Microsoft Publisher File Conversion Textbox buffer overflow

Added: 04/30/2010 CVE: CVE-2010-0479 BID: 39347 OSVDB: 63748 Background Microsoft Office Publisher, part of the Microsoft Office suite, is a product for creating publications and marketing materials. Problem A buffer overflow vulnerability allows command execution when a user loads a Publisher 97...

Microsoft Publisher PUB File Processing Memory Corruption (MS06-054; CVE-2006-0001)

There exists a stack overflow vulnerability in the Microsoft Publisher product. The flaw is triggered when a malicious PUB file is parsed by the affected component. A successful attack targeting this vulnerability may lead to the execution of arbitrary code. In an attack case where code injection...

ProArcadeScript Cross Site Scripting

Exploit Title: XSS Vulnerability in ProArcadeScript Version: Web Application Vendor:http://proarcadescript.com/ Author: Sid3^effects aKa HaRi Code : Date :27 apr,2010 --------------------------------------------------------------------------------------- XSS Vulnerability in ProArcadeScript Greet...

CVE-2009-4808

admin.php in Graugon PHP Article Publisher 1.0 allows remote attackers to bypass authentication and obtain administrative access by setting the gadmin cookie to 1...

CVE-2009-4807

Graugon PHP Article Publisher 1.0 is affected by multiple SQL injection vulnerabilities. The flaws allow remote attackers to execute arbitrary SQL commands via the (1) c parameter to index.php and the (2) id parameter to view.php, enabling unauthorized access or manipulation of the database. No r...

CVE-2009-4807

Multiple SQL injection vulnerabilities in Graugon PHP Article Publisher 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 c parameter to index.php and the 2 id parameter to view.php...

CVE-2009-4808

CVE-2009-4808 affects Graugon PHP Article Publisher 1.0. The admin.php authentication check can be bypassed by setting the g_admin cookie to 1, allowing remote attackers to gain administrative access. This is the root cause and impact described across sources; no remediation or mitigation details...

CVE-2009-4807: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Graugon PHP Article Publisher 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 c parameter to index.php and the 2 id parameter to view.php...

CVE-2009-4808: Improper Authentication

admin.php in Graugon PHP Article Publisher 1.0 allows remote attackers to bypass authentication and obtain administrative access by setting the gadmin cookie to 1...

Microsoft Office Publisher buffer overflow

Buffer overflow on files parsing...

Microsoft Security Bulletin MS10-023 - Important Vulnerability in Microsoft Office Publisher Could Allow Remote Code Execution (981160)

Microsoft Security Bulletin MS10-023 - Important Vulnerability in Microsoft Office Publisher Could Allow Remote Code Execution 981160 Published: April 13, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Microsoft Office...

ZDI-10-069: Microsoft Office Publisher File Conversion TextBox Processing Buffer Overflow Vulnerability

ZDI-10-069: Microsoft Office Publisher File Conversion TextBox Processing Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-069 April 13, 2010 -- CVE ID: CVE-2010-0479 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Office Publisher -- TippingPointTM...

CVE-2010-0479

Buffer overflow in Microsoft Office Publisher 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Microsoft Office Publisher File Conversion TextBox Processing Buffer Overflow Vulnerability."...

Buffer overflow

Buffer overflow in Microsoft Office Publisher 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Microsoft Office Publisher File Conversion TextBox Processing Buffer Overflow Vulnerability."...

CVE-2010-0479

Buffer overflow in Microsoft Office Publisher 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Microsoft Office Publisher File Conversion TextBox Processing Buffer Overflow Vulnerability."...

CVE-2010-0479

CVE-2010-0479 is a remote-code-execution vulnerability in Microsoft Office Publisher (2002 SP3, 2003 SP3, 2007 SP1/SP2) caused by a buffer overflow in the Publisher file conversion TextBox processing. An attacker could trigger code execution by enticing a user to open a specially crafted Publishe...

Microsoft Office Publisher文件转换TextBox处理缓冲区溢出漏洞（MS10-023）

BUGTRAQ ID: 39347 CVE ID: CVE-2010-0479 Publisher是微软Office办公软件套件中用于创建、个性化和共享各种出版物和营销材料的工具。 Publisher中负责转换Publisher 97格式文件的代码中存在缓冲区溢出漏洞。在处理畸形PUB文件中的TextBox项时就可以触发这个溢出，导致以打开文件用户的权限执行任意代码。 Microsoft Publisher 2007 SP2 Microsoft Publisher 2007 SP1 Microsoft Publisher 2003 SP3 Microsoft Publisher 2002...

Microsoft Office Publisher Remote Code Execution Vulnerability (981160)

This host is missing a critical security update according to Microsoft Bulletin MS10-023. OpenVAS Vulnerability Test $Id: secpodms10-023.nasl 6538 2017-07-05 11:38:27Z cfischer $ Microsoft Office Publisher Remote Code Execution Vulnerability 981160 Authors: Antu Sanadi Copyright: Copyright c 2010...

CVE-2010-0479: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Microsoft Office Publisher 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Microsoft Office Publisher File Conversion TextBox Processing Buffer Overflow Vulnerability."...

Microsoft Office Publisher Remote Code Execution Vulnerability (981160)

This host is missing a critical security update according to Microsoft Bulletin MS10-023. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...