Vulnerabilities in Windows Media Player Could Allow Remote Code Execution (936782)

This host is missing a critical security update according to Microsoft Bulletin MS07-047. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office Publisher Array Indexing Memory Corruption (MS10-103; CVE-2010-3955)

Microsoft Publisher is a desktop publishing application for creating marketing materials, managing customer lists and more A remote attacker can exploit this issue via a specially crafted Publisher file. Successful exploitation may allow execution of arbitrary code on the vulnerable system. The...

Microsoft Excel MSODrawing Improper Exception Handling Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the...

Adobe Flash Player Flash Content Parsing Code Execution (APSA10-05; CVE-2010-3654)

The Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in the Adobe Flash Player that fails to properly parse Flash content inside PDF...

PT-2010-1050 · Freetype +1 · Freetype +1

Name of the Vulnerable Software and Affected Versions: freetype versions prior to 2.4.8 freetype version 2.1.4 Description: The issue concerns multiple vulnerabilities in the freetype package, which can lead to a violation of confidentiality, integrity, and availability of protected information...

CVE-2010-1403

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, accesses uninitialized memory during the handling of a use element in an SVG document, which allows remote attackers to execute arbitrary code or cause a denial of service application cra...

CVE-2010-1403

CVE-2010-1403 affects WebKit in Apple Safari prior to 5.0 on Mac OS X 10.5–10.6 and Windows, and prior to 4.1 on Mac OS X 10.4. It arises from uninitialized memory access during processing of a use element in an SVG document (related to ProcessInstruction), allowing remote attackers to execute ar...

CVE-2010-1403

Removed by vendor...

Adobe Reader Libtiff TIFFFetchShortPair Stack Buffer Overflow (APSB10-07; CVE-2010-0188)

A stack overflow vulnerability has been reported in Adobe Acrobat and Reader. The vulnerability is due to an error in Adobe Acrobat and Reader while parsing a specially crafted PDF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted PDF file...

Microsoft Excel MDXTUPLE and MDXSET Records Heap Overflow (MS10-017; CVE-2010-0260; CVE-2010-0261)

Microsoft Excel is a popular spreadsheet application. Multiple heap overflow vulnerabilities have been identified in Microsoft Excel. These vulnerabilities are due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger...

Microsoft Excel EntExU2 Record Memory Corruption (MS10-017; CVE-2010-0257)

Microsoft Excel is a popular spreadsheet application. A memory corruption vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this flaw ...

Microsoft Excel DbOrParamQry Record Parsing Code Execution (MS10-017; CVE-2010-0264)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this...

OpenOffice.org Word Documents Parsing Buffer Overflow Vulnerability (Linux)

The host has OpenOffice installed and is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: gbopenofficewordbofvulnlin.nasl 4869 2016-12-29 11:01:45Z teissa $ OpenOffice.org Word Documents Parsing Buffer Overflow Vulnerability Linux Authors: Antu Sanadi Copyright: Copyright c...

Microsoft Internet Explorer Unicode Crash

IE findText crash Hit the button after ie7/8 crash.. function docrash var o1=document.createElement"input"; o1.type="text"; //or password o1.id="powerhacker"; o1.value="AAAA"; document.body.appendChildo1; var r= o1.createTextRange;...

Trillian Buffer Overflow Vulnerability

Trillian is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandrake Security Advisory MDVSA-2009:068-1 (poppler)

The remote host is missing an update to poppler announced via advisory MDVSA-2009:068-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandrake Security Advisory MDVSA-2009:068 (poppler)

The remote host is missing an update to poppler announced via advisory MDVSA-2009:068. OpenVAS Vulnerability Test $Id: mdksa2009068.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:068 poppler Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

DEBIAN-CVE-2009-0756

The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote attackers to cause a denial of service crash via a PDF file that triggers a parsing error, which is not properly handled by JBIG2SymbolDict::JBIG2SymbolDict and triggers an invalid memory dereference...

CVE-2009-0756

The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote attackers to cause a denial of service crash via a PDF file that triggers a parsing error, which is not properly handled by JBIG2SymbolDict::JBIG2SymbolDict and triggers an invalid memory dereference...

Memory corruption

The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote attackers to cause a denial of service crash via a PDF file that triggers a parsing error, which is not properly handled by JBIG2SymbolDict::JBIG2SymbolDict and triggers an invalid memory dereference...