Microsoft Windows Explorer - '.doc' File Denial of Service

MS Windows Explorer Unspecified .DOC File Denial of Service Exploit Download the file anywhere excluding on desktop and try to browse it with the Windows explorer and you'll see how it crashes ! - Tested on Windows XP Service Pack 1 and Service Pack 2. Hope the latest Microsoft fixes will fix tha...

MS Windows Explorer Unspecified .DOC File Denial of Service Exploit

Exploit for unknown platform in category dos / poc =================================================================== MS Windows Explorer Unspecified .DOC File Denial of Service Exploit =================================================================== MS Windows Explorer Unspecified .DOC File...

Microsoft Windows Explorer - .doc File Denial of Service

Microsoft Windows Explorer - .doc File Denial of Service MS Windows Explorer Unspecified .DOC File Denial of Service Exploit Download the file anywhere excluding on desktop and try to browse it with the Windows explorer and you'll see how it crashes ! - Tested on Windows XP Service Pack 1 and...

My Web Doc 2000 Administration Pages - Multiple Authentication Bypass Vulnerabilities

source: https://www.securityfocus.com/bid/28400/info My Web Doc is prone to multiple authentication-bypass vulnerabilities. Attackers can leverage these issues to compromise the application, which could aid in other attacks. My Web Doc 2000 Final is vulnerable; other versions may also be affected...

CVE-2008-1178: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in include/doc/index.php in Centreon 1.4.2.3 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the page parameter, a different vector than CVE-2008-1119...

Veritas Storage Foundation Administrator service buffer overflow

Added: 03/03/2008 CVE: CVE-2008-0638 BID: 25778 OSVDB: 41978 Background Veritas Storage Foundation is an online storage management solution. An Administrator service, implemented by vxsvc.exe, listens on port 3207 by default. Problem A buffer overflow vulnerability in the Administrator service...

CVE-2008-1119: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in include/doc/getimage.php in Centreon 1.4.2.3 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the img parameter...

Microsoft Word memory corruption

Memory corruption on .doc file parsing...

Debian Security Advisory DSA 1156-1 (kdebase)

The remote host is missing an update to kdebase announced via advisory DSA 1156-1. Ludwig Nussel discovered that kdm, the X display manager for KDE, handles access to the session type configuration file insecurely, which may lead to the disclosure of arbitrary files through a symlink attack...

Debian: Security Advisory (DSA-771-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Word 2000/2003 Unchecked Boundary Condition Vulnerability

No description provided by source. /------------------------------------------------------------ Microsoft Word unchecked boundary condition vulnerability. --------------------------------------------------------- One of the functions in mso.dll older versions mso9.dll...

Mozilla Forefox jar: URL crossite scripting

It's possible to fire crossite scripting attack via jar: protocol by uploading JAR, DOC, ZIP, etc files...

Fedora 8 : samba-3.0.27-0.fc8 (2007-3403)

Security Fixes : - CVE-2007-4572 - CVE-2007-5398 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 7 : firestarter-1.0.3-16.fc7 (2007-0700)

Tue Jun 26 2007 Damien Durand - 1.0.3-16 - Fix BR - Fix active connections status - Sun Jun 17 2007 Damien Durand - 1.0.3-15 - Remove old doc - Fix pam configuration Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

PT-2007-6193 · Unknown · Online Fantasy Football League

Name of the Vulnerable Software and Affected Versions: Online Fantasy Football League OFFL version 0.2.6 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the DOC ROOT parameter in the lib/classes/offl nflteam.php file. However, it is noted that a FILE test...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in myphpPagetool 0.4.3 allow remote attackers to execute arbitrary PHP code via a URL in the ptinclude parameter to 1 help1.php, 2 help2.php, 3 help3.php, 4 help4.php, 5 help5.php, 6 help6.php, 7 help7.php, 7 help8.php, 8 help9.php, or 10 index.p...

CVE-2007-4947: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in myphpPagetool 0.4.3 allow remote attackers to execute arbitrary PHP code via a URL in the ptinclude parameter to 1 help1.php, 2 help2.php, 3 help3.php, 4 help4.php, 5 help5.php, 6 help6.php, 7 help7.php, 7 help8.php, 8 help9.php, or 10 index.p...

CVE-2007-4888: Undefined Security Weakness

The "You are not allowed..." error handler in XWiki 1.0 B1 and 1.0 B2 associates the doc variable with the entire document content and metadata regardless of a user's view rights, which allows remote authenticated users to read arbitrary documents via a custom skin that prints the content attribu...

Security fix for the ALT Linux 5 package netpbm version 10.35.30-alt1

Aug. 20, 2007 Alexey Tourbin 10.35.30-alt1 - 10.33 - 10.35.30 from netpbm.svn.sourceforge.net repo + fixes buffer overflow in pamtofits CVE-2006-3145 - sync RedHat patches Jindrich Novy, 10.35-14 + pamscale won't waste all system resources by usage of uninitialized variables for output image...

[SECURITY] Fedora Core 6 Update: tetex-3.0-35.fc6

TeTeX is an implementation of TeX for Linux or UNIX systems. TeX takes a text file and a set of formatting commands as input and creates a typesetter-independent .dvi DeVice Independent file as output. Usually, TeX is used in conjunction with a higher level formatting package like LaTeX or...