Black Ice BIImgFrm.ocx ActiveX Code Execution (CVE-2008-2683)

A remote code execution vulnerability has been reported in Black Ice BIImgFrm.ocx. The vulnerability is due to a design flaw in the application which allows uploading of specially crafted files to an affected system. An attacker could exploit this vulnerability by enticing a victim to open a...

Microsoft Office Visio UML Parsing Use After Free (MS11-060; CVE-2011-1972)

Microsoft Visio is a diagram creation software for Microsoft Windows. A remote code execution vulnerability has been reported in Microsoft Office Visio. The vulnerability is due to the improper way in which the application validates objects in memory when parsing specially crafted Visio files. An...

Microsoft Visio Remote Code Execution Vulnerability (2560847)

This host is missing an important security update according to Microsoft Bulletin MS11-055. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office Visio 2003 mfc71enu.dll Insecure Library Loading (MS11-055; CVE-2010-3148)

A remote code execution vulnerability has been reported in Microsoft Visio 2003. Remote attackers could trigger this flaw by enticing a user to open a specially crafted Visio-related file. Successful exploitation may enable an attacker to install programs; view, change, or delete data; or create...

Adobe Shockwave Player Lnam Chunk Processing Buffer Overflow (APSB10-25; CVE-2010-3655)

A code execution vulnerability has been identified in Adobe Shockwave Player. The vulnerability is due to an error in Adobe Shockwave Player while parsing stringArray structures inside Lman chunks in crafted Director files. A remote attacker can exploit this issue by enticing a user to open a...

Design/Logic Flaw

SBE.dll in the Stream Buffer Engine in Windows Media Player and Windows Media Center in Microsoft Windows XP SP2 and SP3, Windows XP Media Center Edition 2005 SP3, Windows Vista SP1 and SP2, Windows 7 Gold and SP1, and Windows Media Center TV Pack for Windows Vista does not properly parse Digital...

DEBIAN-CVE-2011-0531

demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of service crash and execute arbitrary commands via a crafted MKV WebM or Matroska file that triggers memory corruption, related to "class mismatching" and the...

CVE-2010-3042

Multiple buffer overflows in the Cisco WebEx Recording Format WRF and Advanced Recording Format ARF Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted 1 .wrf or 2 .arf file, a...

Ichitaro series vulnerable to arbitrary code execution

Overview The "Ichitaro" series word processing software, from JustSystems Corporation contains a vulnerability that may allow arbitrary code execution. This vulnerability differs from JVN01948274, and other issues that were previously published on JVN. Impact When opening a specially crafted file...

Microsoft Excel BIFF Record Parsing Dangling Pointer Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Excel file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the...

USN-995-1: libMikMod vulnerabilities

It was discovered that libMikMod incorrectly handled songs with different channel counts. If a user were tricked into opening a crafted song file, an attacker could cause a denial of service. CVE-2007-6720 It was discovered that libMikMod incorrectly handled certain malformed XM files. If a user...

CVE-2010-1526

CVE-2010-1526 targets libgdiplus (2.6.7) used by Mono. The vulnerability consists of three heap-based/integer overflows in image decoders: gdip_load_tiff_image() (TIFF), gdip_load_jpeg_image_internal() (JPEG), and gdip_read_bmp_image() (BMP). Successful exploitation could lead to arbitrary code e...

CVE-2010-2990

Citrix Online Plug-in for Windows for XenApp & XenDesktop before 11.2, Citrix Online Plug-in for Mac for XenApp & XenDesktop before 11.0, Citrix ICA Client for Linux before 11.100, Citrix ICA Client for Solaris before 8.63, and Citrix Receiver for Windows Mobile before 11.5 allow remote attackers...

CVE-2010-2990

Citrix Online Plug-in for Windows for XenApp & XenDesktop before 11.2, Citrix Online Plug-in for Mac for XenApp & XenDesktop before 11.0, Citrix ICA Client for Linux before 11.100, Citrix ICA Client for Solaris before 8.63, and Citrix Receiver for Windows Mobile before 11.5 allow remote attackers...

CVE-2010-1900

Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and Works 9 do not properly handle malformed records in a Wo...

Microsoft Windows Media Player Skin Decompression Code Execution (CVE-2007-3035)

Microsoft Windows Media Player WMP is a popular multi-media application bundled with recent versions of the Microsoft Windows operating system. The application supports the playback of numerous video, audio, and image formats, as well as the playback of streaming content from remote sources. To...

CVE-2010-2568

Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote attackers to execute arbitrary code via a crafted 1 .LNK or 2 .PIF shortcut file, which is not properly handled during icon display in Windows Explorer...

libtiff: TIFFExtractData out-of-bounds read crash

The TIFFExtractData macro in LibTIFF before 3.9.4 does not properly handle unknown tag types in TIFF directory entries, which allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted TIFF file...

DEBIAN-CVE-2010-2631

LibTIFF 3.9.0 ignores tags in certain situations during the first stage of TIFF file processing and does not properly handle this during the second stage, which allows remote attackers to cause a denial of service application crash via a crafted file, a different vulnerability than CVE-2010-2481...

Memory corruption

Unspecified vulnerability in Microsoft Office Excel 2002 SP3, 2003 SP3, 2007 SP1 and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2;...