CVE-2012-1885

Heap-based buffer overflow in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Office 2008 and 2011 for Mac; and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SerAuxErrBar Heap Overflow Vulnerability."...

Stack overflow

Stack-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 SP1; Office 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Stack Overflow Vulnerability."...

Heap overflow

Heap-based buffer overflow in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Office 2008 and 2011 for Mac; and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SerAuxErrBar Heap Overflow Vulnerability."...

Microsoft Office Remote Code Execution Vulnerabilities (2720184)

This host is missing an important security update according to Microsoft Bulletin MS12-076. OpenVAS Vulnerability Test $Id: secpodms12-076.nasl 6523 2017-07-04 15:46:12Z cfischer $ Microsoft Office Remote Code Execution Vulnerabilities 2720184 Authors: Antu Sanadi Copyright: Copyright c 2012...

CVE-2012-2543

CVE-2012-2543 is a stack-based buffer overflow in Microsoft Excel components (Windows: Excel 2007 SP2/SP3, Excel 2010 SP1; Mac: Office 2011; Excel Viewer; Office Compatibility Pack SP2/SP3). The vulnerability arises while handling crafted spreadsheets, enabling remote code execution. Connected so...

MS12-076: Description of the security update for Excel 2007 (xlconv-x-none.msp): November 13, 2012

Describes the security update for Excel 2007 xlconv-x-none.msp, that was released on November 13, 2012.INTRODUCTIONMicrosoft has released security bulletin MS12-076. To view the complete security bulletin, go to one of the following Microsoft websites: Home...

Microsoft Office Excel ReadAV Arbitrary Code Execution Vulnerability

This host is installed with Microsoft Office Excel which is prone to arbitrary code execution vulnerability. OpenVAS Vulnerability Test $Id: secpodmsofficeexcelreadavcodeexecvuln.nasl 6533 2017-07-05 08:41:34Z santu $ Microsoft Office Excel ReadAV Arbitrary Code Execution Vulnerability Authors:...

IBM DB2 9.7 < Fix Pack 7 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 9.7 running on the remote host is prior to Fix Pack 7. It is, therefore, affected by one or more of the following issues : - An error exists related to the stored procedure 'SQLJ.DB2INSTALLJAR' that can allow 'JAR' files to be overwritten. Not...

Zoho ManageEngine Support Center Plus Multiple Vulnerabilities

This host is running Zoho ManageEngine Support Center Plus and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmanageenginesupportcenterplusmultvuln.nasl 5988 2017-04-20 09:02:29Z teissa $ Zoho ManageEngine Support Center Plus Multiple Vulnerabilities Authors: Antu Sanadi...

VulnCheck KEV: CVE-2009-1134

Excel in 2007 Microsoft Office System SP1 and SP2; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a BIFF file with a malformed Qsir 0x806 record object, aka...

IBM DB2 9.5 < Fix Pack 10 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 9.5 running on the remote host is affected by one or more of the following issues : - An unspecified information disclosure error exists related to the XML feature that can allow improper access to arbitrary XML files. IC81461, CVE-2012-0713 -...

Immunity Canvas: JAVA_JAXWS

Name| javajaxws ---|--- CVE| CVE-2012-5076 Exploit Pack| CANVAS Description| Java Applet JAX-WS Remote Code Execution Notes| CVE Name: CVE-2012-5076 VENDOR: Sun Notes: Affected versions JDK and JRE 7 Update 7 and earlier Tested on: - Windows XP SP3 with JDK/JRE 7 update 6 To run from command line...

Immunity Canvas: JAVA_CVE_2012_5088

Name| javaCVE20125088 ---|--- CVE| CVE-2012-5088 Exploit Pack| CANVAS Description| Java MethodHandles.Lookup Remote Code Execution Notes| CVE Name: CVE-2012-5088 VENDOR: Sun Notes: The exploitation technique is abusing bug patched in CVE-2012-5088 which is allowing to use reflection with full...

Microsoft Word RTF文件释放后重用远程代码执行漏洞（MS12-064）

BUGTRAQ ID: 55781 CVECAN ID: CVE-2012-2528 Microsoft Word属于办公软件是微软公司的一个文字处理器应用程序。 Microsoft Office处理特制RTF文件时存在远程代码执行漏洞，成功利用此漏洞的攻击者可完全控制受影响系统。 0 Microsoft Word 2010 Microsoft Word 2007 Microsoft Word 2003 Microsoft Office SharePoint Server 2010 Microsoft Office Web Apps 2010 SP1 Microsoft Office W...

Microsoft SQL Server Report Manager Cross Site Scripting Vulnerability (2754849)

This host has important security update missing according to Microsoft Bulletin MS12-070. OpenVAS Vulnerability Test $Id: secpodms12-070.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft SQL Server Report Manager Cross Site Scripting Vulnerability 2754849 Authors: Rachana Shetty Copyright: Copyright...

Microsoft FAST Search Server 2010 for SharePoint RCE Vulnerabilities (2742321)

This host is missing an important security update according to Microsoft Bulletin MS12-067. OpenVAS Vulnerability Test $Id: secpodms12-067.nasl 6532 2017-07-05 07:42:05Z cfischer $ Microsoft FAST Search Server 2010 for SharePoint RCE Vulnerabilities 2742321 Authors: Madhuri D Copyright: Copyright...

Microsoft Windows Kernel Privilege Elevation Vulnerability (2724197)

This host is missing an important security update according to Microsoft Bulletin MS12-068. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft FAST Search Server 2010 for SharePoint RCE Vulnerabilities (2742321)

This host is missing an important security update according to Microsoft Bulletin MS12-067. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS12-064 and MS12-066: Description of the security update for Microsoft Office Online 2010 Service Pack 1: October 9, 2012

Describes the security update for Microsoft Office Online 2010 Service Pack 1, that was released on October 9, 2012.INTRODUCTIONMicrosoft has released security bulletins MS12-064 and MS12-066. To view the complete security bulletins, go to one of the following Microsoft websites: Home...

PT-2012-4085 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows 7 versions Gold through SP1 Description: T...