111 matches found
Ginwui back door program analysis-vulnerability warning-the black bar safety net
This year 5 month 1 9 day CVE release number for the CVE-2 0 0 6-2 4 9 2 security bulletins, Microsoft Word processing DOC file there is a buffer overflow vulnerability, and Microsoft Word to run the special structure of the doc file, resulting in arbitrary code execution. A remote attacker could...
Immunity Canvas: SMARTAG_WORD
Name| smartagword ---|--- CVE| CVE-2006-2492 Exploit Pack| CANVAS Description| smartagword MS06-027 Notes| CVE Name: CVE-2006-2492 VENDOR: Microsoft MSADV: MS06-027 Repeatability: One time References: http://www.microsoft.com/technet/security/Bulletin/MS06-027.mspx CVE Url:...
CVE-2006-2492
Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted attackers to execute arbitrary code via a malformed object pointer, as originally reported by ISC on 20060519 for a zero-day attack...
CVE-2006-2492
CVE-2006-2492 is a buffer overflow in Microsoft Word (Office 2000 SP3, XP SP3, 2003 SP1/SP2) and Microsoft Works through 2006 caused by a malformed object pointer. The flaw allows arbitrary code execution and requires user interaction (via opening a crafted Word/Works document). Affected products...
[Full-disclosure] MDKSA-2005:235 - Updated kernel packages fix numerous vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2005:235 http://www.mandriva.com/security/ Package : kernel Date : December 21, 2005 Affected: 2006.0 Problem Description: Multiple vulnerabilities in the Linux 2.6 kernel have been discovered and corrected in th...
CVE-2004-2492
The CVE-2004-2492 entry describes a cross-site scripting (XSS) vulnerability in Groupmax World Wide Web (GmaxWWW) Desktop 5, 6, and Desktop for Jichitai 6, exploitable via the QUERY parameter to inject arbitrary script/HTML. Based on the provided documents, the issue involves remote, unauthentica...
Fedora Core 4 : kernel-2.6.12-1.1456_FC4 (2005-906)
Thu Sep 22 2005 Dave Jones 2.6.12-1.1456FC4 - Disable crash driver on Xen kernels. - Wed Sep 14 2005 Dave Jones 2.6.12-1.1455FC4 - Fixes for CVE-2005-2490 and CVE-2005-2492 - Thu Sep 8 2005 Rik van Riel - upgrade to a newer Xen snapshot - exclude Xen TPM bits, since those conflict with 2.6.12.5 -...
Fedora Core 3 : kernel-2.6.12-1.1378_FC3 (2005-905)
Wed Sep 14 2005 Dave Jones 2.6.12-1.1378FC3 - Fixes for CVE-2005-2490 and CVE-2005-2492 - Mon Sep 5 2005 Dave Jones - Fix aic7xxx issue with 4GB. 167049 - Fri Sep 2 2005 Dave Jones 2.6.12-1.1377FC3 - Various post 2.6.13 ACPI updates. 20050902 - Mon Aug 29 2005 Dave Jones - Fix local builds when...
CVE-2005-2492
CVE-2005-2492 affects the Linux kernel 2.6 series prior to 2.6.13.1. The raw_sendmsg function can be exploited by a local user to cause a denial of service (change hardware state) or read from arbitrary memory via crafted input. Documented in multiple advisories (e.g., Mandriva MDKSA-2005:235; SU...
Ganglia Cluster Report Information Disclosure
Binary data 2492.prm...
CVE-2004-2492
Cross-site scripting XSS vulnerability in Groupmax World Wide Web GmaxWWW Desktop 5, 6, and Desktop for Jichitai 6, allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter...