DEBIAN-CVE-2008-0668

The excelreadHLINK function in plugins/excel/ms-excel-read.c in Gnome Office Gnumeric before 1.8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted XLS file containing XLS HLINK opcodes, possibly because of an integer signedness error that leads to an integer overflow...

Debian Security Advisory DSA 158-1 (gaim)

The remote host is missing an update to gaim announced via advisory DSA 158-1. OpenVAS Vulnerability Test $Id: deb1581.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 158-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 158-1 (gaim)

The remote host is missing an update to gaim announced via advisory DSA 158-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Office unsigned data

Metadata file and hyperlink desination is not signed on document signing...

vbultop-xss.txt

+-------------------------------------------------------------------- + + New post Topic Hijacking XSS All vBulletin® v 3.x.x + +-------------------------------------------------------------------- + vendor site........: http://www.vbulletin.com/ + Affected Software .: vbulletin + Class...

Important: Red Hat Security Advisory: openoffice.org security update

Updated openoffice.org packages to correct security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity suite that includes desktop applications such...

PT-2006-6462 · Mozilla · Firefox

Name of the Vulnerable Software and Affected Versions: Firefox version 1.5.0.7 Description: A potential issue allows remote attackers to cause a denial of service, resulting in a crash, via a long URL in an A tag. However, this issue has been disputed by several vendors who could not reproduce th...

Microsoft超级链接对象库函数溢出漏洞（MS06-050）

Microsoft Windows是微软发布的非常流行的WEB浏览器。 Microsoft Windows的超链接对象库（hlink.dll）中存在远程执行代码漏洞，成功利用此漏洞的攻击者可以完全控制受影响的系统。 要利用此漏洞，需要进行用户交互。 如果超级链接对象库在处理超链接时使用包含畸形的函数的文件，就会出现这个问题。攻击者可以通过构建恶意超链接来利用此漏洞。如果用户单击网站、Office文件或电子邮件中的恶意链接，可能会导致允许远程执行代码。 Microsoft Windows XP SP2 Microsoft Windows XP SP1 Microsoft Windows...

CVE-2006-3438

Unspecified vulnerability in Microsoft Hyperlink Object Library hlink.dll, possibly a buffer overflow, allows user-assisted attackers to execute arbitrary code via crafted hyperlinks that are not properly handled when hlink.dll "uses a file containing a malformed function," aka "Hyperlink Object...

CVE-2006-3438

Unspecified vulnerability in Microsoft Hyperlink Object Library hlink.dll, possibly a buffer overflow, allows user-assisted attackers to execute arbitrary code via crafted hyperlinks that are not properly handled when hlink.dll "uses a file containing a malformed function," aka "Hyperlink Object...

CVE-2006-3438

CVE-2006-3438 corresponds to a remote code execution vulnerability in the Microsoft Hyperlink Object Library (hlink.dll) that occurs when the library handles a file containing a malformed function while processing hyperlinks. The vulnerability is triggered by user interaction (e.g., clicking a ma...

Microsoft Hyperlink Object Library Function Remote Buffer Overflow Vulnerability

Description Microsoft's Hyperlink Object Library is prone to a buffer-overflow vulnerability. This issue is due to the library's failure to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. Successfully exploiting this issue allows attackers to...

Microsoft Hyperlink Object Library stack buffer overflow

Overview The Microsoft Windows system library for handling hyperlinks contains a buffer overflow. Exploitation of this vulnerability may allow an attacker to execute arbitrary code. Description Microsoft Hyperlink Object Library HLINK.DLL The Hyperlink Object Library provides interfaces for...

CVE-2006-3086

Stack-based buffer overflow in the HrShellOpenWithMonikerDisplayName function in Microsoft Hyperlink Object Library hlink.dll allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long hyperlink, as demonstrated using an Excel worksheet with a long...

CVE-2006-3086

Stack-based buffer overflow in the HrShellOpenWithMonikerDisplayName function in Microsoft Hyperlink Object Library hlink.dll allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long hyperlink, as demonstrated using an Excel worksheet with a long...

CVE-2006-3086

CVE-2006-3086 is a Hyperlink Object Library buffer overflow in hlink.dll (HrShellOpenWithMonikerDisplayName) that allows remote code execution when a user opens a crafted long hyperlink in Office documents (notably Excel). The issue stems from an unchecked WzCopy into a stack buffer, enabling a l...

MS06-022: Vulnerability in ART Image Rendering Could Allow Remote Code Execution (918439)

The remote host is running a version of Windows that contains a flaw in the Hyperlink Object Library. An attacker may exploit this flaw to execute arbitrary code on the remote host. To exploit this flaw, an attacker would need to construct a malicious hyperlink and lure a victim into clicking it...

CVE-2005-4636

OpenOffice.org 2.0 and earlier is affected. When hyperlinks are disabled, the Hyperlink dialog’s WWW-browser button can be clicked, potentially bypassing intended security settings and enabling user trickery. This CVE is documented across multiple sources (Red Hat, SUSE, Mandrake/Mandriva, Ubuntu...

CVE-2005-4636

OpenOffice.org 2.0 and earlier, when hyperlinks has been disabled, does not prevent the user from clicking the WWW-browser button in the Hyperlink dialog, which makes it easier for attackers to trick the user into bypassing intended security settings...

USN-181-1: Mozilla products vulnerability

Tom Ferris discovered a buffer overflow in the Mozilla products Mozilla browser, Firefox, Thunderbird. By tricking an user to click on a Hyperlink with a specially crafted destination URL, a remote attacker could crash the application. It might even be possible to exploit this vulnerability to...