Microsoft Office Memory Corruption (MS15-033: CVE-2015-1641)

A remote code execution vulnerability has been reported in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted Office files. A remote attacker can exploit this issue by enticing a user to open a...

Microsoft Office Component Use After Free (MS15-033: CVE-2015-1651)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is triggered when the Office software improperly handles objects in memory while parsing specially crafted Office files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...

Apple iOS iWork File Memory Corruption Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS suffers from a memory corruption vulnerability in the handling of iWork files, which allows attackers to exploit the vulnerability to construct malicious files that can be parsed by an app and c...

DLA-189-1 libgd2 - security update

Bulletin has no description...

FreeBSD : osc -- shell command injection via crafted _service files (f450587b-d7bd-11e4-b5a4-14dae9d5a9d2)

SUSE Security Update reports : osc before 0.151.0 allows remote attackers to execute arbitrary commands via shell metacharacters in a service file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML...

UBUNTU-CVE-2014-9653

readelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not consider that pread calls sometimes read only a subset of the available data, which allows remote attackers to cause a denial of service uninitialized memor...

Microsoft Office Bad Index Remote Code Execution (MS14-069) - Ver2 (CVE-2014-6334)

A remote code execution vulnerability has been reported in Microsoft Word. The vulnerability is due to an error in Microsoft Word while parsing a specially crafted Office files. A remote attacker can exploit this issue by enticing a user to open a specially crafted document with an affected versi...

Microsoft Office Memory Corruption Vulnerability (CNVD-2015-01632)

Microsoft Office is a suite of word processing programs developed by Microsoft. Microsoft Office handles specially crafted Office files with a memory corruption vulnerability that allows an attacker to construct special files and trick the user into parsing them, which can crash the application o...

Microsoft windows Adobe font driver buffer overflow vulnerability (CNVD-2015-01623)

Microsoft Windows is an operating system developed by Microsoft. A security vulnerability exists in Microsoft Windows Adobe due to a failure of the font driver to properly handle specially crafted files or HTML, which allows attackers to exploit the vulnerability for buffer overflow attacks that...

Microsoft windows Adobe font driver buffer overflow vulnerability (CNVD-2015-01621)

Microsoft Windows is an operating system developed by Microsoft. A security vulnerability exists in Microsoft Windows Adobe due to a failure of the font driver to properly handle specially crafted files or HTML, which allows attackers to exploit the vulnerability for buffer overflow attacks that...

Microsoft Office Memory Misreference Vulnerability

Microsoft Office is a suite of word processing programs developed by Microsoft. Microsoft Office handles specially crafted Office files with a memory misreference vulnerability that allows an attacker to construct special files and trick users into parsing them, which can crash the application or...

Microsoft windows Adobe Font Driver Denial of Service Vulnerability

Microsoft Windows is an operating system developed by Microsoft. Microsoft Windows Adobe Font Driver fails to properly handle specially crafted files or HTML, allowing attackers to exploit the vulnerability to trigger memory allocation errors and conduct denial of service attacks...

Microsoft windows Adobe Font Driver Buffer Overflow Vulnerability

Microsoft Windows is an operating system developed by Microsoft. Microsoft Windows Adobe Font Driver does not properly handle specially crafted files or HTML, allowing attackers to exploit the vulnerability for buffer overflow attacks that can crash applications or execute arbitrary code...

Microsoft windows Adobe font driver buffer overflow vulnerability (CNVD-2015-01624)

Microsoft Windows is an operating system developed by Microsoft. A security vulnerability exists in Microsoft Windows Adobe due to a failure of the font driver to properly handle specially crafted files or HTML, which allows attackers to exploit the vulnerability for buffer overflow attacks that...

Microsoft Office Component Use After Free (MS15-022: CVE-2015-0085)

A remote code execution vulnerability has been reported in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted Office files. A remote attacker can exploit this issue by enticing a user to open a...

Microsoft Word Local Zone Remote Code Execution (MS15-022; CVE-2015-0097)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is caused when the Office software improperly handles objects in memory while parsing specially crafted Office files. A remote attacker can exploit this issue by enticing a user to open a specially crafted office...

Apple iOS < 8.1.3 Multiple Vulnerabilities

Binary data 8639.prm...

Multiple Denial of Service Vulnerabilities in ImageMagick

ImageMagick is an image processing program. ImageMagick suffers from multiple denial-of-service vulnerabilities that allow attackers to construct malicious files and trick the application into parsing them, which can crash the application...

Maarch LetterBox Arbitrary File Upload Vulnerability

Maarch LetterBox is a WEB-based application. Maarch LetterBox fails to properly validate uploaded files, allowing an attacker to exploit a vulnerability to submit special files and execute them with WEB privileges...

[ MDVSA-2015:042 ] clamav

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:042 http://www.mandriva.com/en/support/security/ Package : clamav Date : February 10, 2015 Affected: Business Server 1.0 Problem Description: Updated clamav packages fix security vulnerabilities: ClamAV 0.98...