Microsoft IE HtmlDlgHelper类内存破坏漏洞（MS10-071）

BUGTRAQ ID: 43706 CVE ID: CVE-2010-3329 Internet Explorer是Windows操作系统中默认捆绑的WEB浏览器。 Windows在实例化Office文档（如.XLS、.DOC）中HtmlDlgHelper类对象（CLASSID: 3050f4e1-98b5-11cf-bb82-00aa00bdce0b）的方式存在内存破坏漏洞。有漏洞的模块是Internet Explorer中的mshtmled.dll，当调用CHtmlDlgHelper类的析构程序之后访问未初始化内存时就会在mshtmled.dll...

CVE-2010-3329

mshtmled.dll in Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code via a crafted Microsoft Office document that causes the HtmlDlgHelper class destructor to access uninitialized memory, aka "Uninitialized Memory Corruption Vulnerability."...

CVE-2010-3329

CVE-2010-3329 affects Microsoft Internet Explorer 7/8 through the HtmlDlgHelper class in mshtmled.dll. The vulnerability is a memory-corruption flaw caused by missing initialization when instantiating the HtmlDlgHelper Object from a Microsoft Office document opened in Word, leading to uninitializ...

CVE-2010-3329

mshtmled.dll in Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code via a crafted Microsoft Office document that causes the HtmlDlgHelper class destructor to access uninitialized memory, aka "Uninitialized Memory Corruption Vulnerability."...

Internet Explorer HtmlDlgHelper Class Memory Corruption (MS10-071; CVE-2010-3329)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been initialized or has been deleted when a document in an HTML format is opened in Microsoft Word. To trigger this issue, ...

CVE-2009-3329

Winplot 1.25.0.1 is affected by a stack-based buffer overflow in the Plot2D (.wp2) parser that allows user-assisted remote attackers to execute arbitrary code. The vulnerability is triggered by a crafted .wp2 file, enabling arbitrary code execution with high impact. No remediation details are pro...

Gentoo Security Advisory GLSA 200708-02 (xvid)

The remote host is missing updates announced in advisory GLSA 200708-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200708-02 (xvid)

The remote host is missing updates announced in advisory GLSA 200708-02. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Links 'only proxies'存在未明安全漏洞

BUGTRAQ ID: 30422 CVE ID：CVE-2008-3329 CNCVE ID：CNCVE-20083329 Links是一款基于文本的支持HTML和帧的浏览器。 Links "only proxies"功能存在未明安全问题，远程攻击者可以利用漏洞传递恶意URL给外部程序。 目前没有详细漏洞细节提供。 Slackware Linux 12.1 Slackware Linux 12.0 Slackware Linux 11.0 Slackware Linux -current Links Links 2.1pre25 Links Links 2.1 pre26 Links...

[slackware-security] links

New links packages are available for Slackware 11.0, 12.0, 12.1, and -current to fix a security issue when using proxies. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-3329 Here are the details from the...

CVE-2008-3329

The CVE-2008-3329 entry concerns the Links web browser (before 2.1). In “only proxies” mode, it reportedly allows a vulnerability related to passing URLs to external programs; impact is described as unknown in early sources. For Slackware, SSA:2008-210-04 updates packages to fix this issue. Other...

[ GLSA 200708-02 ] Xvid: Array indexing vulnerabilities

Gentoo Linux Security Advisory GLSA 200708-02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

CVE-2007-3329

Xvid 1.1.2 has array indexing vulnerabilities in mbcoding.c (get_intra_block, get_inter_block_h263, get_inter_block_mpeg) that allow remote code execution via crafted AVI/H.263/MPEG files; Gentoo GLSA 200708-02 recommends upgrading to >= xvid-1.1.3 as remediation. No exploitable details beyond...

CVE-2006-3329

The CVE-2006-3329 entry concerns a SQL injection in search.php of PHP/MySQL Classifieds (PHP Classifieds). The vulnerability is exploitable via the rate parameter, potentially affecting data confidentiality, integrity, and availability as indicated by CVSS v2 base metrics (AV:N/AC:L/Au:N/C:P/I:P/...

CVE-2005-3329

CVE-2005-3329 is an XSS vulnerability in RSA Authentication Agent for Web 5.3 and earlier that allows injection of script or HTML via the image parameter in a GetPic operation. Exploitation details in the sources show an advisory and PoC context around XSS in RSA’s web login flow; vendor fix is R...