2458 matches found
CVE-2002-0617
The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by creating a hyperlink on a drawing shape in a source workbook that points to a destination workbook containing an autoexecute macro, aka "Hyperlinked Excel Workbook Macro Bypass."...
CVE-2002-1776
NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows remote attackers to bypass virus protection via a Word Macro virus with a .nch or .dbx extension, which is automatically recognized and executed as a Microsoft Office document. NOTE: the vendor has disputed th...
[SECURITY] [DSA 175-1] New syslog-ng packages fix buffer overflow
-------------------------------------------------------------------------- Debian Security Advisory DSA 175-1 [email protected] http://www.debian.org/security/ Martin Schulze October 15th, 2002 http://www.debian.org/security/faq -...
DSA-175 syslog-ng - buffer overflow
Bulletin has no description...
syslog-ng buffer overflow
---------------------------------------------------------------------------- PACKAGE : syslog-ng VERSION : -1.4.15 stable and -1.5.20 development SUMMARY : buffer overflow TYPE : remote exploit VULNERABLE: : exploitable not in default configuration ZORP-OS SPECIFIC : No ZSA-AUTHOR : Balazs...
Microsoft Word does not check for macros contained in linked template file when opening RTF document
Overview There is a vulnerability caused by a failure to detect macros embedded in templates used by rich text format documents opened in Microsoft Word. This vulnerability may allow the author of a malicious document to execute arbitrary commands as the user who opens the document. Description...
MS Excel XLM Text Macro execution fails to trigger warning when default medium security set
Overview Excel fails to present a warning dialog when a macro is called from an external XLM text macro file. Description If a spreadsheet contains a reference to an external macro XLM file, Excel does not generate the usual warning dialog asking if the user wants to run the macro. Microsoft...
mIRC buffer overflow
Buffer overflow in $asctime macro...
CVE-2002-0616
The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by attaching an inline macro to an object within an Excel workbook, aka the "Excel Inline Macros Vulnerability."...
CVE-2002-0770
Quake 2 Q2 server 3.20 and 3.21 allows remote attackers to obtain sensitive server cvar variables, obtain directory listings, and execute Q2 server admin commands via a client that does not expand "$" macros, which causes the server to expand the macros and leak the information, as demonstrated...
CVE-2002-0617
The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by creating a hyperlink on a drawing shape in a source workbook that points to a destination workbook containing an autoexecute macro, aka "Hyperlinked Excel Workbook Macro Bypass."...
CVE-2002-0618
The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code in the Local Computer zone by embedding HTML scripts within an Excel workbook that contains an XSL stylesheet, aka "Excel XSL Stylesheet Script Execution"...
CVE-2002-0770
Quake 2 Q2 server 3.20 and 3.21 allows remote attackers to obtain sensitive server cvar variables, obtain directory listings, and execute Q2 server admin commands via a client that does not expand "$" macros, which causes the server to expand the macros and leak the information, as demonstrated...
CVE-2001-1158
Check Point VPN-1/FireWall-1 4.1 base.def contains a default macro, acceptfw1rdp, which can allow remote attackers to bypass intended restrictions with forged RDP internal protocol headers to UDP port 259 of arbitrary hosts...
Security Bulletin MS02-031: Cumulative Patches for Excel and Word for Windows (Q324458)
---------------------------------------------------------------------- Title: Cumulative Patches for Excel and Word for Windows Q324458 Date: 19 June 2002 Software: Microsoft Office for Windows Impact: Run Code of Attacker's Choice Max Risk: Moderate Bulletin: MS02-031 Microsoft encourages...
Buffer overflow in OpenSSH
GETSTRING macro in radixtocreds function may cause buffer overflow...
CVE-2001-0628
Summary : CVE-2001-0628 affects Microsoft Word 2000. The issue: Word 2000 does not check AutoRecovery (.asd) files for macros, allowing a local attacker to execute arbitrary macros with the Word user’s ID. What’s affected : Word 2000; vulnerability details describe macro execution via unverified ...
CVE-2001-0718
The CVE-2001-0718 issue affects Microsoft Excel and PowerPoint (across Windows and Macintosh releases up to 2002). Affected components are the macro handling/data stream processing; attackers can bypass macro restrictions by modifying the document data stream, enabling arbitrary code execution wh...
CVE-2001-0718
Vulnerability in 1 Microsoft Excel 2002 and earlier and 2 Microsoft PowerPoint 2002 and earlier allows attackers to bypass macro restrictions and execute arbitrary commands by modifying the data stream in the document...