Microsoft Publisher Function Pointer Overwrite (MS11-091; CVE-2011-1508)

A memory corruption vulnerability has been reported in Microsoft Publisher. The vulnerability is due to the way Microsoft Publisher does not properly handle memory for function pointers while parsing specially crafted Publisher files. A remote attacker may exploit this vulnerability by enticing a...

Windows Object Packager Insecure Execution

Added: 01/24/2012 CVE: CVE-2012-0009 BID: 51297 OSVDB: 78212 Background Windows Object Packager is a tool that can be used to create a package that can be inserted into a file. Problem A vulnerability exists in the way the Windows Object Packager registers and implements packages stored on networ...

Windows Object Packager Insecure Execution

Added: 01/24/2012 CVE: CVE-2012-0009 BID: 51297 OSVDB: 78212 Background Windows Object Packager is a tool that can be used to create a package that can be inserted into a file. Problem A vulnerability exists in the way the Windows Object Packager registers and implements packages stored on networ...

Windows Object Packager Insecure Execution

Added: 01/24/2012 CVE: CVE-2012-0009 BID: 51297 OSVDB: 78212 Background Windows Object Packager is a tool that can be used to create a package that can be inserted into a file. Problem A vulnerability exists in the way the Windows Object Packager registers and implements packages stored on networ...

CVE-2011-4134

Heap-based buffer overflow in lmadmin in Flexera FlexNet Publisher 11.10 aka FlexNet License Server Manager allows remote attackers to execute arbitrary code via a crafted 0x2f packet...

CVE-2011-4135

Multiple directory traversal vulnerabilities in lmgrd in Flexera FlexNet Publisher 11.10 aka FlexNet License Server Manager allow remote attackers to execute arbitrary code via vectors related to save, rename, and load operations on log files. NOTE: this might overlap CVE-2011-1389...

Heap overflow

Heap-based buffer overflow in lmadmin in Flexera FlexNet Publisher 11.10 aka FlexNet License Server Manager allows remote attackers to execute arbitrary code via a crafted 0x2f packet...

Directory traversal

Multiple directory traversal vulnerabilities in lmgrd in Flexera FlexNet Publisher 11.10 aka FlexNet License Server Manager allow remote attackers to execute arbitrary code via vectors related to save, rename, and load operations on log files. NOTE: this might overlap CVE-2011-1389...

CVE-2011-4135

Multiple directory traversal vulnerabilities in lmgrd in Flexera FlexNet Publisher 11.10 aka FlexNet License Server Manager allow remote attackers to execute arbitrary code via vectors related to save, rename, and load operations on log files. NOTE: this might overlap CVE-2011-1389...

CVE-2011-4134

CVE-2011-4134 is a heap-based buffer overflow in lmadmin of Flexera FlexNet Publisher 11.10 (FlexNet License Server Manager). The vulnerability allows remote code execution via a crafted 0x2f packet over the network. Red Hat and other sources reiterate the same description. Affected product/versi...

CVE-2011-4135

CVE-2011-4135 affects Flexera FlexNet Publisher 11.10 lmgrd (FlexNet License Server Manager). The vulnerability stems from directory traversal and related file-rename/load issues on log files, allowing remote attackers to execute arbitrary code via those vectors. CVSSv2 base score 10.0 (HIGH) wit...

PT-2012-1810

Name of the Vulnerable Software and Affected Versions FlexNet Publisher version 11.10 Description The issue concerns multiple directory traversal vulnerabilities in lmgrd, allowing remote attackers to execute arbitrary code. This is achieved through vectors related to save, rename, and load...

CVE-2011-4135: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in lmgrd in Flexera FlexNet Publisher 11.10 aka FlexNet License Server Manager allow remote attackers to execute arbitrary code via vectors related to save, rename, and load operations on log files. NOTE: this might overlap CVE-2011-1389...

CVE-2011-4134: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in lmadmin in Flexera FlexNet Publisher 11.10 aka FlexNet License Server Manager allows remote attackers to execute arbitrary code via a crafted 0x2f packet...

PT-2012-1809

Name of the Vulnerable Software and Affected Versions FlexNet Publisher version 11.10 Description A heap-based buffer overflow issue exists, allowing remote attackers to execute arbitrary code via a crafted packet. Recommendations For FlexNet Publisher version 11.10, at the moment, there is no...

KLA10163 ACE vulnerability in FlexNet Publishier

Multiple critical vulnerabilities have been found in FlexNet Publisher. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities 1. A buffer overflow can be exploited remotely via a specially designed packet. 2. Directory traversal...

Microsoft Windows Object Packager Remote Code Execution Vulnerability (2603381)

This host is missing an important security update according to Microsoft Bulletin MS12-002. OpenVAS Vulnerability Test $Id: secpodms12-002.nasl 5341 2017-02-18 16:59:12Z cfi $ Microsoft Windows Object Packager Remote Code Execution Vulnerability 2603381 Authors: Madhuri D Copyright: Copyright c...

Microsoft Windows Object Packager Remote Code Execution Vulnerability (2603381)

This host is missing an important security update according to Microsoft Bulletin MS12-002. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Publisher无效指针远程代码执行漏洞(MS11-091)

BUGTRAQ ID: 50949 CVE ID: CVE-2011-3411 Microsoft Publisher是微软公司发行的桌面出版应用软件。 Microsoft Publisher处理特制.pub文件的方式中存在远程代码执行漏洞，成功利用后可允许攻击者以当前用户权限执行任意代码 Microsoft Publisher 2007 SP3 Microsoft Publisher 2007 SP2 Microsoft Publisher 2007 SP1 Microsoft Publisher 2003 SP3 Microsoft Publisher 2003 SP3 临时解决方法...

Microsoft Publisher远程内存破坏漏洞(MS11-091)

BUGTRAQ ID: 50955 CVE ID: CVE-2011-3412 Microsoft Publisher是微软公司发行的桌面出版应用软件。 Microsoft Publisher处理特制.pub文件的方式中存在远程代码执行漏洞，成功利用后可允许攻击者以当前用户权限执行任意代码 Microsoft Publisher 2007 SP3 Microsoft Publisher 2007 SP2 Microsoft Publisher 2007 SP1 Microsoft Publisher 2003 SP3 Microsoft Publisher 2003 SP3 临时解决方法...