CVE-2009-0226

Stack-based buffer overflow in the PowerPoint 4.2 conversion filter in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via a long string in sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory...

Format string

Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than...

Stack overflow

Stack-based buffer overflow in the PowerPoint 4.2 conversion filter in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via a long string in sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory...

CVE-2009-0226

CVE-2009-0226 is a memory corruption/stack-based buffer overflow in Microsoft PowerPoint's legacy 4.0 file format handling. The vulnerability allows remote code execution when a user opens a specially crafted PowerPoint 4.0 sound-data stream, affecting PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3....

CVE-2009-0227

Stack-based buffer overflow in the PowerPoint 4.2 conversion filter PP4X32.DLL in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via a large number of structures in sound data in a file that uses a PowerPoint 4.0 native file format,...

CVE-2009-0220

CVE-2009-0220 is a Microsoft PowerPoint vulnerability in the PP4X32.DLL PowerPoint 4.0 importer that caused multiple stack-based buffer overflows. The issue could allow remote code execution when a user opens a specially crafted PowerPoint 4.0 file, with two described overflow paths: an incorrect...

PDF JBIG2 NULL dereference

The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service crash via a crafted PDF file that triggers a NULL pointer dereference...

Recently hung it to the trend is hanging on the gif? - Vulnerability warning-the black bar safety net

The recent discovery of several hung it to the station, the horse hanging in the picture. gif file format for pictures, later added these The code can still be displayed properly. “ 腜 ? Saw 7? Aberdeen? D shoes ;reference ;iframe src=http://127.0.0.1/m.htm width=0 height=0/iframe” Using 1 6 hex...

IBM ISS: Adobe JBIG2 exploits being spammed out

PDFs containing exploits for the recent 0-day vulnerability in Acrobat Reader are now being actively sent out through spambots. The folks at the IBM ISS X-Force say they’re seeing infected PDFs being spammed out and that it looks like the traffic is mainly coming from Taiwan, though those may be...

CentOS Update for libvorbis CESA-2008:0270 centos3 x86_64

Check for the Version of libvorbis OpenVAS Vulnerability Test CentOS Update for libvorbis CESA-2008:0270 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

F-Secure多个杀毒产品LHA及RAR文档绕过安全扫描漏洞

F-Secure Internet Gatekeeper和F-Secure Anti-Virus都是芬兰的一家杀毒软件厂商所发布的杀毒产品。 F-Secure的这些防病病毒工具处理畸形LHA和RAR文档时存在漏洞，远程攻击者可能利用此漏洞绕过扫描检测。 如果LHA和RAR文件设置了畸形的文档文件头的话，这些文件就可能绕过F-Secure产品的杀毒扫描，导致在用户系统上执行非授权操作。 F-Secure Anti-Virus for Workstations 7.00 F-Secure Anti-Virus for Windows Servers 7.00 F-Secure...

CVE-2007-2452

Heap-based buffer overflow in the visitoldformat function in locate/locate.c in locate in GNU findutils before 4.2.31 might allow context-dependent attackers to execute arbitrary code via a long pathname in a locate database that has the old format, a different vulnerability than CVE-2001-1036...

CVE-2007-1117

Unspecified vulnerability in Publisher 2007 in Microsoft Office 2007 allows remote attackers to execute arbitrary code via unspecified vectors, related to a "file format vulnerability." NOTE: this information is based upon a vague pre-advisory with no actionable information. However, the advisory...

CVE-2007-1117

Technical details are not publicly available in the provided documents. Monitor for updates.

mysql -- format string vulnerability

Jean-David Maillefer reports a Denial of Service vulnerability within MySQL. The vulnerability is caused by improper checking of the dataformat routine, which cause the MySQL server to crash. The crash is triggered by the following code: "SELECT dateformat'%d%s', 1;...

openmotif21 stack overflows in libxpm

Multiple stack-based buffer overflows in 1 xpmParseColors in parse.c, 2 ParseAndPutPixels in create.c, and 3 ParsePixels in parse.c for libXpm before 6.8.1 allow remote attackers to execute arbitrary code via a malformed XPM image file...

CVE-2002-0437

The provided records identify CVE-2002-0437 affecting Smsd in SMS Server Tools (SMStools) prior to version 1.4.8. The vulnerability allows remote command execution via shell metacharacters (backquotes) in message text, described as a string format vulnerability by some sources. The root cause des...

Opera Images (GM#004-OP)

GreyMagic Security Advisory GM004-OP ===================================== By GreyMagic Software, Israel. 04 Feb 2003. Available in HTML format at http://security.greymagic.com/adv/gm004-op/. Topic: Opera Images. Discovery date: 29 Jan 2003. Affected applications: ====================== Opera 7...

CVE-2002-0437

Smsd in SMS Server Tools SMStools before 1.4.8 allows remote attackers to execute arbitrary commands via shell metacharacters backquotes in message text, as described with the term "string format vulnerability" by some sources...

[SECURITY] [DSA 107-1] New jgroff packages fix printf format problem

-------------------------------------------------------------------------- Debian Security Advisory DSA 107-1 [email protected] http://www.debian.org/security/ Martin Schulze January 30th, 2002 - -------------------------------------------------------------------------- Package : jgroff...