Microsoft Windows Hyperlink Object Library Remote Code Execution(MS06-050)

No description provided by source. Vulnerable Systems: Microsoft Windows 2000 Service Pack 4 Microsoft Windows XP Service Pack 1 Microsoft Windows XP Service Pack 2 Microsoft Windows Server 2003 Microsoft Windows Server 2003 Service Pack 1 BUGTRAQ ID: 18500 CVECAN ID: CVE-2006-3086 Exploit 1...

CVE-2006-3654

Buffer overflow in wksss.exe 8.4.702.0 in Microsoft Works Spreadsheet 8.0 allows remote attackers to cause a denial of service CPU consumption or crash via crafted Excel files...

CVE-2006-3653

wksss.exe 8.4.702.0 in Microsoft Works Spreadsheet 8.0 allows remote attackers to cause a denial of service CPU consumption or crash via crafted 1 Works, 2 Excel, and 3 Lotus 1-2-3 files...

CVE-2006-3654

Buffer overflow in wksss.exe 8.4.702.0 in Microsoft Works Spreadsheet 8.0 allows remote attackers to cause a denial of service CPU consumption or crash via crafted Excel files...

CVE-2006-3653

CVE-2006-3653 affects wksss.exe 8.4.702.0 in Microsoft Works Spreadsheet 8.0. A remote attacker can cause a denial of service by processing crafted (1) Works, (2) Excel, and (3) Lotus 1-2-3 files. Impact stated: CPU consumption or crash, with a low base score (CVSS v2: 2.6) and partial availabili...

CVE-2006-3654

The CVE-2006-3654 entry affects Microsoft Works Spreadsheet 8.0 (wksss.exe 8.4.702.0). The underlying issue is a buffer overflow triggered by crafted Excel files, enabling remote attackers to cause a denial of service (CPU consumption or crash). No patch/fix details are provided in the connected ...

CVE-2006-3653

wksss.exe 8.4.702.0 in Microsoft Works Spreadsheet 8.0 allows remote attackers to cause a denial of service CPU consumption or crash via crafted 1 Works, 2 Excel, and 3 Lotus 1-2-3 files...

Microsoft Works - Buffer Overflows / Denial of Service (DoS)-Vulnerabilities

Microsoft Works - Buffer Overflows / Denial of Service DoS-Vulnerabilities ... discovered by Benjamin Tobias Franz Affected Vendor: Microsoft Affected Product: Microsoft Works Description: Microsoft Works Spreadsheet wksss.exe fails to handle specially crafted files. All supported file formats...

CVE-2006-3431

Buffer overflow in certain Asian language versions of Microsoft Excel might allow user-assisted attackers to execute arbitrary code via a crafted STYLE record in a spreadsheet that triggers the overflow when the user attempts to repair the document or selects the "Style" option, as demonstrated b...

CVE-2006-3431

CVE-2006-3431 describes a remote code execution vulnerability in Microsoft Excel related to the handling of the STYLE record in various Asian-language Excel versions. The flaw is a stack-based buffer overflow triggered when parsing a crafted spreadsheet, potentially allowing code execution if a u...

CVE-2006-3014

Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded Shockwave Flash Player ActiveX Object, which is automatically executed when the user opens the spreadsheet...

CVE-2006-3014

Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded Shockwave Flash Player ActiveX Object, which is automatically executed when the user opens the spreadsheet...

Microsoft Excel URL unicode buffer overflow

Added: 06/21/2006 CVE: CVE-2006-3086 BID: 18500 OSVDB: 26666 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows platforms. Problem A buffer overflow in Excel when processing long URL strings allows command execution when a user clicks ...

Microsoft Excel URL unicode buffer overflow

Added: 06/21/2006 CVE: CVE-2006-3086 BID: 18500 OSVDB: 26666 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows platforms. Problem A buffer overflow in Excel when processing long URL strings allows command execution when a user clicks ...

Microsoft Excel - Unicode Local Overflow (PoC)

Microsoft Excel - Unicode Local Overflow PoC excelsexywarez.pl excel unicode overflow poc by kcope in 2006 thanks to revoguard and alex use Spreadsheet::WriteExcel; my $workbook = Spreadsheet::WriteExcel-new"FUCK.xls"; $worksheet = $workbook-addworksheet; $format = $workbook-addformat;...

Microsoft Excel - Unicode Local Overflow (PoC)

excelsexywarez.pl excel unicode overflow poc by kcope in 2006 thanks to revoguard and alex use Spreadsheet::WriteExcel; my $workbook = Spreadsheet::WriteExcel-new"FUCK.xls"; $worksheet = $workbook-addworksheet; $format = $workbook-addformat; $format-setbold; $format-setcolor'red';...

Microsoft Works 8.0 Spreadsheet - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/18989/info The spreadsheet component of Microsoft Works is prone to multiple remote vulnerabilities, including buffer-overflow and denial-of service issues. These issues occur because the application fails to handle specifically crafted spreadsheet...

Microsoft Works 8.0 Spreadsheet - Multiple Vulnerabilities

Microsoft Works 8.0 Spreadsheet - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/18989/info The spreadsheet component of Microsoft Works is prone to multiple remote vulnerabilities, including buffer-overflow and denial-of service issues. These issues occur because the...

Ubuntu 4.10 / 5.04 : python2.1, python2.2, python2.3, gnumeric vulnerabilities (USN-173-4)

USN-173-1 fixed a buffer overflow vulnerability in the PCRE library. However, it was found that the various python packages and gnumeric contain static copies of the library code, so these packages need to be updated as well. In gnumeric this bug could be exploited to execute arbitrary code with...

GLSA-200509-02 : Gnumeric: Heap overflow in the included PCRE library

The remote host is affected by the vulnerability described in GLSA-200509-02 Gnumeric: Heap overflow in the included PCRE library Gnumeric contains a private copy of libpcre which is subject to an integer overflow leading to a heap overflow see GLSA 200508-17. Impact : An attacker could potential...