CVE-2016-7235

Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Excel for Mac 2011, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

CVE-2016-7235: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Excel for Mac 2011, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

CVE-2016-7233: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Excel for Mac 2011, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2013 SP1, and Office Web Apps 2010 SP2 allow remote attackers to obtain sensitive information from process memory o...

CVE-2016-7232: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

CVE-2016-7254: Undefined Security Weakness

Microsoft SQL Server 2012 SP2 and 2012 SP3 does not properly perform a cast of an unspecified pointer, which allows remote authenticated users to gain privileges via unknown vectors, aka "SQL RDBMS Engine Elevation of Privilege Vulnerability."...

CVE-2016-7244: Improper Access Control

Microsoft Office 2007 SP3 allows remote attackers to cause a denial of service application hang via a crafted Office document, aka "Microsoft Office Denial of Service Vulnerability."...

PT-2016-2909

Name of the Vulnerable Software and Affected Versions Microsoft Excel 2007 SP3 Excel for Mac 2011 Office Compatibility Pack SP3 Excel Viewer Description The issue is caused by a buffer overflow in memory, allowing a remote attacker to execute arbitrary code with a specially crafted document...

Microsoft Office CVE-2016-7244 Denial of Service Vulnerability

Description Microsoft Office is prone to a remote denial of service vulnerability. An attacker can exploit this issue to cause a denial of service condition. Technologies Affected Microsoft Office 2007 SP3 Recommendations Block external access at the network boundary, unless external parties...

PT-2016-2924

Name of the Vulnerable Software and Affected Versions Microsoft Office 2007 SP3 Description The issue is related to insufficient access control in Microsoft Office, allowing a remote attacker to cause a denial of service via a crafted Office document. When a specially crafted file is opened in...

Freefloat FTP Server 1.0 RMD Buffer Overflow

!/usr/bin/env python -- coding: utf-8 -- import socket Exploit Title: FreeFloat FTP Server Buffer Overflow RMD command Date: 29 Octubre 2016 Exploit Author: Karri93 Software Link: http://www.freefloat.com/software/freefloatftpserver.zip Version: 1.0 Tested on: Windows XP Profesional SP3 Spanish x...

uSQLite 1.0.0 - Denial Of Service Exploit

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title: Remote buffer overflow vulnerability in uSQLite 1.0.0 PoC Date: 27/10/1016 Exploit Author: Peter Baris Software Link: https://sourceforge.net/projects/usqlite/?source=directory Version: 1.0.0 Tested on: windows 7 a...

uSQLite 1.0.0 Denial Of Service

!/usr/bin/python Exploit Title: Remote buffer overflow vulnerability in uSQLite 1.0.0 PoC Date: 27/10/1016 Exploit Author: Peter Baris Software Link: https://sourceforge.net/projects/usqlite/?source=directory Version: 1.0.0 Tested on: windows 7 and XP SP3 Longer strings will cause heap based...

CVE-2016-8565

Siemens Automation License Manager ALM before 5.3 SP3 allows remote attackers to write to files, rename files, create directories, or delete directories via crafted packets...

CVE-2016-8565

Siemens Automation License Manager ALM before 5.3 SP3 allows remote attackers to write to files, rename files, create directories, or delete directories via crafted packets...

PT-2016-5420

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows RT 8.1 Microsoft Windows 10 versions Gold through 1607 Microsoft...

Zortam Mp3 Media Studio 21.15 - Insecure File Permissions Privilege Escalation

Exploit for windows platform in category local exploits Exploit Title: Zortam Mp3 Media Studio 21.15 Insecure File Permissions Privilege Escalation Date: 23/09/2016 Exploit Author: Tulpa Contact: email protected Author website: www.tulpa-security.com Vendor Homepage: http://www.zortam.com/ Softwa...

Information disclosure

The Visual Basic macros in Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2016 export a certificate-store private key during a document-save operation, which allows attackers to obtain sensitive information via unspecified vectors, aka "Microsoft Information Disclosure Vulnerability."...

Memory corruption

Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."...

CVE-2016-3359: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."...

MS16-107: Description of the security update for Outlook 2007: September 13, 2016

MS16-107: Description of the security update for Outlook 2007: September 13, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...