Microsoft Office Web Component Memory Access Violation Denial of Service Vulnera

Microsoft Office Web组件一款基与Web的数据透视表控件。 Microsoft Office Web包含的ActiveX控件存在设计错误，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 构建恶意的EWB页，诱使用户访问，可导致对应用程序进行拒绝服务攻击。 Microsoft Office Web Components 2003 0 + Microsoft BizTalk Server 2002 Developer Edition + Microsoft BizTalk Server 2002 Enterprise Edition + Microsoft Commer...

Microsoft Capicom ActiveX控件远程代码执行漏洞（MS07-028）

CAPICOM.Certificates是一种ActiveX控件，允许脚本程序根据安全的基本Windows CryptoAPI功能加密数据。 CAPICOM.Certificates实现上存在输入验证漏洞，远程攻击者可能利用此漏洞控制用户机器。 Microsoft CAPICOM和BizTalk Server中的加密API组件对象模型证书ActiveX控件（CAPICOM.dll）处理某些用户输入时存在漏洞。如果传递了意外数据，则ActiveX控件可能失败，并允许远程执行代码。 Microsoft CAPICOM Microsoft BizTalk Server 2004 SP2...

MS07-028: Vulnerability in CAPICOM Could Allow Remote Code Execution (931906) (deprecated)

This plugin has been deprecated because KB931906 is no longer available for download. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2021/08/20. Deprecated because KB931906 is no longer available for download. include"compat.inc"; if description scriptid25167; scriptversion"1.38";...

Design/Logic Flaw

Unspecified vulnerability in the Cryptographic API Component Object Model Certificates ActiveX control CAPICOM.dll in Microsoft CAPICOM and BizTalk Server 2004 SP1 and SP2 allows remote attackers to execute arbitrary code via unspecified vectors, aka the "CAPICOM.Certificates Vulnerability."...

CVE-2007-0940

Unspecified vulnerability in the Cryptographic API Component Object Model Certificates ActiveX control CAPICOM.dll in Microsoft CAPICOM and BizTalk Server 2004 SP1 and SP2 allows remote attackers to execute arbitrary code via unspecified vectors, aka the "CAPICOM.Certificates Vulnerability."...

CVE-2007-0940

CVE-2007-0940 describes a remote code execution vulnerability in the CAPICOM Certificates ActiveX control (CAPICOM.dll) used by Microsoft CAPICOM and BizTalk Server 2004 SP1/SP2. The flaw arises from how CAPICOM.Certificates validates inputs, enabling an attacker who entices a user to visit a cra...

Microsoft Security Bulletin MS07-028 Vulnerability in CAPICOM Could Allow Remote Code Execution (931906)

Microsoft Security Bulletin MS07-028 Vulnerability in CAPICOM Could Allow Remote Code Execution 931906 Published: May 8, 2007 Version: 1.0 Summary Who Should Read this Document: Customers who use CAPICOM or BizTalk 2004 Impact of Vulnerability: Remote Code Execution Maximum Severity Rating:...

Microsoft Capicom ActiveX Control Remote Code Execution Vulnerability

Description The Microsoft CAPICOM ActiveX control is prone to a remote code-execution vulnerability. An attacker could exploit this issue to execute code in the context of the user visiting a malicious web page. Technologies Affected Microsoft BizTalk Server 2004 Developer Edition SP1 Microsoft...

Microsoft BizTalk Server multiple bugs

SQL injection, buffer overflow in HTTP client code...

[NT] Microsoft BizTalk Server ISAPI HTTP Receive Function Buffer Overflow (biztalkhttpreceive.dll)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Microsoft BizTalk Server Multiple Remote Vulnerabilities

The remote host seems to be running Microsoft BizTalk server. There are two flaws in this software that could allow an attacker to issue a SQL insertion attack or to execute arbitrary code on the remote host. Note that Nessus solely relied on the presence of a Biztalk DLL to issue this alert so i...

CVE-2003-0118

SQL injection vulnerability in the Document Tracking and Administration DTA website of Microsoft BizTalk Server 2000 and 2002 allows remote attackers to execute operating system commands via a request to 1 rawdocdata.asp or 2 RawCustomSearchField.asp containing an embedded SQL statement...

CVE-2003-0117

Buffer overflow in the HTTP receiver function BizTalkHTTPReceive.dll ISAPI of Microsoft BizTalk Server 2002 allows attackers to execute arbitrary code via a certain request to the HTTP receiver...

Microsoft Biztalk Server ISAPI HTTP Receive function buffer overflow

Security Advisory Name: Microsoft Biztalk Server ISAPI HTTP Receive function buffer overflow System Affected : Microsoft BizTalk Server 2002 Severity : High Remote exploitable : Yes Author: Cesar Cerrudo. Date: 05/05/03 Advisory Number: CC040301 Legal Notice: This Advisory is Copyright c 2003 Ces...

Microsoft Biztalk Server DTA vulnerable to SQL injection

Security Advisory Name: Microsoft Biztalk Server Document Tracking and Admnistration vulnerable to SQL injection System Affected : BizTalk Server 2000 and BizTalk Server 2002 Severity : High Remote exploitable : Yes Author: Cesar Cerrudo. Date: 05/05/03 Advisory Number: CC040302 Legal Notice: Thi...

Microsoft Security Bulletin MS03-016: Cumulative Patch for BizTalk Server (815206)

-----BEGIN PGP SIGNED MESSAGE----- - -------------------------------------------------------------------- Title: Cumulative Patch for BizTalk Server 815206 Date: 30 April 2003 Software: Microsoft BizTalk Server 2000 & BizTalk Server 2002 Impact: Two vulnerabilities, the most serious of which coul...

CVE-2003-0117

Buffer overflow in the HTTP receiver function BizTalkHTTPReceive.dll ISAPI of Microsoft BizTalk Server 2002 allows attackers to execute arbitrary code via a certain request to the HTTP receiver...

CVE-2003-0118

SQL injection vulnerability in the Document Tracking and Administration DTA website of Microsoft BizTalk Server 2000 and 2002 allows remote attackers to execute operating system commands via a request to 1 rawdocdata.asp or 2 RawCustomSearchField.asp containing an embedded SQL statement...

CVE-2003-0117

CVE-2003-0117 : A buffer overflow in the HTTP receiver function (BizTalkHTTPReceive.dll ISAPI) of Microsoft BizTalk Server 2002 enables an attacker to execute arbitrary code via a crafted HTTP request. The vulnerability is discussed in external advisories referencing MS03-016 and is corroborated ...

CVE-2003-0118

CVE-2003-0118 affects Microsoft BizTalk Server 2000 and 2002 through the Document Tracking and Administration (DTA) web interface. The vulnerability is a SQL injection in two endpoints (rawdocdata.asp and RawCustomSearchField.asp) that allows remote attackers to embed SQL statements and, per desc...