RHEL 6 / 7 : java-1.7.0-openjdk (RHSA-2014:0889)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0889 advisory. The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. It was...

Microsoft Excel NAME Record Array Indexing Stack Buffer Corruption - Ver2 (CVE-2008-4266)

A code execution vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to a stack corruption in Microsoft Excel when loading Excel records. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2013-4266

...

CVE-2013-4266

CVE-2013-5123 affects Python pip prior to 1.5, where the mirroring support (-M, --use-mirrors) performs insecure DNS querying and lacks proper authentication checks, enabling potential man-in-the-middle attacks to download software over insecure links. Multiple connected sources (NVD entries and ...

CVE-2013-4266

creationtimestamp| type| source ---|---|--- 2013-01-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24086...

CVE-2012-4266

CVE-2012-4266 is an XSS vulnerability in Proman Xpress 5.0.1, exploitable via the cl_comments parameter in client_details.php. The issue allows remote attackers to inject arbitrary script/HTML. Affected component is the web page logic handling cl_comments, with no documented broader impact beyond...

CVE-2011-4266

CVE-2011-4266 affects FFFTP prior to version 1.98d, via an untrusted search path that lets local users gain privileges using a Trojan horse executable in the same directory read to load an extensionless file (demonstrated with README.exe). The vulnerability is rooted in unsafe loading of executab...

MS08-072 / MS08-074: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (957173 / 959070) (Mac OS X)

The remote Mac OS X host is running a version of Microsoft Office that is affected by several vulnerabilities. If an attacker can trick a user on the affected host into opening a specially crafted Excel or Word file, these issues could be leveraged to execute arbitrary code subject to the user's...

CVE-2009-4266

CVE-2009-4266 is a Cross-Site Scripting (XSS) vulnerability in the YABSoft AIHS Script, affecting search.php. The issue allows remote attackers to inject arbitrary web script or HTML via the text parameter in AIHS Script 2.2 (and possibly 2.3). The vulnerability is documented with a MEDIUM severi...

Microsoft Excel畸形对象解析远程代码执行漏洞（MS08-074）

BUGTRAQ ID: 32618,32622,32621 CVECAN ID: CVE-2008-4265,CVE-2008-4266,CVE-2008-4264 Excel是微软Office套件中的电子表格工具。 Excel在解析记录和公式时存在多个内存破坏漏洞，在验证NAME记录中的索引值时存在栈破坏漏洞。如果用户打开带有畸形对象的特制Excel文件，这些漏洞可能允许远程执行代码。成功利用此漏洞的攻击者可以完全控制受影响的系统。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft Excel Viewer 2003 SP3...

CVE-2008-4266

CVE-2008-4266 (Excel Global Array Memory Corruption Vulnerability) is a remote code execution flaw in Microsoft Office Excel and related components (Excel 2000 SP3, 2002 SP3, 2003 SP3; Excel Viewer 2003 Gold/SP3; Office 2004/2008 for Mac; Open XML File Format Converter for Mac). The vulnerability...

Secunia Research: Microsoft Excel NAME Record Array Indexing Vulnerability

====================================================================== Secunia Research 09/12/2008 - Microsoft Excel NAME Record Array Indexing Vulnerability - ====================================================================== Table of Contents Affected...

MS08-074: Microsoft Excel Multiple Method Remote Code Execution (959070)

The remote host is running a version of Microsoft Excel that is subject to various flaws that may allow arbitrary code to be run. An attacker may use this to execute arbitrary code on this host. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have it...

Microsoft Excel NAME Record Array Indexing Stack Corruption (MS08-074; CVE-2008-4266)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the Microsoft Excel. The vulnerability is due to a stack corruption in Microsoft Excel when loading Excel records. An attacker can exploit this flaw to execute arbitrary code on a...

CVE-2005-4266

The CVE-2005-4266 issue affects Alt-N MDaemon/WorldClient (WorldClient.dll) where WorldClient 8.1.3 trusts a Session parameter containing a randomly generated session ID linked to a username. This enables remote attackers to impersonate other users by guessing or sniffing the session value. Conne...