Microsoft Excel XLSX File Parsing Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing victims to open a specially crafted 'XLXS' Excel file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the...

Microsoft PowerPoint PPT File Parsing Memory Corruption (CVE-2006-3656)

There exists a memory corruption vulnerability in Microsoft PowerPoint. The flaw is caused due to an insufficient checks of a malformed record contained within a PowerPoint file. An attacker can exploit this vulnerability to inject and execute arbitrary code in the security context of the current...

openoffice.org security update

1.1.5-10.0.7.3 - Resolves: rhbz529748 openoffice.org various flaws - CVE-2009-3301 OpenOffice.org Word sprmTDefTable Memory Corruption - CVE-2009-3302 OpenOffice.org Word sprmTSetBrc Memory Corruption 1.1.5-10.0.7.2 - Resolves: rhbz529748 openoffice.org various flaws - CVE-2009-2950 GIF file...

DSA-1995-1 openoffice.org - several

Bulletin has no description...

RealNetworks RealPlayer IVR Format Remote Code Execution Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within RealPlayer's...

n.player buffer overflow

Buffer overflow on skin file parsing...

HT-MP3Player 1.0 HT3 File Parsing Buffer Overflow

$Id: htmp3playerht3bof.rb 7724 2009-12-06 05:50:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft IIS 0Day Vulnerability in Parsing Files (semi-colon bug)

Microsoft IIS 0Day Vulnerability in Parsing Files semi-colon bug Application: Microsoft Internet Information Services - IIS All versions Impact: Highly Critical for Web Applications Finding Date: April 2007 Report Date: Dec. 2009 Found by: Soroush Dalili Irsdl 4t yahoo d0t com Website:...

Microsoft IIS PHP File Parsing

IIS 6 0day php original exploit : http://www.securityfocus.com/bid/37460 by: PouyaServer When the upload pictures to File.php;file.jpg when, IIS will automatically parse the php format. to change the file name webshell 1.php;1.jpg Direct access to IE resloves the PHP that is the php shell into...

Mozilla Codesighs memory corruption

Buffer overflow on file parsing...

libvorbis library multiple security vulnerabilities

Multiple vulnerabilities on ogg files parsing...

GIMP integer overflow

Integer overflow on .BPM, .PSD files parsing...

Free Download Manager Torrent File Parsing Multiple Remote BOF

Exploit for unknown platform in category local exploits ========================================================================================== Free Download Manager Torrent File Parsing Multiple Remote Buffer Overflow Vulnerabilities...

Microsoft Word memory corruption

Memory corruption during Microsoft word file parsing...

Nullsoft Winamp CAF File Processing Integer Overflow (CVE-2009-0186)

Nullsoft Winamp is a multimedia player application that is capable of playing many formats of audio and video files. Winamp can play CD tracks, MP3 music files or MPEG video files as well as numerous other formats. It is also capable of reading CAF media file which has file extension .caf. A...

SafeNet SoftRemote buffer overflow

Buffer overflow on policy file parsing...

Microsoft Windows Explorer Invalid URL File Parsing Stack Overflow (CVE-2006-3351)

The Microsoft Windows series of operating systems is one of the most popular systems in use on workstations, home computers, and servers. All versions of the OS include a graphical shell interface, called Windows Explorer. There exists a stack exhaustion vulnerability in Microsoft Windows Explore...

Microsoft DirectX WAV and AVI File Parsing Code Execution (MS07-064; CVE-2007-3895)

Microsoft DirectX is a set of libraries that aim for accelerated video and audio experience on Microsoft Windows operating system. DirectX can parse multiple audio or video file formats which include WAV and AVI files. The default handler of AVI and WAV files on Windows systems is Windows Media...

Microsoft IIS is parsing the file name“x. asp;x.jpg/x.php;x.jpg”vulnerability-vulnerability warning-the black bar safety net

| Microsoft IIS is parsing the file name“x. asp;x.jpg/x.php;x.jpg”vulnerability --- When the file is named x. asp;x. jpg, Microsoft IIS will automatically to the asp format to be parsed. 而 当 文件 名为 x.php;x. jpg, Microsoft IIS will automatically in php format to be parsed. So we just upload after x...

win2003 II6 parsing vulnerability practical and application-vulnerability warning-the black bar safety net

New win2003 IIS6 parsing vulnerability iis6 file parsing vulnerability announced. Use The webshell file name changed 1. asp;. jpg Direct IE access is parsed into ASP That is the asp shell into X. asp;. jpg in win2003 IIS6 environment will automatically resolve to the asp We have to combat it out ...