68 matches found
CVE-2014-6362
CVE-2014-6362 is a use-after-free vulnerability in Microsoft Office components that enables ASLR bypass when a crafted document is opened. Affected products include Office 2007 SP3, Office 2010 SP2, and Office 2013 (Gold/SP1). The underlying issue relates to improper handling of memory in shared ...
Microsoft Office Shared Component ASLR Bypass (MS15-013; CVE-2014-6362)
A security feature bypass vulnerability exists in Microsoft Office Shared Component. The vulnerability is due to an improper implementation of Address Space Layout Randomization ASLR by MSCOMCTL common controls library used by Microsoft Office software. A remote attacker can exploit this issue by...
KLA10456 SB vulnerability in MS Office
An use-after-free vulnerability was found in Microsoft Office. By exploiting this vulnerability malicious users can bypass ASLR protection. This vulnerability can be exploited remotely via a specially designed document. Original advisories MS bulletin CVE-2014-6362 Related products Microsoft-Offi...
CVE-2008-6362
The CVE-2008-6362 entry describes a SQL injection vulnerability in sitepage.php of the Multiple Membership Script 2.5, exploitable by remote attackers via the id parameter. Impact per CVSS v2 is partial confidentiality, integrity, and availability with NETWORK attack vector, LOW complexity, and n...
CVE-2008-6362
creationtimestamp| type| source ---|---|--- 2008-12-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7346...
CVE-2007-6362
Summary: CVE-2007-6362 is a SQL injection in the RSGallery component (com_rsgallery) for Mambo/Joomla! up to 2.0 beta5. Vulnerable component: index.php handling inline page actions. Root cause: SQL commands are injectable via the catid parameter. Impact: Remote attackers could potentially execute...
