PT-2009-3206 · Microsoft · Office For Mac +4

Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel versions 2000 SP3 through 2003 SP3 Microsoft Office Excel versions 2007 SP1 through SP2 Microsoft Office Excel Viewer version 2003 SP3 Microsoft Office Excel Viewer affected versions not specified Microsoft Office...

Microsoft Security Bulletin MS09-021 - Critical Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (969462)

Microsoft Security Bulletin MS09-021 - Critical Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution 969462 Published: June 9, 2009 Version: 1.0 General Information Executive Summary This security update resolves several privately reported vulnerabilities that could allow...

Security Update for the 2007 Microsoft Office System (KB969679)

A security vulnerability exists in the 2007 Microsoft Office System and the Microsoft Office Compatibility Pack that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Microsoft Word Record Parsing Length Field Remote Stack Buffer Overflow Vulnerability

Description Microsoft Word is prone to a stack-based buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected...

Microsoft Word Record Parsing Buffer Overflow Vulnerability

Description Microsoft Word is prone to a buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft Office...

[SECURITY] Fedora 10 Update: squirrelmail-1.4.19-1.fc10

SquirrelMail is a basic webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 with no Javascript for maximum compatibility across browsers. It has very few requirements and is very easy to configure and instal...

[SECURITY] Fedora 9 Update: squirrelmail-1.4.19-1.fc9

SquirrelMail is a basic webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 with no Javascript for maximum compatibility across browsers. It has very few requirements and is very easy to configure and instal...

Security fix for the ALT Linux 6 package openssl10 version 0.9.8k-alt2

May 21, 2009 Evgeny Sinelnikov 0.9.8k-alt2 - Added extra symlinks for backwards compatibility with Fedora's libssl8. - Backported security updates from 0.9.8l: CVE-2009-1377, CVE-2009-1378, CVE-2009-1379...

Claroline v.1.8.11 Cross-Site Scripting

Author: Gerendi Sandor Attila Original Advisory: http://gsasec.blogspot.com/2009/05/claroline-v1811-cross-site-scripting.html Date: May 05, 2009 Package: Claroline 1.8.11 Product Homepage: http://www.claroline.net/ Versions Affected: v.1.8.11 Other versions may also be affected Severity: Medium...

Sorinara Streaming Audio Player 0.9 (.m3u) Local Stack Overflow Exploit

No description provided by source. !/usr/bin/perl Streaming Audio Player 0.9 .M3U File Local Stack Core Exploit Credit : http://www.milw0rm.com/exploits/8617 cyber-zone By Stack Tested On WinSp2 En / FR use strict; use warnings; my $header=...

kernel: memory disclosure in SO_BSDCOMPAT gsopt

The sockgetsockopt function in net/core/sock.c in the Linux kernel before 2.6.28.6 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel memory via an SOBSDCOMPAT getsockopt request...

MDKA-2007:088-1 : hal

HAL daemon could use 100% cpu when some non storage SCSI peripheral when connected to a system. Update packages fix this issue by upgrading to new version 0.5.9.1, as well as other stability fixes and improved suspend/hibernation for some laptops. Update: An error was introduced in the previous...

Mandriva Linux Security Advisory : openoffice.org (MDVSA-2008:137)

Integer overflow in the rtlallocateMemory function in sal/rtl/source/allocglobal.c in OpenOffice.org OOo 2.0 through 2.4 allows remote attackers to execute arbitrary code via a crafted file that triggers a heap-based buffer overflow. CVE-2008-2152 Also, according to bug 38874 decimal numbers on...

MDVA-2008:082-1 : timezone

Automatic mirror geolocation in drakxtools-backend in Mandriva Linux 2008.1 would fail for some locales, because it uses backward compatibility timezone names for which there were no zone.tab entries in timezone bug 40184, this makes software like urpmi to not select optimal mirrors in its...

Fedora 10 : bugzilla-3.2.2-2.fc10 (2009-2417)

Thu Mar 5 2009 Itamar Reis Peixoto 3.2.2-2 - fix from BZ 474250 Comment 16, from Chris Eveleigh -- - add python BR for contrib subpackage - fix description - change Requires perl-SOAP-Lite to perlSOAP::Lite according guidelines - Sun Mar 1 2009 Itamar Reis Peixoto 3.2.2-1 - thanks to Chris...

MDVA-2008:082 : timezone

Automatic mirror geolocation in drakxtools-backend in Mandriva Linux 2008.1 would fail for some locales, because it uses backward compatibility timezone names for which there were no zone.tab entries in timezone bug 40184, this makes software like urpmi to not select optimal mirrors in its...

Solaris 9 (x86) : 116569-99

Messaging Server 6.1x86: core patch. Date this patch was last updated by Sun : Feb/09/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if descriptio...

Microsoft Security Bulletin MS09-009 - Critical Vulnerabilities in Microsoft Office Excel Could Cause Remote Code Execution (968557)

Microsoft Security Bulletin MS09-009 - Critical Vulnerabilities in Microsoft Office Excel Could Cause Remote Code Execution 968557 Published: April 14, 2009 Version: 1.0 General Information Executive Summary This security update resolves a privately reported and a publicly disclosed vulnerability...

Mandriva Update for myspell-dictionaries MDVA-2008:107 (myspell-dictionaries)

Check for the Version of myspell-dictionaries OpenVAS Vulnerability Test Mandriva Update for myspell-dictionaries MDVA-2008:107 myspell-dictionaries Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Mandriva Update for krb5 MDVSA-2008:069 (krb5)

Check for the Version of krb5 OpenVAS Vulnerability Test Mandriva Update for krb5 MDVSA-2008:069 krb5 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...