Microsoft Word RTF File 'listoverridecount'远程代码执行漏洞（MS12-079)

BUGTRAQ ID: 56834 CVECAN ID: CVE-2012-2539 Microsoft Word 属于办公软件是微软公司的一个文字处理器应用程序。 Microsoft Word 在解析listoverridecount相关的RTF（Rich Text Format）数据时存在漏洞。通过诱使用户浏览恶意网站或在e-mail邮件中打开特定格式的rtf文件，未经身份验证的远程攻击者可利用此漏洞以当前用户权限执行任意代码。 0 Microsoft Office 2003 Professional Edition Microsoft Office Word Viewer...

CVE-2012-2539

CVE-2012-2539 is Microsoft Word remote code execution vulnerability caused by parsing crafted RTF data (Word RTF 'listoverridecount'). It affects Word 2003 SP3, 2007 SP2/SP3, 2010 SP1; Word Viewer; Office Compatibility Pack SP2/SP3; and Office Web Apps 2010 SP1. The underlying issue is memory cor...

CVE-2012-2539

Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted RTF data, aka "Word RTF 'listoverridecount' Remote...

Microsoft Word RTF listoverridecount Remote Code Execution (MS12-079; CVE-2012-2539; CVE-2014-1761)

A remote code execution vulnerability has been reported in Microsoft Word. The vulnerability is due to an error in the way Word parses specially crafted Rich Text Format RTF data. A remote attacker can exploit this issue by enticing a target user to open a malicious Microsoft Office Document...

MS12-079: Vulnerability in Microsoft Word Could Allow Remote Code Execution (2780642)

The version of Office, Office Compatibility Pack, Microsoft Word Viewer, Microsoft Office Web Apps, and/or Microsoft Share Point Server installed on the remote host has a remote code execution vulnerability. This is due to the way that Microsoft Office software parses RTF data and could allow an...

Debian: Security Advisory (DSA-2539-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2539-1 : zabbix - SQL injection

It was discovered that Zabbix, a network monitoring solution, does not properly validate user input used as a part of a SQL query. This may allow unauthenticated attackers to execute arbitrary SQL commands SQL injection and possibly escalate privileges. %NASLMINLEVEL 70300 C Tenable Network...

Fedora Update for mapserver FEDORA-2011-9555

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for mapserver FEDORA-2010-12266

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 13 : mapserver-5.6.5-1.fc13 (2010-12266)

Update to 5.6.5, for various fixes described at: http://trac.osgeo.org/mapserver/browser/tags/rel-5-6-5/m apserver/HISTORY.TXT Also fixes CVE-2010-2539, CVE-2010-2540, per bz 617301 and 617312. Note that Tenable Network Security has extracted the preceding description block directly from the...

[SECURITY] [DSA 2078-1] New mapserver packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA-2078-1 [email protected] http://www.debian.org/security/ Nico Golde July 31nd, 2010 http://www.debian.org/security/faq -...

CVE-2010-2539

Buffer overflow in the msTmpFile function in maputil.c in mapserv in MapServer before 4.10.6 and 5.x before 5.6.4 allows local users to cause a denial of service via vectors involving names of temporary files...

CVE-2010-2539

Buffer overflow in the msTmpFile function in maputil.c in mapserv in MapServer before 4.10.6 and 5.x before 5.6.4 allows local users to cause a denial of service via vectors involving names of temporary files...

CVE-2010-2539

Buffer overflow in the msTmpFile function in maputil.c in mapserv in MapServer before 4.10.6 and 5.x before 5.6.4 allows local users to cause a denial of service via vectors involving names of temporary files...

CVE-2010-2539

Buffer overflow in the msTmpFile function in maputil.c in mapserv in MapServer before 4.10.6 and 5.x before 5.6.4 allows local users to cause a denial of service via vectors involving names of temporary files...

CVE-2010-2539

CVE-2010-2539 concerns MapServer’s mapserv component. A buffer overflow in the msTmpFile function (maputil.c) allows local users to cause a denial of service via temporary-file name handling. Affected products are MapServer releases before 4.10.6 and 5.x before 5.6.4. The issue stems from overrun...

CVE-2009-2539

The CVE-2009-2539 entry describes a denial-of-service via a large length value on the length property of a Select object in the Aigo P8860, related to CVE-2009-1692 in WebKit. Connected advisories (e.g., Debian DSA-1950, Mandriva MDVSA-2010:027/028, openSUSE/SUSE Nessus entries) confirm that WebK...

CVE-2008-2539

The CVE-2008-2539 issue concerns the Sun Cluster Global File System within Sun Cluster 3.1 on Solaris 8–10 that uses an underlying UFS filesystem. The vulnerability describes that local users may read data from arbitrarily deleted files or corrupt files in global filesystems via unspecified vecto...

CVE-2007-2539

The showfiles function in RunCms 1.5.2 and earlier allows remote attackers to obtain sensitive information file existence and file metadata via unspecified vectors...

CVE-2007-2539

CVE-2007-2539 affects RunCMS 1.5.2 and earlier, where the show_files function leads to information disclosure (revealing file existence and metadata) via unspecified vectors. The available sources describe this as a remote information disclosure vulnerability, but do not provide concrete exploit ...