VLC Media Player Real Demuxer File Handling Array Indexing Vulnerabilities - Windows

VLC media player is prone to array indexing vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VLC Media Player Real Demuxer File Handling Array Indexing Vulnerabilities (Windows)

This host is installed with VLC media player and is prone to array indexing vulnerabilities. OpenVAS Vulnerability Test $Id: gbvlcmediaplayermultbofvulnwin.nasl 8174 2017-12-19 12:23:25Z cfischer $ VLC Media Player Real Demuxer File Handling Array Indexing Vulnerabilities Windows Authors: Antu...

CVE-2010-3956

The OpenType Font OTF driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly perform array indexing, which allows local users to gain privileges via a crafted OpenType font, aka "OpenTy...

Design/Logic Flaw

The OpenType Font OTF driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly perform array indexing, which allows local users to gain privileges via a crafted OpenType font, aka "OpenTy...

Memory corruption

pubconv.dll aka the Publisher Converter DLL in Microsoft Publisher 2002 SP3 does not properly perform array indexing, which allows remote attackers to execute arbitrary code via a crafted Publisher file that uses an old file format, aka "Array Indexing Memory Corruption Vulnerability."...

CVE-2010-3956

CVE-2010-3956 concerns the OpenType Font (OTF) driver in multiple Windows platforms (XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 Gold/SP2/R2, and Windows 7). The vulnerability arises from an error in indexing an array when parsing OpenType fonts, enabling a local privilege escalation....

CVE-2010-3955

pubconv.dll aka the Publisher Converter DLL in Microsoft Publisher 2002 SP3 does not properly perform array indexing, which allows remote attackers to execute arbitrary code via a crafted Publisher file that uses an old file format, aka "Array Indexing Memory Corruption Vulnerability."...

CVE-2010-3955

CVE-2010-3955 concerns a memory corruption in Microsoft Publisher 2002 SP3 caused by an array indexing error in pubconv.dll (Publisher Converter DLL). A crafted Publisher file can trigger this vulnerability, enabling remote code execution on the affected system. Microsoft addressed this with secu...

VUPEN Security Research - Microsoft Office Publisher "pubconv.dll" Array Indexing Vulnerability (VUPEN-SR-2010-206)

VUPEN Security Research - Microsoft Office Publisher "pubconv.dll" Array Indexing Vulnerability VUPEN-SR-2010-206 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Microsoft Publisher, is a desktop publishing application from Microsoft. It is an entry-level applicatio...

PT-2010-5192 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold, SP2, and R2 Microsoft Windows 7 affected versions not...

VUPEN Security Research - Microsoft Office Publisher Record Array Indexing Vulnerability (VUPEN-SR-2010-201)

VUPEN Security Research - Microsoft Office Publisher Record Array Indexing Vulnerability VUPEN-SR-2010-201 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Microsoft Publisher, is a desktop publishing application from Microsoft. It is an entry-level application,...

CVE-2010-3772

Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly calculate index values for certain child content in a XUL tree, which allows remote attackers to execute arbitrary code via vectors involving a DIV element within a treechildren element...

CVE-2010-4490

Google Chrome before 8.0.552.215 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via malformed video content that triggers an indexing error...

CVE-2010-4490

Google Chrome before 8.0.552.215 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via malformed video content that triggers an indexing error...

Code injection

Google Chrome before 8.0.552.215 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via malformed video content that triggers an indexing error...

CVE-2010-4490

CVE-2010-4490 affects Google Chrome prior to 8.0.552.215. A remote attacker could cause a denial of service (application crash) or potentially other unspecified impact by providing malformed video content that triggers an indexing error. The vulnerability is network-exploitable (no authentication...

CVE-2010-4490

Google Chrome before 8.0.552.215 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via malformed video content that triggers an indexing error...

VUPEN Security Research - Microsoft Office Word Document Array Indexing Vulnerability (CVE-2010-2750)

VUPEN Security Research - Microsoft Office Word Document Array Indexing Vulnerability CVE-2010-2750 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- Microsoft Office Word, included in the Microsoft Office suite, is a powerful authoring program that gives the ability t...

Microsoft Office Excel Remote Code Execution Vulnerabilities (2293211)

This host is missing a critical security update according to Microsoft Bulletin MS10-080. OpenVAS Vulnerability Test $Id: secpodms10-080.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft Office Excel Remote Code Execution Vulnerabilities 2293211 Authors: Antu Sanadi Copyright: Copyright c 2010 SecPo...

Microsoft Office Excel Remote Code Execution Vulnerabilities (2293211)

This host is missing a critical security update according to Microsoft Bulletin MS10-080. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...