75 matches found
CVE-2009-3471
CVE-2009-3471 affects IBM DB2 versions: 8.x before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP2. The vulnerability is that the MODIFIED SQL DATA table function is not dropped when a definer loses required privileges, leading to an unspecified impact and potential remote vectors. The p...
Microsoft Excel BIFF文件格式解析栈溢出漏洞（MS08-057）
BUGTRAQ ID: 31705 CVECAN ID: CVE-2008-3471 Excel是微软Office办公套件中的电子表格工具。 Excel在解析BIFF文件格式时使用文件中记录的内容计算拷贝用户提供数据的栈缓冲区的大小，如果远程攻击者在记录中设置了特制的记录值的话，就可能触发栈溢出，导致执行任意指令。 Microsoft Excel Viewer 2003 SP3 Microsoft Excel Viewer 2003 Microsoft Excel Viewer Microsoft Excel 2007 SP1 Microsoft Excel 2007 Microsoft...
CVE-2008-3471
Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 SP3; Office Excel Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File...
[Full-disclosure] ZDI-08-068: Microsoft Office Excel BIFF File Format Parsing Stack Overflow Vulnerability
ZDI-08-068: Microsoft Office Excel BIFF File Format Parsing Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-068 -- CVE ID: CVE-2008-3471 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Office Excel -- TippingPointTM IPS Customer Protection:...
CVE-2008-3471
CVE-2008-3471 is a stack-based buffer overflow in Microsoft Excel’s BIFF file format parsing, triggered by a malformed record in a .xls file. Affected products include Excel 2000 SP3, 2002 SP3, 2003 SP2/SP3, 2007 Gold/SP1, Excel Viewer (2003 SP3) and related Mac components, as well as the Open XM...
Microsoft Excel Remote Code Execution Vulnerability (956416)
This host is missing critical security update according to Microsoft Bulletin MS08-057. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Excel FRTWrapper Record Buffer Overflow (MS08-057; CVE-2008-3471)
Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the way Microsoft Excel processes objects when loading Excel files into memory. The vulnerability is due to an error in Microsoft Excel that fails to perform sufficient validation wh...
CVE-2007-3471
CVE-2007-3471 describes a buffer overflow in the dtsession component of the Sun Solaris CDE Session Manager affecting Solaris 8–10. Connected Nessus patches for Solaris 10 (x86 and SPARC) show remediation via Sun patching: 125279-09/ -07 and 125280-07/ -10, with patches 125279-10 or higher and 12...
CVE-2006-3471
Microsoft Internet Explorer 6 on Windows XP is affected by CVE-2006-3471. The vulnerability allows remote attackers to cause a denial of service (crash) by crafting a table containing a frameset as a child, triggering a null dereference when appendChild is used. The issue affects IE6 on Windows X...
CVE-2005-3471
CVE-2005-3471 describes a directory traversal vulnerability in the ruleset view of MailWatch for MailScanner 1.0.2, allowing remote attackers to access arbitrary files. The vulnerability stems from improper validation in the ruleset view, enabling an attacker to traverse the file system. The affe...
Solaris 8 (x86) : 109355-25
CDE 1.4x86: dtsession patch. Date this patch was last updated by Sun : Jun/25/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
Solaris 8 (sparc) : 109354-26
CDE 1.4: dtsession patch. Date this patch was last updated by Sun : Jun/25/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
Solaris 9 (x86) : 113241-13
CDE 1.5x86: dtsession patch. Date this patch was last updated by Sun : Jun/20/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
Solaris 9 (sparc) : 113240-13
CDE 1.5: dtsession patch. Date this patch was last updated by Sun : Jun/20/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...