1990 matches found
powerpoint.com.my XSS vulnerability
Vulnerable URL: http://www.powerpoint.com.my/result.php?root=MTc2%3C!%27/!%22/!%27/%22/--!%3E%3CInput/Autofocus%20/;%20Onfocus=confirm%27OPENBUGBOUNTY%27%20//%3E%3CSvg%3E=MjEz⊂==NTcz Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly...
Description of the security update for Office 2013: April 11, 2017
Description of the security update for Office 2013: April 11, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Description of the security update for Office 2016: April 11, 2017 (KB3178702)
None None...
Design/Logic Flaw
JustSystems Ichitaro 2016 Trial contains a vulnerability that exists when trying to open a specially crafted PowerPoint file. Due to the application incorrectly handling the error case for a function's result, the application will use this result in a pointer calculation for reading file data int...
CVE-2017-2791
JustSystems Ichitaro 2016 Trial contains a vulnerability that exists when trying to open a specially crafted PowerPoint file. Due to the application incorrectly handling the error case for a function's result, the application will use this result in a pointer calculation for reading file data int...
CVE-2017-2791
JustSystems Ichitaro 2016 Trial contains a vulnerability that exists when trying to open a specially crafted PowerPoint file. Due to the application incorrectly handling the error case for a function's result, the application will use this result in a pointer calculation for reading file data int...
CVE-2017-2791
JustSystems Ichitaro 2016 Trial contains a vulnerability that exists when trying to open a specially crafted PowerPoint file. Due to the application incorrectly handling the error case for a function's result, the application will use this result in a pointer calculation for reading file data int...
CVE-2017-2791
Summary of findings (CVE-2017-2791) : JustSystems Ichitaro 2016 Trial is vulnerable during handling of PowerPoint content. The attacker can craft a chain of records via the Current User and UserEditAtom paths (PowerPoint Document stream) to induce memory corruption. The root cause is lack of vali...
PT-2017-15539
Name of the Vulnerable Software and Affected Versions JustSystems Ichitaro version 2016 Trial Description The issue arises when the application attempts to open a specially crafted PowerPoint file, leading to incorrect error handling for a function's result. This result is then used in a pointer...
CVE-2017-2791: Improper Restriction of Operations within the Bounds of a Memory Buffer
JustSystems Ichitaro 2016 Trial contains a vulnerability that exists when trying to open a specially crafted PowerPoint file. Due to the application incorrectly handling the error case for a function's result, the application will use this result in a pointer calculation for reading file data int...
Ichitaro Word Processor PersistDirectory Code Execution Vulnerability
Summary Ichitaro Office contains a vulnerability that exists when trying to open a specially crafted PowerPoint file. Due to the application incorrectly handling the error case for a function’s result, the application will use this result in a pointer calculation for reading file data into. Due t...
Microsoft Office PowerPoint 2010 - GDI GDI32!ConvertDxArray Insufficient Bounds Check
Microsoft Office PowerPoint 2010 - GDI GDI32!ConvertDxArray Insufficient Bounds Check Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=951 Platform: GDI on Windows 7 x86 reachable from Microsoft Office 2010 Class: Out of bounds memory access The following crash was observed in...
Microsoft Office PowerPoint 2010 - MSO/OART Heap Out-of-Bounds Access
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=950 Platform: Microsoft Office 2010 on Windows 7 x86 Class: Time of check time of use leading to memory corruption The following crash was observed in Microsoft Office 2010 running under Windows 7 x86 with Application Verifier...
Microsoft Office PowerPoint 2010 - GDI 'GDI32!ConvertDxArray' Insufficient Bounds Check
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=951 Platform: GDI on Windows 7 x86 reachable from Microsoft Office 2010 Class: Out of bounds memory access The following crash was observed in Microsoft Office 2010 running under Windows 7 x86 with Application Verifier enabled...
MS11-022: Description of the security update for PowerPoint 2010: April 12, 2011
MS11-022: Description of the security update for PowerPoint 2010: April 12, 2011 INTRODUCTION Microsoft has released security bulletin MS11-022. To view the complete security bulletin, visit one of the following Microsoft websites: Home...
MS11-094: Description of the security update for PowerPoint 2010: December 13, 2011
MS11-094: Description of the security update for PowerPoint 2010: December 13, 2011 Introduction Microsoft has released security bulletin MS11-094. To view the complete security bulletin, visit one of the following Microsoft websites: Home users:...
Microsoft Office Web Apps PowerPoint Presentation Preparation Code Execution
The vulnerabilities of the Microsoft Office Web Apps, the Microsoft PowerPoint presentation software, and the Microsoft PowerPoint Viewer are due to an operation that occurs outside of the buffer in memory. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code using ...
CVE-2016-7230
Microsoft PowerPoint 2010 SP2, PowerPoint Viewer, and Office Web Apps 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...
CVE-2016-7230
Microsoft PowerPoint 2010 SP2, PowerPoint Viewer, and Office Web Apps 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...
Memory corruption
Microsoft PowerPoint 2010 SP2, PowerPoint Viewer, and Office Web Apps 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...