CVE-2008-3890

CVE-2008-3890 affects FreeBSD/amd64 kernels (6.3–7.0) where an extra swapgs can execute after a General Protection Fault during return from an interrupt, trap, or system call, enabling local privilege escalation. The issue is documented in FreeBSD SA-08:07 (amd64) with patches and upgrade guidanc...

FreeBSD Security Advisory (FreeBSD-SA-08:07.amd64.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-08:07.amd64.asc ADV FreeBSD-SA-08:07.amd64.asc OpenVAS Vulnerability Test $ Description: Auto generated from ADV FreeBSD-SA-08:07.amd64.asc Authors: Thomas Reinke Copyright: Copyright c 2008 E-So...

CVE-2007-3890

CVE-2007-3890 is a remote code execution vulnerability in Microsoft Excel across Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac. The root cause is improper validation of the Workspace index value used in an Excel file’s workspace (rtWnDesk records), leading to memory cor...

CVE-2006-3890

Stack-based buffer overflow in the Sky Software FileView ActiveX control, as used in WinZip 10 before build 7245 and in certain other applications, allows remote attackers to execute arbitrary code via a long FilePattern attribute in a WZFILEVIEW object, a different vulnerability than CVE-2006-51...

CVE-2006-3890

Technical details for CVE-2006-3890 (affected component, impact, exploit information) are not provided in the connected documents. Monitor for updates for any concrete disclosures or fixes.

CVE-2006-3890

Stack-based buffer overflow in the Sky Software FileView ActiveX control, as used in WinZip 10 before build 7245 and in certain other applications, allows remote attackers to execute arbitrary code via a long FilePattern attribute in a WZFILEVIEW object, a different vulnerability than CVE-2006-51...

CVE-2005-3890

CVE-2005-3890 affects Gadu-Gadu version 7.20. A remote attacker can cause a denial of service (crash and configuration loss) by loading a page containing a large number of gg: URIs. The available sources identify the affected product and the impact (DoS), but do not provide exploitable details be...