Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (2293386)

This host is missing a critical security update according to Microsoft Bulletin MS10-088. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2010-2572

Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint 95 document, aka “PowerPoint Parsing Buffer Overflow Vulnerability.” Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker...

Microsoft Office PowerPoint Legacy Files (CVE-2010-2572)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A remote attacker could exploit this issue via a malformed PowerPoint file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system. The vulnerability is due ...

MS10-088: Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution (2293386)

The remote Windows host is running a version of Microsoft PowerPoint that is affected by several vulnerabilities : - A buffer overflow exists in the way the application parses the PowerPoint file format, which can be abused to execute arbitrary code if an attacker can trick a user into opening a...

CVE-2009-2572

Cross-site request forgery CSRF vulnerability in the Fivestar module 5.x-1.x before 5.x-1.14 and 6.x-1.x before 6.x-1.14, a module for Drupal, allows remote attackers to hijack the authentication of arbitrary users for requests that cast votes...

CVE-2009-2572

Cross-site request forgery CSRF vulnerability in the Fivestar module 5.x-1.x before 5.x-1.14 and 6.x-1.x before 6.x-1.14, a module for Drupal, allows remote attackers to hijack the authentication of arbitrary users for requests that cast votes...

CVE-2009-2572

CVE-2009-2572 is a CSRF vulnerability in the Drupal Fivestar module (versions 5.x-1.x before 5.x-1.14 and 6.x-1.x before 6.x-1.14). The issue lets remote attackers hijack the authentication of arbitrary users for requests that cast votes. Affected component/function: Fivestar voting requests with...

CVE-2008-2572

CVE-2008-2572 describes a SQL injection in FlashBlog’s php/leer_comentarios.php, exploitable via the articulo_id parameter. The issue is a web-remote injection in a PHP script, leading to arbitrary SQL execution. The vulnerability is documented with a CVSS v2 base score of 7.5 (HIGH), indicating ...

CVE-2007-2572

PHP remote file inclusion vulnerability in modules/noevents/templates/mfatheme.php in NoAh aka PHP Content Architect, phparch 0.9 pre 1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tpls1 parameter...

CVE-2007-2572

PHP remote file inclusion vulnerability in modules/noevents/templates/mfatheme.php in NoAh aka PHP Content Architect, phparch 0.9 pre 1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tpls1 parameter...

CVE-2007-2572

The CVE concerns NoAh (PHP Content Architect, phparch) 0.9 pre 1.2 and earlier, where a PHP remote file inclusion vulnerability exists in modules/noevents/templates/mfa_theme.php. An attacker can cause arbitrary PHP code execution by supplying a URL in the tpls[1] parameter. Impact details in the...

CVE-2006-2572

CVE-2006-2572 describes a stored/reflected XSS vulnerability in DGBook 1.0, specifically in index.php, where user-supplied inputs for name, homepage, email, and address can be manipulated to inject arbitrary web script or HTML. The vulnerability affects the DGBook 1.0 web application and is detai...

CVE-2005-2572

CVE-2005-2572 affects MySQL running on Windows. A remote authenticated user with insert privileges on mysql.func can cause a denial of service (server hang) and possibly arbitrary code execution by requesting a non-library file (LoadLibraryEx blocks) or by invoking functions in a library that mat...

CVE-2005-2572

MySQL, when running on Windows, allows remote authenticated users with insert privileges on the mysql.func table to cause a denial of service server hang and possibly execute arbitrary code via 1 a request for a non-library file, which causes the Windows LoadLibraryEx function to block, or 2 a...

CVE-2004-2572

AMAX Magic Winmail Server 3.6 allows remote attackers to obtain sensitive information by entering 1 invalid characters such as "" or 2 a large number of characters in the Lookup field on the netaddressbook.php web form, which reveals the path in an ldaplib.php error message when the ldapsearch...