273 matches found
CVE-2010-1255: Improper Control of Generation of Code
The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 Gold and SP2, Windows 7, and Server 2008 R2 allows local users to execute arbitrary code via vectors related to "glyph outline information" and TrueType...
CVE-2008-7147: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in IntraLearn Software IntraLearn 2.1, and possibly other versions before 4.2.3, allow remote attackers to inject arbitrary web script or HTML via the 1 outline and 2 course parameters to library/descriptionlink.cfm, or the 3 recordstodisplay and ...
CVE-2009-0556
Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an an invalid index value that triggers memory corruption, as exploited in t...
feedDemon 2.7 - OPML Outline Tag Buffer Overflow
feedDemon 2.7 - OPML Outline Tag Buffer Overflow !/usr/local/bin/perl ----------------------------------------------------------------------------- FeedDemon version 2.7.0.0 Buffer overFlow Reference: http://security.bkis.vn/?p=329 https://www.securityfocus.com/bid/33630/info...
CVE-2008-3096
The Outline Designer module 5.x before 5.x-1.4 for Drupal changes each content reader's authentication level to match that of the content author, which might allow remote attackers to gain privileges...
Authentication flaw
The Outline Designer module 5.x before 5.x-1.4 for Drupal changes each content reader's authentication level to match that of the content author, which might allow remote attackers to gain privileges...
CVE-2008-3096
The CVE-2008-3096 issue affects the Drupal Outline Designer module (5.x before 5.x-1.4). The vulnerability arises because the module changes each content reader’s authentication level to match that of the content author, potentially allowing remote attackers to gain privileges. Documented affecte...
CVE-2008-3096
The Outline Designer module 5.x before 5.x-1.4 for Drupal changes each content reader's authentication level to match that of the content author, which might allow remote attackers to gain privileges...
CVE-2008-3096: Undefined Security Weakness
The Outline Designer module 5.x before 5.x-1.4 for Drupal changes each content reader's authentication level to match that of the content author, which might allow remote attackers to gain privileges...
Drupal Outline Designer Module 'outline_designer.module'安全绕过漏洞
BUGTRAQ ID: 30066 CNCAN ID：CNCAN-2008070703 Drupal Outline Designer是一款提供书目中可视的内容结构。 Drupal Outline Designer存在设计错误，远程攻击者可以利用漏洞获得对限制用户的内容查看。 目前没有详细漏洞细节提供。 Drupal Outline designer 5.x-1.3 升级到最新版本： http://drupal.org/node/277851...
SA-2008-043 - Outline designer - Privilege escalation
The Outline designer module provides a visual way of structuring content in books. A programming error in the module causes the current user to become authenticated as the author of the viewed content item. Versions affected Outline designer for Drupal 5.x prior to 5.x-1.4. Drupal core is not...
