expat: hash table collisions CPU usage DoS

A denial of service flaw was found in the implementation of hash arrays in Expat. An attacker could use this flaw to make an application using Expat consume an excessive amount of CPU time by providing a specially crafted XML file that triggers multiple hash function collisions. To mitigate this...

VulnCheck KEV: CVE-2017-8487

Windows OLE in Windows XP and Windows Server 2003 allows an attacker to execute code when a victim opens a specially crafted file or program aka "Windows olecnv32.dll Remote Code Execution Vulnerability."...

Microsoft Office Remote Code Execution Vulnerability (CNVD-2017-37106)

Microsoft Office 2010 and others are products of Microsoft Corporation.Microsoft Office 2010 is an office software suite.Office Compatibility Pack SP3 is an Office compatibility pack. A remote code execution vulnerability exists in Microsoft Office that stems from the program failing to properly...

Microsoft Excel 2016 Click-to-Run Remote Code Execution Vulnerability

Microsoft Excel 2016 is a spreadsheet processing software in the Office suite of Microsoft Corporation USA.Click-to-Run is one of the updating tools available. A remote code execution vulnerability exists in Microsoft Excel 2016 Click-to-Run that stems from the program failing to properly handle...

Microsoft Office Remote Code Execution Vulnerability (CNVD-2017-37107)

Microsoft Excel 2007 SP3 and so on are the products of the American Microsoft Microsoft company.Microsoft Excel 2007 SP3 is a spreadsheet processing software in a set of Office suite.Microsoft Office Compatibility Pack SP3 is a program to use the Microsoft Office Compatibility Pack SP3 is a...

Adobe Acrobat/Reader Out-of-Bounds Read Vulnerability (CNVD-2017-36598)

Adobe Acrobat and Reader is the United States of America Odooby publicly issued PDF file processing program. Adobe Acrobat and Reader processing PDF files exist out-of-bounds read vulnerability, allowing remote attackers can exploit the vulnerability to submit a special file, inducing the user to...

Adobe Acrobat/Reader Type Obfuscation Vulnerability (CNVD-2017-36613)

Adobe Acrobat and Reader is the United States Ordoby publicly issued PDF file processing program. Adobe Acrobat and Reader processing PDF files there is a type confusion vulnerability, allowing remote attackers can take advantage of the vulnerability to submit a special file, inducing the user to...

Adobe Acrobat/Reader Out-of-Bounds Read Vulnerability

Adobe Acrobat and Reader is the United States of America Odooby publicly issued PDF file processing program. Adobe Acrobat and Reader processing PDF files exist out-of-bounds read vulnerability, allowing remote attackers can exploit the vulnerability to submit a special file, inducing the user to...

Adobe Acrobat/Reader Out-of-Bounds Read Vulnerability (CNVD-2017-36600)

Adobe Acrobat and Reader is the United States of America Odooby publicly issued PDF file processing program. Adobe Acrobat and Reader processing PDF files exist out-of-bounds read vulnerability, allowing remote attackers can exploit the vulnerability to submit a special file, inducing the user to...

Microsoft Excel Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

Microsoft Office Excel Security Feature Bypass

A security feature bypass vulnerability exists in Microsoft Office software by not enforcing macro settings on an Excel document. The security feature bypass by itself does not allow arbitrary code execution. To successfully exploit the vulnerability, an attacker would have to embed a control in ...

PT-2017-12281 · Microsoft · Excel Viewer +3

Name of the Vulnerable Software and Affected Versions: Microsoft Excel versions 2007 Service Pack 3 through 2016 Microsoft Office Compatibility Pack version Service Pack 3 Microsoft Excel Viewer version 2007 Service Pack 3 Microsoft Excel 2016 for Mac Description: A security feature bypass issue...

Adobe Acrobat and Reader Improper Validation of Array Index (APSB17-36: CVE-2017-16391)

A memory corruption vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to an error in Adobe Reader and Acrobat while calculate an array index. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted file...

Adobe Acrobat and Reader Improper Validation of Array Index (APSB17-36: CVE-2017-16410)

A memory corruption vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to an error in Adobe Reader and Acrobat while parsing a corrupted Gif file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted file...

Adobe Acrobat and Reader Heap Overflow (APSB17-36: CVE-2017-16383)

A heap buffer overflow vulnerability exists in Adobe Reader. The vulnerability is due to an error in Adobe Reader while parsing a specially crafted file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

Adobe Acrobat and Reader Security Bypass (APSB17-36: CVE-2017-16361)

A Security Bypass vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to an error in Adobe Reader and Acrobat while parsing a corrupted FDF/XFDF file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted file...

Adobe Flash Player Integer Overflow (APSB17-33: CVE-2017-11213)

An integer overflow vulnerability exists in Adobe Flash Player. The vulnerability is due to the way Adobe Flash handles objects in memory. A remote attacker can exploit this vulnerability by sending a crafted file...

Adobe Flash Player Use After Free (APSB17-33: CVE-2017-11225)

An Use After Free vulnerability exists in Adobe Flash Player. The vulnerability is due to the way Adobe Flash handles objects in memory. A remote attacker can exploit this vulnerability by sending a crafted file...

Adobe Flash Player Out-of-bounds Read (APSB17-33: CVE-2017-3114)

An out-of-bounds read vulnerability exists in Adobe Flash Player. The vulnerability is due to the way Adobe Flash handles objects in memory. A remote attacker can exploit this vulnerability by sending a crafted file...

Adobe Flash Player Out-of-bounds Read (APSB17-33: CVE-2017-3112)

An out-of-bounds read vulnerability exists in Adobe Flash Player. The vulnerability is due to the way Adobe Flash handles objects in memory. A remote attacker can exploit this vulnerability by sending a crafted file...