76 matches found
FreeBSD : Calligra, KOffice -- input validation failure (aa4d3d73-ef17-11e1-b593-00269ef07d24)
KDE Security Advisory reports : A flaw has been found which can allow malicious code to take advantage of an input validation failure in the Microsoft import filter in Calligra and KOffice. Exploitation can allow the attacker to gain control of the running process and execute code on its behalf...
CVE-2012-3455
Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in KOffice 2.3.3 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted ODF style in an ODF...
CVE-2012-3455
CVE-2012-3455 is a heap-based buffer overflow in the MS Word ODF import filter of Calligra/KOffice, specifically in read() of styles.cpp. The flaw can crash the application or allow arbitrary code execution via a crafted ODF style in affected documents (reported for Calligra/KOffice 2.3.3 and ear...
Heap overflow
Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in Calligra 2.4.3 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted ODF style in an ODF...
Fedora Update for koffice FEDORA-2012-11546
Check for the Version of koffice OpenVAS Vulnerability Test Fedora Update for koffice FEDORA-2012-11546 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
CVE-2010-3455
Cross-site scripting XSS vulnerability in index.php in AChecker 1.0 allows remote attackers to inject arbitrary web script or HTML via the uri parameter...
CVE-2010-3455
CVE-2010-3455 is an XSS vulnerability in AChecker 1.0 . The flaw resides in the code path for index.php where the uri parameter is insufficiently sanitized, allowing remote attackers to inject arbitrary HTML/JavaScript. Demonstrated payloads and exploitation details appear in multiple sources (e....
CVE-2009-3455
Technical details for CVE-2009-3455 are not publicly available in the provided documents; monitor for updates.
CVE-2008-3455
CVE-2008-3455 is a PHP remote file inclusion vulnerability affecting JnSHosts PHP Hosting Directory 2.0. The flaw allows arbitrary PHP code execution via a URL in the rd parameter of include/admin.php, enabling full compromise of affected systems (as per NVD description). The connected documents ...
iDefense Security Advisory 07.16.07: Trend Micro OfficeScan Management Console Authorization Bypass Vulnerability
Trend Micro OfficeScan Management Console Authorization Bypass Vulnerability iDefense Security Advisory 07.16.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 16, 2007 I. BACKGROUND Trend Micro OfficeScan is a centrally managed AntiVirus solution that allows administrators to manage...
CVE-2007-3455
The CVE-2007-3455 issue affects Trend Micro OfficeScan Corporate Edition 8.0. The vulnerability is in cgiChkMasterPwd.exe, where an empty hash and an empty encrypted password string can lead to the assignment of a valid session ID, enabling remote access to the Management Console. This constitute...
CVE-2006-3455
The vulnerability CVE-2006-3455 affects the SAVRT.SYS device driver in Symantec AntiVirus Corporate Edition 8.1 and 9.0.x up to 9.0.3, and Symantec Client Security 1.1 and 2.0.x up to 2.0.3. A local attacker can execute arbitrary code by supplying a crafted address for the DeviceIOControl output ...
Symantec Device Driver Elevation of Privilege
SUMMARY Symantec was notified of a vulnerability in a device driver which, if successfully exploited, could allow a local attacker to execute arbitrary code with elevated privileges or to crash the system. Risk Impact Medium Remote | No ---|--- Local | Yes Authentication Required | Yes Exploit...
CVE-2005-3455
Technical details for CVE-2005-3455 are not publicly available in the provided documents. Monitor for updates from Oracle and security advisories to obtain affected components, impact, and remediation.