4336 matches found
OllyDbg 2.01 Alpha 2 Tool New Version Download !
"OllyDbg is a 32-bit assembler level analysing debugger for Microsoft® Windows®. Emphasis on binary code analysis makes it particularly useful in cases where source is unavailable." Version 2.01 alpha 2 is an intermediate functional release with many new useful features. The most important novelt...
CVE-2011-0978
Stack-based buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via vectors related to an axis properties...
CVE-2011-0978
Stack-based buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via vectors related to an axis properties...
CVE-2011-0976: Undefined Security Weakness
Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and PowerPoint Viewer 2007 SP2 do not properly handle Office Art containers that have inval...
CVE-2011-0978: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via vectors related to an axis properties...
PT-2011-2784
Name of the Vulnerable Software and Affected Versions Microsoft PowerPoint versions 2002 SP3, 2003 SP3, and 2007 SP2 Office 2004 and 2008 for Mac Open XML File Format Converter for Mac Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 PowerPoint Viewer 2007 SP2...
RedHat Update for exim RHSA-2011:0153-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
kernel: ipc/compat*.c: reading uninitialized stack memory
The ipc subsystem in the Linux kernel before 2.6.37-rc1 does not initialize certain structures, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to the 1 compatsyssemctl, 2 compatsysmsgctl, and 3 compatsysshmctl functions in...
Microsoft XML Core Services Remote Code Execution Vulnerability (936227)
This host is missing a critical security update according to Microsoft Bulletin MS07-042. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft XML Core Services Remote Code Execution Vulnerability (936227)
This host is missing a critical security update according to Microsoft Bulletin MS07-042. OpenVAS Vulnerability Test $Id: gbms07-042.nasl 6235 2017-05-29 13:45:48Z cfi $ Microsoft XML Core Services Remote Code Execution Vulnerability 936227 Authors: Madhuri D Copyright: Copyright c 2011 Greenbone...
kernel: ipc/compat*.c: reading uninitialized stack memory
The ipc subsystem in the Linux kernel before 2.6.37-rc1 does not initialize certain structures, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to the 1 compatsyssemctl, 2 compatsysmsgctl, and 3 compatsysshmctl functions in...
LifeType 1.2.10 HTTP Referer stored XSS
Exploit for php platform in category web applications Exploit Title: lifetype 1.2.10 http referer XSS Date: 11-1-2010 Author: Saif El-Sherei Software Link: http://lifetype.net/page/downloads Version: 1.2.10 Tested on: firefox 3.0.15 failure to sanitize the http referer header in index.php results...
[SECURITY] [DSA-2141-4] New lighttpd packages fix regression
------------------------------------------------------------------------ Debian Security Advisory DSA-2141-4 [email protected] http://www.debian.org/security/ Stefan Fritsch January 12, 2011 http://www.debian.org/security/faq -...
NewV Smartclient 1.0.0.18 Command Execution
Vendor: NewV http:// www.newv.com.cn/ Product: NewV smartclient http://demo.newv.com.cn/lds/module/smartclientsetting.exe Vulnerable Version: 1.0.0.18 Status: Not Fixed, Vendor Alerted Risk level: High Credit: Yu Guoyuguo.cngmail.com Description: An input validation issue exists in the NewV Activ...
Debian DSA-2141-1 : openssl - SSL/TLS insecure renegotiation protocol design flaw
DSA-2141 consists of three individual parts, which can be viewed in the mailing list archive: DSA 2141-1 openssl, DSA 2141-2 nss, DSA 2141-3 apache2, and DSA 2141-4 lighttpd. This page only covers the first part, openssl. - CVE-2009-3555 Marsh Ray, Steve Dispensa, and Martin Rex discovered a flaw...
DSA-2141-1 openssl - protocol design flaw
Bulletin has no description...
[SECURITY] [DSA-2141-1] New apache2 packages add backward compatibility option
------------------------------------------------------------------------ Debian Security Advisory DSA-2141-3 [email protected] http://www.debian.org/security/ Stefan Fritsch January 06, 2011 http://www.debian.org/security/faq -...
Debian DSA-2131-1 : exim4 - arbitrary code execution
Several vulnerabilities have been found in exim4 that allow a remote attacker to execute arbitrary code as root user. Exploits for these issues have been seen in the wild. This update fixes a memory corruption issue that allows a remote attacker to execute arbitrary code as the Debian-exim user...
Debian DSA-2130-1 : bind9 - several vulnerabilities
Several remote vulnerabilities have been discovered in BIND, an implementation of the DNS protocol suite. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-3762 When DNSSEC validation is enabled, BIND does not properly handle certain bad signatures if...