MS10-079 / MS10-080 : Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2293194 / 2293211) (Mac OS X)

The remote Mac OS X host is running a version of Microsoft Office that is affected by multiple remote code execution vulnerabilities. If an attacker can trick a user on the affected host into opening a specially crafted Word, Excel, or Lotus 1-2-3 file, these issues could be leveraged to execute...

Microsoft Excel Ghost记录类型解析堆溢出漏洞（MS10-080）

BUGTRAQ ID: 43657 CVE ID: CVE-2010-3242 Excel是微软Office套件中的电子表格工具。 Excel在解析文档的Ghost记录中的某些字段时存在堆溢出漏洞，用户受骗打开了畸形的.XSL文件就会导致执行任意代码。 Microsoft Excel 2000 SP3 Microsoft Office 2008 for Mac Microsoft Office 2004 for Mac 临时解决方法： 不要打开从不可信任来源接收到或从可信任来源意外接收到的Microsoft Office文件。 厂商补丁： Microsoft ---------...

VUPEN Security Research - Microsoft Office Excel Ghost Record Type Parsing Vulnerability (CVE-2010-3242)

VUPEN Security Research - Microsoft Office Excel Ghost Record Type Parsing Vulnerability CVE-2010-3242 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- Microsoft Office Excel is a powerful tool you can use to create and format spreadsheets, and analyze and share...

CVE-2010-3242

CVE-2010-3242 is a Ghost Record Type Parsing vulnerability in Microsoft Excel components: Excel 2002 SP3, Office for Mac 2004 and 2008, and the Open XML File Format Converter for Mac. The issue arises from improper validation of record information during parsing Ghost records, leading to a memory...

Secunia Research: Microsoft Excel Ghost Record Type Parsing Vulnerability

====================================================================== Secunia Research 12/10/2010 - Microsoft Excel Ghost Record Type Parsing Vulnerability - ====================================================================== Table of Contents Affected...

Microsoft Excel Ghost Record Type Parsing Code Execution (MS10-080; CVE-2010-3242)

Microsoft Excel is a popular spreadsheet application. A remote attacker could exploit this issue via a malformed Excel file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system. A memory corruption vulnerability has been identified in Microsoft...

Wireshark: Multiple vulnerabilities

No description provided by source. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200911-05 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - ...

Fedora Core 11 FEDORA-2009-9837 (wireshark)

The remote host is missing an update to wireshark announced via advisory FEDORA-2009-9837. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

SLES9: Security update for ethereal

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: ethereal For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5021746 within the Su...

SuSE9 Security Update : mutt (YOU Patch Number 11094)

Mutt has a buffer overflow in IMAP namespace parsing code which may open a possible remote vulnerability. CVE-2006-3242 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

DEBIAN-CVE-2009-3242

Unspecified vulnerability in packet.c in the GSM A RR dissector in Wireshark 1.2.0 and 1.2.1 allows remote attackers to cause a denial of service application crash via unknown vectors related to "an uninitialized dissector handle," which triggers an assertion failure...

CVE-2009-3242

Unspecified vulnerability in packet.c in the GSM A RR dissector in Wireshark 1.2.0 and 1.2.1 allows remote attackers to cause a denial of service application crash via unknown vectors related to "an uninitialized dissector handle," which triggers an assertion failure...

CVE-2009-3242

CVE-2009-3242 affects Wireshark, specifically the GSM A RR dissector in version 1.2.0 and 1.2.1. The issue is described as an uninitialized dissector handle in packet.c that triggers an assertion failure, leading to an application crash (DoS). Connected sources (e.g., GLSA 200911-05 and Fedora ad...

CVE-2009-3242

creationtimestamp| type| source ---|---|--- 2009-09-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33224...

Gentoo Security Advisory GLSA 200510-25 (Ethereal)

The remote host is missing updates announced in advisory GLSA 200510-25. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200606-27 (mutt)

The remote host is missing updates announced in advisory GLSA 200606-27. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-3242

The vulnerability affects the PPMate 2.3.1.93 package, specifically the PPMedia Class ActiveX control in PPMPlayer.dll. A heap-based buffer overflow can be triggered by a long argument to the StartUrl method, enabling remote attackers to execute arbitrary code. Affected component: PPMedia ActiveX...

CVE-2008-3242

creationtimestamp| type| source ---|---|--- 2008-07-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6090...

Debian Security Advisory DSA 1171-1 (ethereal)

The remote host is missing an update to ethereal announced via advisory DSA 1171-1. Several remote vulnerabilities have been discovered in the Ethereal network scanner, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following...

Debian Security Advisory DSA 1108-1 (mutt)

The remote host is missing an update to mutt announced via advisory DSA 1108-1. It was discovered that the mutt mail reader performs insufficient validation of values returned from an IMAP server, which might overflow a buffer and potentially lead to the injection of arbitrary code. OpenVAS...