Microsoft Excel存在多个安全漏洞

Bugtraq ID: 48164, 48161, 48160, 48159, 48157, 48162, 48163 CVE ID：CVE-2011-1272 CVE-2011-1273 CVE-2011-1274 CVE-2011-1275 CVE-2011-1276 CVE-2011-1277 CVE-2011-1278 CVE-2011-1279 Microsoft Excel是一款微软开发的电子表格处理程序。 Microsoft Excel存在多个安全漏洞，允许攻击者以应用程序上下文执行任意代码或使应用程序崩溃。 -当解析某些记录结构时存在输入验证错误，可被利用破坏内存。...

Microsoft Word 'wdGetApplicationObject()'远程代码执行漏洞

Bugtraq ID: 48261 Microsoft word是一款微软开发的文字处理系统。 Microsoft Word wdGetApplicationObject函数存在一个错误，攻击者构建特制的Word文件，诱使用户解析，可导致以用户安全上下文执行任意代码。 Microsoft Word 2010 Microsoft Word 2007 SP2 Microsoft Word 2007 SP1 Microsoft Word 2007 Microsoft Word 2003 SP3 Microsoft Word 2003 SP2 Microsoft Word 2003 SP1...

PT-2011-2990 · Microsoft · Sharepoint Foundation +5

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 7 through 8 Office SharePoint Server versions 2007 SP2 through 2010 SP1 Groove Server versions 2010 Gold through 2010 SP1 Windows SharePoint Services version 3.0 SP2 SharePoint Foundation versions 2010 Gol...

Oracle HTTP Server XSS Header Injection

Exploit for multiple platform in category web applications Attack Pattern ID : CAPEC-86 CWE ID : CI-79 OWASP IDs : A1-Injections, A2-Cross Site Scripting XSS CVE ID : not yet Related CVEs : CVE-2006-3918, CVE-2007-0275 A.K.A : Unfiltered Header Injection Product Type : Application Vendor : Oracle...

Microsoft PowerPoint远程代码执行漏洞

Bugtraq ID: 47700，47699 CVE ID：CVE-2011-1269 CVE-2011-1270 Microsoft PowerPoint是一款微软开发的演示文稿播放处理软件。 Microsoft Office PowerPoint存在多个安全漏洞，允许攻击者以应用程序上下文执行任意代码。 -当调用某些函数时存在未明错误，可导致内存破坏。 -当解析PowerPoint文件时存在未明错误，可导致内存破坏。 成功利用漏洞可以以应用程序上下文执行任意代码。 Microsoft Office 2003 Professional Edition Microsoft Office...

Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (2545814)

This host is missing a critical security update according to Microsoft Bulletin MS11-036. OpenVAS Vulnerability Test $Id: secpodms11-036.nasl 6523 2017-07-04 15:46:12Z cfischer $ Microsoft Office PowerPoint Remote Code Execution Vulnerabilities 2545814 Authors: Antu Sanadi Copyright: Copyright c...

CVE-2007-6743

The vulnerability CVE-2007-6743 affects IBM Tivoli Directory Server (TDS) 5.2 prior to 5.2.0.5-TIV-ITDS-LA0005. It is a double free bug triggered by search operations that cause recursive filter_free calls, allowing remote authenticated users to cause a denial of service (ABEND). No further explo...

CVE-2007-6742

The vulnerability CVE-2007-6742 affects IBM Tivoli Directory Server (TDS) 5.2 and earlier, where get_filter_list fails to correctly parse certain sub filters. This can allow remote authenticated users to trigger an infinite loop, resulting in a denial of service. Affected component: the get_filte...

FiSH-irssi v0.99 Evil ircd Buffer Overflow (CVE-2007-1397)

Exploit for linux platform in category remote exploits FiSH IRC encryption evil ircd PoC exploit. Abuses CVE-2007-1397 Bad ircd, nasty bnc provider, nicknames over 100 char -- ruin. Runs arbitrary code which which in this case shuts down irssi. Tested on my own compiled FiSH with irssi/fedora/x86...

FiSH-irssi 0.99 - Evil ircd Buffer Overflow

FiSH IRC encryption evil ircd PoC exploit. Abuses CVE-2007-1397 Bad ircd, nasty bnc provider, nicknames over 100 char -- ruin. Runs arbitrary code which which in this case shuts down irssi. Tested on my own compiled FiSH with irssi/fedora/x86 There are a lot more problems like this one, you shoul...

FiSH-irssi 0.99 - Evil ircd Buffer Overflow

FiSH-irssi 0.99 - Evil ircd Buffer Overflow FiSH IRC encryption evil ircd PoC exploit. Abuses CVE-2007-1397 Bad ircd, nasty bnc provider, nicknames over 100 char -- ruin. Runs arbitrary code which which in this case shuts down irssi. Tested on my own compiled FiSH with irssi/fedora/x86 There are ...

CVE-2011-0107

Untrusted search path vulnerability in Microsoft Office XP SP3, Office 2003 SP3, and Office 2007 SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka "Office Component Insecure Library...

CVE-2011-0097

Integer underflow in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary cod...

Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (2489283)

This host is missing a critical security update according to Microsoft Bulletin MS11-022. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office Excel Remote Code Execution Vulnerabilities (2489279)

This host is missing a critical security update according to Microsoft Bulletin MS11-021. OpenVAS Vulnerability Test $Id: secpodms11-021.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Office Excel Remote Code Execution Vulnerabilities 2489279 Authors: Antu Sanadi Copyright: Copyright c 2011 SecPo...

Security Update for Microsoft Office 2007 System (KB2509488)

A security vulnerability exists in Microsoft Office 2007 System that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

CVE-2011-2007

creationtimestamp| type| source ---|---|--- 2011-04-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36211...

Design/Logic Flaw

The GNU C Library aka glibc or libc6 before 2.12.2 and Embedded GLIBC EGLIBC allow context-dependent attackers to execute arbitrary code or cause a denial of service memory consumption via a long UTF8 string that is used in an fnmatch call, aka a "stack extension attack," a related issue to...

Sql injection

SQL injection vulnerability in pdf.php in AuraCMS 1.62 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-4804 and CVE-2007-4171...

Gentoo Security Advisory GLSA 201006-01 (freetype)

The remote host is missing updates announced in advisory GLSA 201006-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...