CVE-2013-2007

The CVE-2013-2007 issue affects qemu-kvm with the qemu guest agent (qemu-ga) when used by Xen, where in daemon mode it creates certain files with weak/world-writable permissions. This allows a local unprivileged user to read/write those files. The vulnerability is tied to Qemu 1.4.1 and earlier; ...

CVE-2007-6746

CVE-2007-6746 affects telepathy-idle before 0.1.15, where SSL certificate validation is incomplete: (1) issuer trusted-CA check bypassed, (2) hostname not strictly validated against CN, and (3) certificate expiration date not verified. This enables potential MITM attacks by presenting arbitrary v...

Code injection

Microsoft Communicator 2007 R2, Lync 2010, Lync 2010 Attendee, and Lync Server 2013 do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via an invitation that triggers access to a deleted object, aka "Lync RCE Vulnerability."...

Xxe

Microsoft Visio 2003 SP3 2007 SP3, and 2010 SP1 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, aka "XML External Entities Resolution Vulnerability."...

CVE-2013-1301

Microsoft Visio 2003 SP3 2007 SP3, and 2010 SP1 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, aka "XML External Entities Resolution Vulnerability."...

Microsoft Lync Remote Code Execution Vulnerability (2834695)

This host is missing an important security update according to Microsoft Bulletin MS13-041. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Fedora Update for telepathy-idle FEDORA-2013-6534

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Exchange Server MIME Base64 Decoding Code Execution (MS07-026; CVE-2007-0213) - Improved Performance

A vulnerability exists in the way Microsoft Exchange servers process certain MIME-encoded attachments. An attacker can exploit this vulnerability for code execution in SYSTEM security context...

Borland Caliber 11.0 Quiksoft EasyMail Buffer Overflow Vulnerability

Borland Caliber version 11.0 Quiksoft EasyMail SMTP object suffers from buffer overflow vulnerabilities. Borland Caliber 11.0 Quiksoft EasyMail SMTP Object Buffer Overflows ActiveX settings: Binary path: C:\Program Files x86\Borland\CaliberRM\emsmtp.dll Version: 5.0.0.11 ProgID: EasyMail.SMTP.5...

Borland Caliber 11.0 Quiksoft EasyMail SMTP Object Buffer Overflows

Borland Caliber 11.0 Quiksoft EasyMail SMTP Object Buffer Overflows ActiveX settings: Binary path: C:Program Files x86BorlandCaliberRMemsmtp.dll Version: 5.0.0.11 ProgID: EasyMail.SMTP.5 CLSID: 4610E7BF-710F-11D3-813D-00C04F6B92D0 Safe for Scripting: True Safe for Initialization: True...

AIX 5.2 TL 10 : bos.net.tcp.client (U812052)

The remote host is missing AIX PTF U812052, which is related to the security of the package bos.net.tcp.client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U812052. The text itself is copyright C...

Microsoft Office PowerPoint 2007 Memory Corruption

when you insert a sound to Microsoft office powerpoint 2007 ;the software will get crashed it tested on office 2007 ,all the versions may be affected too 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ ...

AIX 5.3 TL 6 : devices.common.IBM.ib.rte (U804476)

The remote host is missing AIX PTF U804476, which is related to the security of the package devices.common.IBM.ib.rte. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U804476. The text itself is...

Nmap NSE 6.01: smb-check-vulns

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sun Java JRE Image Parsing Vulnerabilities (102934) (Unix)

According to its version number, the Sun Java Runtime Environment JRE installed on the remote host reportedly is affected by a buffer overflow in its image processing code as well as another issue that may cause the Java Virtual Machine to hang. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Sun Java JRE XML Signature Command Injection (102993) (Unix)

The version of Sun Java Runtime Environment JRE installed on the remote host reportedly does not securely process XSLT stylesheets containing XSLT Transforms in XML Signatures. If an attacker can pass a specially crafted XSLT stylesheet to a trusted Java application running on the remote host, it...

SOL14228 - OpenSSH vulnerability CVE-2007-2243

Recommended Action None Supplemental Information CVE-2007-2243 SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

SOL14229 - OpenSSH vulnerability CVE-2007-2768

Recommended action None Supplemental Information Common Vulnerabilities and Exposures CVE-2007-2243 SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents. SOL4602: Overview of the F5 security vulnerability response...

MS Exchange Server Remote Code Execution Vulnerabilities (2809279)

This host is missing a critical security update according to Microsoft Bulletin MS13-012. OpenVAS Vulnerability Test $Id: secpodms13-012.nasl 5339 2017-02-18 16:28:22Z cfi $ MS Exchange Server Remote Code Execution Vulnerabilities 2809279 Authors: Antu Sanadi Copyright: Copyright c 2013 SecPod,...

Microsoft Word UNC Path Injector

This module modifies a .docx file that will, upon opening, submit stored netNTLM credentials to a remote host. It can also create an empty docx file. If emailed the receiver needs to put the document in editing mode before the remote server will be contacted. Preview and read-only mode do not wor...