Memory Corruption Vulnerability in WPS Forms (CNVD-2017-34135)

WPS Office is an office software suite developed independently by Kingsoft Corporation. A memory corruption vulnerability exists in the etmain module of the form et.exe in WPS when parsing a specific xls file, which can be exploited by an attacker to cause a denial of service or code execution...

Microsoft JET Database Engine Remote Code Execution Vulnerability

A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, or...

Memory corruption vulnerability in WPS Forms kso module (CNVD-2017-35756)

WPS Office is an office software suite developed independently by Kingsoft Corporation. A memory corruption vulnerability exists in the WPS Forms kso module, which occurs when Formset.exe in WPS is parsing a specific xlsx file. An attacker can exploit the vulnerability to cause a denial of servic...

Memory Corruption Vulnerability in WPS Forms

WPS Office is an office software suite developed independently by Kingsoft Corporation. A memory corruption vulnerability exists in Formset.exe in WPS when parsing a specific xls file. An attacker exploiting this vulnerability could cause a denial of service, which if exploited in a sophisticated...

Denial of Service Vulnerability in WPS Forms xlsxrw.DLL

WPS Office is an office software suite developed independently by Kingsoft Corporation. A denial of service vulnerability exists in WPS Forms xlsxrw.DLL, which occurs when Formset.exe in WPS is parsing a specific xls file. An attacker can exploit the vulnerability to cause a denial of service...

Memory Corruption Vulnerability in WPS Forms etmain Module

WPS Office is an office software suite developed independently by Kingsoft Corporation. A memory corruption vulnerability exists in the etmain module of the form et.exe in WPS when parsing a specific xls file, which can be exploited by an attacker to cause a denial of service...

Memory Corruption Vulnerability in WPS Forms kso Module

WPS Office is an office software suite developed independently by Kingsoft Corporation. A memory corruption vulnerability exists in the kso module of formset.exe in WPS when parsing a specific xls file. An attacker could cause a denial of service by exploiting this vulnerability...

Address Out-of-Bounds Read Vulnerability in WPS Forms etmain Module

WPS Office is an office software suite developed independently by Kingsoft Corporation. An address out-of-bounds read vulnerability exists in the etmain module of the form et.exe in WPS when parsing a specific xls file. An attacker exploiting this vulnerability could cause a denial of service or...

Null Pointer Reference Vulnerability in WPS Forms (CNVD-2017-30610)

WPS Office is an office software suite developed independently by Kingsoft Corporation. A null pointer reference vulnerability exists in formset.exe in WPS when parsing a specific xls file, which can be exploited by an attacker to cause a denial of service or lead to code execution...

FreeXL BIFF Dimension Marker Code Execution Vulnerability

Summary An exploitable heap-based buffer overflow vulnerability exists in the readlegacybiff function of FreeXL 1.0.3. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability. Tested...

Microsoft JET Database Engine Remote Code Execution Vulnerability

A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, or...

MarkLogic MarkLogic Antenna House DMC HTMLFilter Execute Arbitrary Code Vulnerability

MarkLogic MarkLogic is a database software from MarkLogic Corporation, USA. The software is characterized by hierarchical storage, dual-temporal and scalability.Antenna House DMC HTMLFilter is one of the HTML generic generator libraries developed by Antenna House, Inc. in the United States. An...

CVE-2017-2798

An exploitable heap corruption vulnerability exists in the GetIndexArray functionality of Antenna House DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted XLS file can cause a heap corruption resulting in arbitrary code execution. An attacker can send or provide a malicious XLS file t...

CVE-2017-2799

An exploitable heap corruption vulnerability exists in the AddSst functionality of Antenna House DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted XLS file can cause a heap corruption resulting in arbitrary code execution. An attacker can send or provide a malicious XLS file to trigg...

CVE-2017-2783

An exploitable heap corruption vulnerability exists in the FillRowFormat functionality of Antenna House DMC HTMLFilter that is shipped with MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide malicious xls...

CVE-2017-2790

When processing a record type of 0x3c from a Workbook stream from an Excel file .xls, JustSystems Ichitaro Office trusts that the size is greater than zero, subtracts one from the length, and uses this result as the size for a memcpy. This results in a heap-based buffer overflow and can lead to...

CVE-2017-2790

When processing a record type of 0x3c from a Workbook stream from an Excel file .xls, JustSystems Ichitaro Office trusts that the size is greater than zero, subtracts one from the length, and uses this result as the size for a memcpy. This results in a heap-based buffer overflow and can lead to...

DEBIAN-CVE-2017-5992

Openpyxl 2.4.1 resolves external entities by default, which allows remote attackers to conduct XXE attacks via a crafted .xlsx document...

Microsoft Office Security Feature Bypass (MS16-148: CVE-2016-7267)

A security feature bypass exists in Microsoft Office. The vulnerability is due to an improper handling of an excel file. A remote attacker can exploit this vulnerability ,potentially leading to a security bypass...

Microsoft Office Memory Corruption (MS16-133: CVE-2016-7231)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted excel files. A remote attacker can exploit this issue by enticing a victim to open a specially...