CVE-2016-0055

Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

CVE-2016-0054

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, Excel Services on SharePoint Server 2010 SP2, Excel Services on SharePoint...

CVE-2016-0055

Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

Vulnerabilities in the server operating system OS X Server, which allow attackers to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities of the Twisted module in the Wiki Server server operating system OS X Server are related to errors in the code. Exploiting these vulnerabilities could allow a malicious actor, operating remotely, to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the Microsoft Office Compatibility Pack, the Microsoft Excel Viewer, and the Microsoft Excel spreadsheet editor allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Office Compatibility Pack, the Microsoft Excel Viewer for viewing electronic spreadsheets, and the Microsoft Excel spreadsheet editor are caused by buffer overflows. Exploitation of this vulnerability could allow a malicious actor to execute arbitrary code using...

The vulnerability of the Microsoft Office Compatibility Pack, the Microsoft Excel Viewer, and the Microsoft Excel spreadsheet editor allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Office Compatibility Pack, the Microsoft Excel Viewer for viewing electronic spreadsheets, and the Microsoft Excel spreadsheet editor are caused by buffer overflows. Exploitation of this vulnerability could allow a malicious actor to execute arbitrary code using...

OpenJDK: insufficient enforcement of totalEntitySizeLimit (JAXP, 8133962)

It was discovered that the JAXP component in OpenJDK did not properly enforce the totalEntitySizeLimit limit. An attacker able to make a Java application process a specially crafted XML file could use this flaw to make the application consume an excessive amount of memory...

CVE-2016-0457

Unspecified vulnerability in the Application Mgmt Pack for E-Business Suite component in Oracle E-Business Suite 12.1 and 12.2 allows remote attackers to affect confidentiality via vectors related to REST Framework, a different vulnerability than CVE-2016-0456. NOTE: the previous information is...

The vulnerability of the Microsoft Office suite, specifically the Word Viewer program for reading doc files, allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Office suite, including the Word Viewer program for reading DOC files, stems from buffer overflow attacks. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted Office document...

The vulnerability of the Microsoft Excel Viewer, a spreadsheet viewer, and the Microsoft Office Compatibility Pack, a compatibility suite, allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Excel Viewer, a component of the Microsoft Office Compatibility Pack, and the Microsoft Excel spreadsheet editor is due to buffer overflow. Exploitation of this vulnerability could allow an attacker to execute arbitrary code using a specially crafted Office...

Adobe Acrobat Pro DC OCG Memory Error References Remote Code Execution Vulnerability

Adobe Reader is a PDF document reading software. A security vulnerability exists in Adobe Reader's handling of constructed OCG objects, which allows remote attackers to exploit the vulnerability to construct malicious PDF files and trick users into parsing them, which can crash the application or...

CVE-2016-0035

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption...

CVE-2016-0035

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption...

CVE-2016-0010

Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Excel for Mac 2011, PowerPoint for Mac 2011, Word for Mac 2011, Excel 2016 for Mac, PowerPoint 2016 for Mac, Word 2016 for Mac, and Word Viewer allow remote attackers to execute arbitrary code via a...

Memory corruption

Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Excel for Mac 2011, PowerPoint for Mac 2011, Word for Mac 2011, Excel 2016 for Mac, PowerPoint 2016 for Mac, Word 2016 for Mac, and Word Viewer allow remote attackers to execute arbitrary code via a...

Adobe Reader DC Remote Code Execution Vulnerability

Adobe Reader is PDF document reading software. A security vulnerability exists in the AcroForm plug-in for Adobe Reader DC. A constructed PDF file could allow Adobe Reader DC to read memory outside of allocated objects. An attacker can exploit this vulnerability to execute arbitrary code in the...

Apple iOS libxml2 Memory Corruption Vulnerability

iOS is an operating system developed by Apple for mobile devices, and supported devices include iPhone, iPod touch, iPad, and Apple TV. A security vulnerability exists in libxml2 in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1. A remote attacker could exploit this vulnerability ...

UBUNTU-CVE-2015-8868

Heap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler before 0.40.0 allows remote attackers to cause a denial of service memory corruption and crash or possibly execute arbitrary code via an invalid blend mode in the ExtGState dictionary in a crafted PDF...

CVE-2015-5001

IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF19, and 8.5.0 before CF08 allows remote authenticated users to cause a denial of service memory consumption via a crafted document...

CVE-2015-5001

IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF19, and 8.5.0 before CF08 allows remote authenticated users to cause a denial of service memory consumption via a crafted document...