1051 matches found
Microsoft Security Bulletin MS10-023 - Important Vulnerability in Microsoft Office Publisher Could Allow Remote Code Execution (981160)
Microsoft Security Bulletin MS10-023 - Important Vulnerability in Microsoft Office Publisher Could Allow Remote Code Execution 981160 Published: April 13, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Microsoft Office...
MS10-013: Description of the security update for Quartz: February 9, 2010
None None...
Bo-Blog 2.0.3 whizzylink.php 文件信息泄露漏洞
No description provided by source...
Stack overflow
Stack-based buffer overflow in Microsoft Office Word 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, Open XML File Format Converter for Mac, Office Word Viewer 2003 SP3, and Office Word Viewer allow remote attackers to execute arbitrary code via a Word document with a malformed File...
MS09-037: Description of the security update for Windows Media Player: August 11, 2009
None None...
Description of the security update for the Microsoft Visual C++ 2005 Service Pack 1 Redistributable Package (for previously installed versions): July 28, 2009
None None...
Description of the security update for the Microsoft Visual C++ 2008 Redistributable Package (for previously installed versions): July 28, 2009
None None...
MS09-010: Description of the update for Windows WordPad Converter: April 14, 2009
None None...
Microsoft Security Bulletin MS09-003 - Critical Vulnerabilities in Microsoft Exchange Could Allow Remote Code Execution (959239)
Microsoft Security Bulletin MS09-003 - Critical Vulnerabilities in Microsoft Exchange Could Allow Remote Code Execution 959239 Published: February 10, 2009 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in Microsoft Exchange...
MS08-069: Description of the security update for the 2007 Office suite: November 11, 2008
None None...
Attachmax多个输入验证漏洞
BUGTRAQ ID: 31207 Attachmax是用于在网站提供视频内容的脚本。 Attachmax脚本中存在多个输入验证错误，允许恶意用户泄露敏感信息或执行文件包含攻击。 1. 远程文件包含 config.php页面没有正确的验证对relpath参数的输入便用于包含文件，这可能导致包含本地或外部资源的任意文件。成功利用这个漏洞要求打开了registerglobals选项。 2. 文件信息泄露 主文件夹中的info.php文件没有受到保护，攻击者可以从浏览器中直接看到这个文件，窃取服务器的敏感信息。 3. SQL盲注...
Microsoft Security Bulletin MS08-041 – Critical Vulnerability in the ActiveX Control for the Snapshot Viewer for Microsoft Access Could Allow Remote Code Execution (955617)
Microsoft Security Bulletin MS08-041 – Critical Vulnerability in the ActiveX Control for the Snapshot Viewer for Microsoft Access Could Allow Remote Code Execution 955617 Published: August 12, 2008 Version: 1.0 General Information Executive Summary This security update resolves a privately report...
CA ARCserve Backup Discovery Service Denial of Service Vulnerability
Title: CA ARCserve Backup Discovery Service Denial of Service Vulnerability CA Advisory Date: 2008-06-17 Reported By: Luigi Auriemma Impact: A remote attacker can cause a denial of service. Summary: CA ARCserve Backup contains a vulnerability in the Discovery service casdscsvc that can allow a...
CVE-2008-0109
Word in Microsoft Office 2000 SP3, XP SP3, Office 2003 SP2, and Office Word Viewer 2003 allows remote attackers to execute arbitrary code via crafted fields within the File Information Block FIB of a Word file, which triggers length calculation errors and memory corruption...
Debian Security Advisory DSA 431-2 (perl)
The remote host is missing an update to perl announced via advisory DSA 431-2. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Windows Media Player 7.1 <= 10 BMP Heap Overflow PoC (MS06-005)
Exploit for unknown platform in category dos / poc =============================================================== Windows Media Player 7.1 include define BITMAPFILESIZE 0xA8D2 define BITMAPFILENAME "crafted.bmp" pragma pack push pragma pack 1 // bitmap file format - http:/...
eject file information leakage
File existance in non-readable directory may be checked...
[immune advisory] Mulitple vulnerabilities found in BisonFTP
immune advisory Mulitple vulnerabilities found in BisonFTP ================================================================================ BisonFTP is a FTP daemon used on Microsoft Windows 9x/NT systems. - DESCRIPTION ---------------------------------------------------------------- I BisonFTP i...
Microsoft Windows 2000 Indexing Services enumerates local file locations via ixsso.query ActiveX object
Overview Index Server 2.0 and the Indexing Service 3.0 contain a vulnerability that may allow remote intruders to gain information about files on the local computer. Description Index Server 2.0 and Indexing Service 3.0 are services that allow information about local files to be queried via a web...
Retrieving information on local files in IE (GM#003-IE)
GreyMagic Security Advisory GM003-IE ===================================== By GreyMagic Software, Israel. 27 Mar 2002. Available in HTML format at http://security.greymagic.com/adv/gm003-ie/. Topic: Retrieving information on local files in IE. Discovery date: 18 Feb 2002. Affected applications:...