Microsoft Windows OLE dialog memory corruption

Memory corruption on RTF-embedded OLE object. Can be used for hideen malware installation...

Microsoft Security Bulletin MS07-011 Vulnerability in Microsoft OLE Dialog Could Allow Remote Code Execution (926436)

Microsoft Security Bulletin MS07-011 Vulnerability in Microsoft OLE Dialog Could Allow Remote Code Execution 926436 Published: February 13, 2007 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity...

Microsoft Windows OLE Dialog Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability that occurs when the application attempts to parse malformed Rich Text Files RTF. An attacker could exploit this issue by enticing a victim to load a malicious RTF file. If the vulnerability is successfully exploited,...

MS07-011: Vulnerability in Microsoft OLE Dialog Could Allow Remote Code Execution (926436)

The remote host contains a version of Microsoft Windows that has a vulnerability in the OLE Dialog component that could be abused by an attacker to execute arbitrary code on the remote host. To exploit this vulnerability, an attacker would need to send a specially crafted RTF file to a user on th...

Microsoft Windows RiсhEdit control memory corruption

Memory corruption in RF-enbedded OLE object can be used for hidden malware installation...

System safety SA weak passwords bring security risks-vulnerability warning-the black bar safety net

The presence of the Microsoft SQL Server SA of the weak password vulnerability of the computer has been cyber attackers favor of one of the objects, through this loophole, you can easily get the Server Management permission, and thus a threat to network and data security. As a network...

Oracle ORADC ActiveX控件远程代码执行漏洞

Oracle ORADC是一款用于VB的Oracle ActiveX控件。 Oracle ORADC存在缓冲区溢出，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击，可能执行任意指令。 构建如下页面，诱使用户访问，可导致任意代码执行： !-- // CLSID: EC4CF635-D196-11CE-9027-02608C4BF3B5 // Info: ORADC Control // ProgID: ORADC.ORADCCtrl.1 // InprocServer32: C:\Oracle\Ora81\bin\oradc.ocx --! html body OBJECT...

CentOS 3 / 4 : libgsf (CESA-2007:0011)

Updated libgsf packages that fix a buffer overflow flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GNOME Structured File Library is a utility library for reading and writing structured file formats. A heap based buff...

libgsf security update

CentOS Errata and Security Advisory CESA-2007:0011 Updated libgsf packages that fix a buffer overflow flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GNOME Structured File Library is a utility library for reading and...

security flaw

Heap-based buffer overflow in the oleinforeadmetabat function in Gnome Structured File library libgsf 1.14.0, and other versions before 1.14.2, allows context-dependent attackers to execute arbitrary code via a large nummetabat value in an OLE document, which causes the oleinitinfo function to...

Moderate: Red Hat Security Advisory: libgsf security update

Updated libgsf packages that fix a buffer overflow flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GNOME Structured File Library is a utility library for reading and writing structured file formats. A heap based buff...

GLSA-200612-13 : libgsf: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200612-13 libgsf: Buffer overflow 'infamous41md' has discovered that the 'oleinitinfo' function may allocate too little memory for storing the contents of an OLE document, resulting in a heap buffer overflow. Impact : An attacker...

libgsf: Buffer overflow

Background The GNOME Structured File Library is an I/O library that can read and write common file types and handle structured formats that provide file-system-in-a-file semantics. Description "infamous41md" has discovered that the "oleinitinfo" function may allocate too little memory for storing...

[KOffice security advisory] KOffice OLEfilter integer overflow

KOffice Security Advisory: KOffice olefilters integer overflow Original Release Date: 2006-12-04 URL: http://www.kde.org/info/security/advisory-20061204-1.txt 0. References CVE-2006-6120 1. Systems affected: KOffice 1.4.x and 1.6.0. 1.5.x releases are unaffected as well as 1.6.1 or newer. 2...

LibGSF程序库远程堆溢出漏洞

GNOME结构化文件库（LibGSF）是用于读写结构化文件格式的工具库。 多家厂商的操作系统中所捆绑的libgsf库的oleinitinfo函数中存在堆溢出漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 在分配内存时oleinitinfo函数仅获得了numbat中所指定数目的空间，然后在读取文件内容时nummetabat中所指定的数目被用作了循环的边界。由于没有充分地验证变量，因此攻击者可能通过诱骗用户打开特制的OLE文档触发堆溢出，导致执行任意指令。 Jody Goldberg libgsf 1.14.1 Jody Goldberg libgsf 1.14 Jody...

USN-391-1: libgsf vulnerability

A heap overflow was discovered in the OLE processing code in libgsf. If a user were tricked into opening a specially crafted OLE document, an attacker could execute arbitrary code with the user's privileges...

CVE-2006-4514

Heap-based buffer overflow in the oleinforeadmetabat function in Gnome Structured File library libgsf 1.14.0, and other versions before 1.14.2, allows context-dependent attackers to execute arbitrary code via a large nummetabat value in an OLE document, which causes the oleinitinfo function to...

CVE-2006-4514

Heap-based buffer overflow in the oleinforeadmetabat function in Gnome Structured File library libgsf 1.14.0, and other versions before 1.14.2, allows context-dependent attackers to execute arbitrary code via a large nummetabat value in an OLE document, which causes the oleinitinfo function to...

CVE-2006-4514

Heap-based buffer overflow in the oleinforeadmetabat function in Gnome Structured File library libgsf 1.14.0, and other versions before 1.14.2, allows context-dependent attackers to execute arbitrary code via a large nummetabat value in an OLE document, which causes the oleinitinfo function to...

CVE-2006-4514

CVE-2006-4514 affects GNOME Structured File Library (libgsf) 1.14.0 and earlier than 1.14.2. The vulnerability is a heap-based buffer overflow in ole_info_read_metabat that, due to insufficient memory allocation in ole_init_info when handling large num_metabat values in OLE documents, can allow c...