1607 matches found
USN-374-1: wvWare vulnerability
An integer overflow was discovered in the DOC file parser of the wv library. By tricking a user into opening a specially crafted MSWord .DOC file, remote attackers could execute arbitrary code with the user's privileges...
CVE-2006-4513
CVE-2006-4513 affects the WV library used by wvWare (formerly mswordview). The issue is two integer overflow flaws in the Word converter: LVL count and LFO count (wvGetLFO_records and wvGetFLO_PLF), exploitable via crafted DOC files to execute code. Affected products include AbiWord and KWord (an...
CVE-2006-4513
Multiple integer overflows in the WV library in wvWare formerly mswordview before 1.2.3, as used by AbiWord, KWord, and possibly other products, allow user-assisted remote attackers to execute arbitrary code via a crafted Microsoft Word DOC file that produces 1 large LFO clfolvl values in the...
Debian DSA-887-1 : clamav - several vulnerabilities
Several vulnerabilities have been discovered in Clam AntiVirus, the antivirus scanner for Unix, designed for integration with mail servers to perform attachment scanning. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-3239 The OLE2 unpacker allows...
CVE-2006-5243
Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Doc 1.4 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the docdirectory parameter in 1 downstat.php, 2 file.php, 3 findfile.php, 4 libfile.php, and 5 libformfile.ph...
Echo Security Advisory 2006.49
ECHOADV49$2006 ----------------------------------------------------------------------------------------------- ECHOADV49$2006OpenDock Easy Doc =1.4 docdirectory Multiple Remote File Inclusion Vulnerability...
CVE-2006-5243
Affected product: OpenDock Easy Doc 1.4 and earlier. Vulnerable component: multiple PHP scripts under sw/lib_up_file/ and sw/lib_comment/ (e.g., down_stat.php, file.php, find_file.php, lib_file.php, lib_form_file.php, find_comment.php, comment.php, lib_comment.php, sw/lib_find/find.php). Root cau...
CVE-2006-5243
Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Doc 1.4 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the docdirectory parameter in 1 downstat.php, 2 file.php, 3 findfile.php, 4 libfile.php, and 5 libformfile.ph...
OpenDock Easy Doc <=1.4 (doc_directory) File Include Vulnerabilities
No description provided by source. ECHOADV49$2006 ----------------------------------------------------------------------------------------------- ECHOADV49$2006OpenDock Easy Doc =1.4 docdirectory Multiple Remote File Inclusion Vulnerability...
OpenDock Easy Doc <=1.4 (doc_directory) File Include Vulnerabilities
Exploit for unknown platform in category web applications ==================================================================== OpenDock Easy Doc =1.4 docdirectory File Include Vulnerabilities ==================================================================== ECHOADV49$2006...
OpenDock Easy Doc 1.4 - 'doc_directory' File Inclusion
ECHOADV49$2006 ----------------------------------------------------------------------------------------------- ECHOADV49$2006OpenDock Easy Doc =1.4 docdirectory Multiple Remote File Inclusion Vulnerability...
OpenDock Easy Doc 1.4 - doc_directory File Inclusion
OpenDock Easy Doc 1.4 - docdirectory File Inclusion ECHOADV49$2006 ----------------------------------------------------------------------------------------------- ECHOADV49$2006OpenDock Easy Doc =1.4 docdirectory Multiple Remote File Inclusion Vulnerability...
[ECHO_ADV_49$2006]OpenDock Easy Doc <=1.4 (doc_directory) Multiple Remote File Inclusion Vulnerability
ECHOADV49$2006 ----------------------------------------------------------------------------------------------- ECHOADV49$2006OpenDock Easy Doc =1.4 docdirectory Multiple Remote File Inclusion Vulnerability...
CVE-2006-3493
Buffer overflow in LsCreateLine function mso203 in mso.dll and mso9.dll, as used by Microsoft Word and possibly other products in Microsoft Office 2003, 2002, and 2000, allows remote user-assisted attackers to cause a denial of service crash via a crafted Word DOC or other Office file type. NOTE:...
CVE-2006-3493
Buffer overflow in LsCreateLine function mso203 in mso.dll and mso9.dll, as used by Microsoft Word and possibly other products in Microsoft Office 2003, 2002, and 2000, allows remote user-assisted attackers to cause a denial of service crash via a crafted Word DOC or other Office file type. NOTE:...
CVE-2006-3483
PHPMailList 1.8.0 stores sensitive information under the web document root iwth insufficient access control, which allows remote attackers to obtain email addresses of subscribers, configuration information, and the admin username and password via direct requests to 1 list.dat or 2 mlconfig.dat...
CVE-2006-2197
Integer overflow in wv2 before 0.2.3 might allow context-dependent attackers to execute arbitrary code via a crafted Microsoft Word document...
CVE-2005-3878
Directory traversal vulnerability in index.php in PHP Doc System 1.5.1 and earlier allows remote attackers to access or include arbitrary files via a .. dot dot in the show parameter...
CVE-2005-3878
The CVE-2005-3878 issue affects PHP Doc System (version 1.5.1 and earlier). A directory traversal/local file inclusion vulnerability occurs because the show parameter in index.php is not properly sanitized before being used in an include call. This allows an unauthenticated attacker to access arb...
PHP Doc System index.php show Parameter Local File Inclusion
The remote host is running PHP Doc System, a modular, PHP-based system for creating documentation. The version of PHP Doc System installed on the remote host fails to sanitize user input to the 'show' parameter of the 'index.php' script before using it in a PHP 'include' function. An...