014 call dword ptr eax+0x14 try control ecx.............:P Maybe can Exploit [email protected] [email protected] www.chroot.org my $ppt=...

Microsoft Office 2003 - .PPT Local Buffer Overflow (PoC)

Microsoft Office 2003 - .PPT Local Buffer Overflow PoC !/bin/perl PPT 0day poc OFFICE 2003 full Patch 3001afbc 8b01 mov eax,ecx ds:0023:00000000=???????? 3001afbe 56 push esi 3001afbf ff5014 call dword ptr eax+0x14 try control ecx.............:P Maybe can Exploit [email protected] [email protected]...

Microsoft Security Bulletin MS06-065 Vulnerability in Windows Object Packager Could

Microsoft Security Bulletin MS06-065 Vulnerability in Windows Object Packager Could Allow Remote Execution 924496 Published: October 10, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity...

Microsoft Security Bulletin MS06-056 Vulnerability in ASP.NET 2.0 Could Allow Information Disclosure (922770)

Microsoft Security Bulletin MS06-056 Vulnerability in ASP.NET 2.0 Could Allow Information Disclosure 922770 Published: October 10, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows .NET Framework 2.0 Impact of Vulnerability: Information Disclosure Maximu...

Microsoft Security Bulletin MS06-059 Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (924164)

Microsoft Security Bulletin MS06-059 Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution 924164 Published: October 10, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Excel Impact of Vulnerability: Remote Code Execution Maximum Severity Rating...

ZDI-06-033: Microsoft Office Excel File Format DATETIME Record Parsing Vulnerability

ZDI-06-033: Microsoft Office Excel File Format DATETIME Record Parsing Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-033.html October 10, 2006 -- CVE ID: CVE-2006-2387 -- Affected Vendor: Microsoft -- Affected Products: Microsoft Office 2000 SP3 Microsoft Office XP SP3 Microsof...

Microsoft Security Bulletin MS06-064 Vulnerabilities in TCP/IP IPv6 Could Allow Denial of Service (922819)

Microsoft Security Bulletin MS06-064 Vulnerabilities in TCP/IP IPv6 Could Allow Denial of Service 922819 Published: October 10, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows. Impact of Vulnerability: Denial of Service Maximum Severity Rating: Low...

Microsoft Security Bulletin MS06-063 Vulnerability in Server Service Could Allow Denial of Service (923414)

Microsoft Security Bulletin MS06-063 Vulnerability in Server Service Could Allow Denial of Service 923414 Published: October 10, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Denial of Service Maximum Severity Rating: Importa...

Microsoft Security Bulletin MS06-057 Vulnerability in Windows Explorer Could Allow Remote Execution (923191)

Microsoft Security Bulletin MS06-057 Vulnerability in Windows Explorer Could Allow Remote Execution 923191 Published: October 10, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating:...

CVE-2006-3651

Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via a crafted mail merge file, a different vulnerability than CVE-2006-3647 and CVE-2006-4693...

CVE-2006-2387

Microsoft Excel contains a remote-code-execution vulnerability CVE-2006-2387 in the parsing of a malformed DATETIME record within XLS files. Affected products include Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, Excel Viewer 2003, and Microsoft Works Suite 2004–2006. The root cause is insuf...

CVE-2006-3651

CVE-2006-3651 is the Microsoft Word Mail Merge vulnerability. The connected documents confirm a memory handling flaw in Word’s mail-merge handling that can allow remote code execution when a specially crafted mail-merge file is opened. Affected products include Word 2000, 2002, 2003, and Word 200...

Security Update for Office 2003 (KB923272)

A security vulnerability exists in Microsoft Office 2003 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Microsoft Windows Object Packager Remote Code Execution Vulnerability

Description The Microsoft Windows Object Packager is prone to a remote code-execution vulnerability. This issue is due to how the affected component handles file extensions. This vulnerability could let an attacker spoof dialogues, enticing a victim into installing a file that has been...