Lucene search
+L

1807 matches found

OSV
OSV
added 2014/12/05 4:59 p.m.3 views

DEBIAN-CVE-2014-8123

Buffer overflow in the bGetPPS function in wordole.c in Antiword 0.37 allows remote attackers to cause a denial of service crash via a crafted document...

5CVSS6.6AI score0.03569EPSS
SaveExploits1References1
NVD
NVD
added 2014/12/05 4:59 p.m.14 views

CVE-2014-8123

Buffer overflow in the bGetPPS function in wordole.c in Antiword 0.37 allows remote attackers to cause a denial of service crash via a crafted document...

5CVSS6.5AI score0.03569EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2014/12/05 4:59 p.m.13 views

CVE-2014-8123

Buffer overflow in the bGetPPS function in wordole.c in Antiword 0.37 allows remote attackers to cause a denial of service crash via a crafted document...

5CVSS6AI score0.03569EPSS
SaveExploits1References2
Prion
Prion
added 2014/12/05 4:59 p.m.11 views

Buffer overflow

Buffer overflow in the bGetPPS function in wordole.c in Antiword 0.37 allows remote attackers to cause a denial of service crash via a crafted document...

5CVSS7.1AI score0.03569EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2014/12/05 4:0 p.m.43 views

CVE-2014-8123

Buffer overflow in the bGetPPS function in wordole.c in Antiword 0.37 allows remote attackers to cause a denial of service crash via a crafted document...

6.4AI score0.03569EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2014/12/05 4:0 p.m.54 views

CVE-2014-8123

Buffer overflow in the bGetPPS function in wordole.c in Antiword 0.37 allows remote attackers to cause a denial of service crash via a crafted document...

5CVSS6.5AI score0.03569EPSS
SaveExploits1
AlpineLinux
AlpineLinux
added 2014/12/05 4:0 p.m.100 views

CVE-2014-8123

Buffer overflow in the bGetPPS function in wordole.c in Antiword 0.37 allows remote attackers to cause a denial of service crash via a crafted document...

5CVSS6.5AI score0.03569EPSS
SaveExploits1
RedHat Linux
RedHat Linux
added 2014/11/26 4:52 p.m.7 views

ruby: REXML billion laughs attack via parameter entity expansion

The REXML parser in Ruby 1.9.x before 1.9.3-p550, 2.0.x before 2.0.0-p594, and 2.1.x before 2.1.4 allows remote attackers to cause a denial of service memory consumption via a crafted XML document, aka an XML Entity Expansion XEE attack...

5CVSS6.8AI score0.05538EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2014/11/26 4:52 p.m.6 views

ruby: REXML billion laughs attack via parameter entity expansion

The REXML parser in Ruby 1.9.x before 1.9.3-p550, 2.0.x before 2.0.0-p594, and 2.1.x before 2.1.4 allows remote attackers to cause a denial of service memory consumption via a crafted XML document, aka an XML Entity Expansion XEE attack...

5CVSS6.8AI score0.05538EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2014/11/11 10:0 p.m.39 views

CVE-2014-6333

Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Double Delete Remote Code Execution Vulnerability."...

8.9AI score0.17852EPSS
SaveExploits0References4
OSV
OSV
added 2014/10/27 1:8 p.m.6 views

USN-2389-1 libxml2 vulnerability

It was discovered that libxml2 would incorrectly perform entity substitution even when requested not to. If a user or automated system were tricked into opening a specially crafted document, an attacker could possibly cause resource consumption, resulting in a denial of service...

5CVSS6.7AI score0.03988EPSS
SaveExploits1References2
Check Point Advisories
Check Point Advisories
added 2014/10/14 12:0 a.m.18 views

Microsoft Word Memory Corruption (MS14-061: CVE-2014-4117)

A remote code execution vulnerability has been reported in Microsoft Word. The vulnerability is caused when Microsoft Word does not properly handle objects in memory while parsing specially crafted Office files. A remote attacker can exploit this issue by enticing a user to open a specially craft...

9.3CVSS5.3AI score0.17458EPSS
SaveExploits0
OSV
OSV
added 2014/08/29 4:55 p.m.3 views

DEBIAN-CVE-2010-5110

DCTStream.cc in Poppler before 0.13.3 allows remote attackers to cause a denial of service crash via a crafted PDF file...

4.3CVSS7.2AI score0.02978EPSS
SaveExploits1References1
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.17 views

Microsoft Organization Chart 2 - Remote Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31059/info Microsoft Organization Chart is prone to a remote code-execution vulnerability because of a memory-access violation. Remote attackers can exploit this issue by enticing victims into opening a maliciously crafte...

7.1AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
added 2014/05/15 12:0 a.m.50 views

Adobe Reader Mobile JavaScript Interface Java Code Execution (CVE-2014-0514)

A code execution vulnerability exists in Adobe Mobile Reader for Android. The vulnerability is due to a failure to restrict access to certain JavaScript interfaces. A remote unauthenticated attacker could exploit this vulnerability by enticing a target user to open a crafted document...

3.1AI score0.72189EPSS
SaveExploits7
NVD
NVD
added 2014/04/08 11:55 p.m.25 views

CVE-2014-1758

Stack-based buffer overflow in Microsoft Word 2003 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Word Stack Overflow Vulnerability."...

9.3CVSS7.7AI score0.16695EPSS
SaveExploits0References1
Prion
Prion
added 2014/04/08 11:55 p.m.31 views

Design/Logic Flaw

Microsoft Word 2007 SP3 and 2010 SP1 and SP2, and Office Compatibility Pack SP3, allocates memory incorrectly for file conversions from a binary aka .doc format to a newer format, which allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office File Format...

9.3CVSS8AI score0.17315EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2014/04/08 9:0 p.m.29 views

CVE-2014-1758

Stack-based buffer overflow in Microsoft Word 2003 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Word Stack Overflow Vulnerability."...

8.8AI score0.16695EPSS
SaveExploits0References1
CVE
CVE
added 2014/04/08 9:0 p.m.106 views

CVE-2014-1757

CVE-2014-1757 is the Microsoft Office file format converter memory corruption vulnerability affecting Word 2007 SP3, Word 2010 SP1/SP2, and Office Compatibility Pack SP3. The issue occurs when converting legacy binary (.doc) documents to newer formats, allowing remote attackers to execute arbitra...

9.3CVSS8.6AI score0.17315EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2014/04/08 9:0 p.m.36 views

CVE-2014-1757

Microsoft Word 2007 SP3 and 2010 SP1 and SP2, and Office Compatibility Pack SP3, allocates memory incorrectly for file conversions from a binary aka .doc format to a newer format, which allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office File Format...

8.7AI score0.17315EPSS
SaveExploits0References2
Rows per page
Query Builder