Microsoft Windows OLE自动化堆溢出漏洞（MS08-008）

BUGTRAQ ID: 27661 CVECAN ID: CVE-2007-0065 Microsoft Windows是微软发布的非常流行的操作系统。 对象链接和嵌入（OLE）自动化处理特制脚本请求的方式存在堆溢出漏洞，如果用户受骗访问了恶意站点的话，就可能触发这个溢出，导致以登录用户的权限对系统进行更改。如果用户以管理权限登录的话，攻击者就可以完全控制受影响的系统。 Microsoft Office 2004 for Mac Microsoft Visual Basic 6.0 SP6 Microsoft Windows XP SP2 Microsoft Windows Vista...

iDefense Security Advisory 02.12.08: Microsoft Office Works Converter Heap Overflow Vulnerability

iDefense Security Advisory 02.12.08 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 12, 2008 I. BACKGROUND Microsoft Works is a word processor created by Microsoft in the 1980s. Microsoft Office, a widely use productivity suite, is distributed with converters for various versions of th...

CVE-2007-0065

Heap-based buffer overflow in Object Linking and Embedding OLE Automation in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, Office 2004 for Mac, and Visual basic 6.0 SP6 allows remote attackers to execute arbitrary code via a crafted script request...

Heap overflow

Heap-based buffer overflow in Object Linking and Embedding OLE Automation in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, Office 2004 for Mac, and Visual basic 6.0 SP6 allows remote attackers to execute arbitrary code via a crafted script request...

CVE-2007-0065

CVE-2007-0065 is a remote code execution vulnerability described as an OLE Heap Overrun in Object Linking and Embedding (OLE) Automation. The flaw is a heap-based buffer overflow triggered by specially crafted script requests, affecting Windows 2000 SP4, Windows XP SP2, Windows Server 2003 SP1/SP...

CVE-2007-0065

Heap-based buffer overflow in Object Linking and Embedding OLE Automation in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, Office 2004 for Mac, and Visual basic 6.0 SP6 allows remote attackers to execute arbitrary code via a crafted script request...

Microsoft Windows OLE buffer overflow

Heap buffer overflow...

MS08-008: Vulnerability in OLE Automation Could Allow Remote Code Execution (947890)

The remote host contains a version of Microsoft Windows that has a vulnerability in the OLE Automation component that can be abused by an attacker to execute arbitrary code on the remote host. An attacker may be able to execute arbitrary code on the remote host by constructing a malicious script...

Microsoft Security Bulletin MS08-008 – Critical Vulnerability in OLE Automation Could Allow Remote Code Execution (947890)

Microsoft Security Bulletin MS08-008 – Critical Vulnerability in OLE Automation Could Allow Remote Code Execution 947890 Published: February 12, 2008 Version: 1.0 General Information Executive Summary This critical security update resolves a privately reported vulnerability. This vulnerability...

Microsoft Windows OLE Automation Remote Code Execution (MS08-008; CVE-2007-0065)

OLE Automation is a protocol that allows applications to share data or control one another. The vulnerability is due to a memory corruption error when using the OLE Automation. To trigger this issue, an attacker could convince a user to visit a malicious web page that will exploit this flaw...

Microsoft Object Linking and Embedding (OLE) Automation Heap Based Buffer Overflow Vulnerability

Description Microsoft Object Linking and Embedding OLE Automation is prone to a heap-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input before copying it to an insufficiently sized buffer. An attacker could exploit this issue by enticin...

HP Software Update client 3.0.8.4 Multiple Remote Vulnerabilities

Exploit for unknown platform in category dos / poc ================================================================= HP Software Update client 3.0.8.4 Multiple Remote Vulnerabilities ================================================================= Advisory: ///////// There is another remotely...

Easylon OPC Server任意代码执行漏洞

BUGTRAQ ID: 26876 CVE ID:CVE-2007-4473 CNCVE ID:CNCVE-20074473 OLE for Process Control OPC是一款用于进程控制和制造业使用的标准OLE COM对象集规 格。OPC servers是OPC实现的服务程序。 Easylon OPC Server不正确验证服务处理，远程攻击者可以利用漏洞未授权访问服务器OPC 接口。 攻击者可以借此访问Easylon OPC Server执行任意代码或进行拒绝服务攻击，目前没有详细 漏洞细节提供。 Gesytec GmbH Easylon OPC Server 2.30.3...

Server side request forgery (ssrf)

Gesytec Easylon OPC Server before 2.3.44 does not properly validate server handles, which allows remote attackers to execute arbitrary code or cause a denial of service via unspecified network traffic to the OLE for Process Control OPC interface, probably related to free operations on arbitrary...

HP Info Center HPInfoDLL.DLL ActiveX控件多个任意代码执行漏洞

HP Info Center是一款设计用于HP笔记本用户快速查询信息信息和硬件配置的程序。 HP Info Center包含的HPInfoDLL.dll ActiveX控件存在设计问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 HPInfoDLL.dll的CLSID为： 62DDEB79-15B2-41E3-8834-D3B80493887A 默认包含于"Safe for Scripting" OLE组件，默认路径为C:\Program Files\Hewlett-Packard\HP Info Center，这个控件包含如下不安全方法： VARIANT...

HP notebooks remote code execution vulnerability (multiple series)

Advisory: ///////// Multiple Hewlett-Packard notebook series are prone to a remote code execution attack. The manufacturer's preinstalled software contains a critical flaw within the software built to support one-touch button quick feature access. Overview: ///////// Software called "HP Info...

SuSE 10 Security Update : libgsf (ZYPP Patch Number 2363)

Specially crafted OLE documents enabled attackers to use a heap buffer overlow for executing code. CVE-2006-4514 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

docusafe-sql.txt

DocuSafe "Search" SQL Injection Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: AurA, imm02tal Vendor: http://gartha.net Google Search: intitle:Corporate Contact System insert your command in the section "search" example: 'having 1=1-- Result: MicrosoftODB...

Ubuntu 5.10 / 6.06 LTS / 6.10 : libgsf vulnerability (USN-391-1)

A heap overflow was discovered in the OLE processing code in libgsf. If a user were tricked into opening a specially crafted OLE document, an attacker could execute arbitrary code with the user's privileges. Note that Tenable Network Security has extracted the preceding description block directly...

openSUSE 10 Security Update : koffice (koffice-2323)

This update fixes a security problem in the OLE import handling for PPT files, where attackers with crafted documents could crash kpresenter and potentially execute code. CVE-2006-6120 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...