CVE-2007-6744

CVE-2007-6744 affects Flexera Macrovision InstallShield prior to 2008. The issue arises during certain code-signing operations with .spc and .pvk files, where a digital-signature password is sent to an unintended application due to an incorrect interaction between InstallShield and Signcode.exe. ...

MySQL < 4.1.23 / 5.0.42 Access Control Vulnerability

The version of MySQL installed on the remote host is older than 4.1.23 or 5.0.42. As such, it reportedly allows a remote, authenticated user without the DROP privilege to rename arbitrary tables. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17829; scriptversion"1.5...

MySQL < 5.0.51a / 5.1.23 / 6.0.4 Multiple Vulnerabilities

The version of MySQL installed on the remote host is earlier than 5.0.51a / 5.1.23 / 6.0.4 and thus reportedly affected by the following two vulnerabilities : - An attacker may be able to cause the federated handler and daemon to crash when the federated engine issues a SHOW TABLE STATUS LIKE que...

Cisco IOS Common Network Service Remote Version Disclosure

The remote Cisco device is potentially affected by an unspecified vulnerability involving a 'common network service' that may allow a remote attacker to determine the IOS version. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17777; scriptversion"1.5";...

CVE-2007-6751

The CVE-2007-6751 entry describes a cross-site scripting (XSS) vulnerability in the MailForm plugin for Movable Type, affecting versions before 1.20. The vulnerability allows remote attackers to inject arbitrary script or HTML via unspecified vectors, resulting in arbitrary script execution in a ...

CVE-2007-6750

The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service daemon outage via partial HTTP requests, as demonstrated by Slowloris, related to the lack of the modreqtimeout module in versions before 2.2.15...

CVE-2007-6750

CVE-2007-6750 affects Apache HTTP Server 1.x and 2.x. The vulnerability arises from handling partial HTTP requests (Slowloris), related to absence of the mod_reqtimeout protection in versions before 2.2.15, enabling remote DoS (daemon outage). Public details in connected docs confirm PoCs/exploit...

Persits XUpload ActiveX String Length Buffer Overflow (CVE-2007-6530)

A stack buffer overflow vulnerability has been reported in Persits' XUpload ActiveX control. The vulnerability is due to an error while parsing arguments passed to a certain method. A remote attacker may exploit this vulnerability by passing an overly long string to the method. Successful...

Ask.com Toolbar askBar.dll ActiveX Control Buffer Overflow (CVE-2007-5107)

A remote code execution vulnerability has been reported in Ask.com toolbar. The vulnerability is due to a boundary error in an ActiveX control. A remote attacker could exploit this issue by sending an overly long string to a certain method in askbar.dll. Successful exploitation could allow...

RKD Software ActiveX Control Remote Stack Buffer Overflow (CVE-2007-3435)

A Stack buffer overflow vulnerability has been reported in RKD Software Barcode Application. The vulnerability is due to a boundary error within the ABarCode ActiveX control while handling a certain method. A remote attacker could exploit this vulnerability by enticing a user to open a specially...

Unfixed XSS vulnerability at www.presidentielle-2007.net

Security researcher Atmon3r, has submitted on 21/12/2011 a cross-site-scripting XSS vulnerability affecting www.presidentielle-2007.net, which at the time of submission ranked 262116 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. I...

Mandriva Update for php-pear MDVSA-2011:187 (php-pear)

Check for the Version of php-pear OpenVAS Vulnerability Test Mandriva Update for php-pear MDVSA-2011:187 php-pear Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

ZDI-11-346 : Microsoft Office 2007 Office Art Shape Record Hierarchy Parsing Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-11-346 : Microsoft Office 2007 Office Art Shape Record Hierarchy Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-346 December 13, 2011 - -- CVE ID: CVE-2011-3413 - -- CVSS: 7.5,...

Memory corruption

Microsoft PowerPoint 2007 SP2; Office 2008 for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and PowerPoint Viewer 2007 SP2 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via an invalid OfficeArt record in a...

CVE-2011-3412

Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect memory handling, aka "Publisher Memory Corruption Vulnerability."...

Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (2639142)

This host is missing an important security update according to Microsoft Bulletin MS11-094. OpenVAS Vulnerability Test $Id: secpodms11-094.nasl 6523 2017-07-04 15:46:12Z cfischer $ Microsoft Office PowerPoint Remote Code Execution Vulnerabilities 2639142 Authors: Antu Sanadi Copyright: Copyright ...

CVE-2011-3396

CVE-2011-3396 affects Microsoft PowerPoint 2007 SP2 and 2010. The vulnerability arises from insecure DLL loading: PowerPoint can load a Trojan horse DLL from the current working directory, enabling arbitrary code execution under the attacker’s context. Connected sources corroborate an RCE through...

Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (2639142)

This host is missing an important security update according to Microsoft Bulletin MS11-094. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office Remote Code Execution Vulnerability (2590602)

This host is missing an important security update according to Microsoft Bulletin MS11-089. OpenVAS Vulnerability Test $Id: secpodms11-089.nasl 6538 2017-07-05 11:38:27Z cfischer $ Microsoft Office Remote Code Execution Vulnerability 2590602 Authors: Antu Sanadi Copyright: Copyright c 2011 SecPod...

Microsoft Word Access Violation Remote Code Execution Vulnerability

Description Microsoft Word is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Word file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the...