Critical Zero-day Vulnerability in Adobe Reader

Critical Zero-day Vulnerability in Adobe Reader Researchers at the Lockheed Martin Computer Incident Response Team CRT and members of the Defense Security Information Exchange informed Adobe that their products were being exploited by hackers. The exploit affects all versions of Adobe Reader and...

Microsoft .Net and Silverlight Framework Remote Code Execution (MS11-078; CVE-2011-1253)

A remote code execution vulnerability has been reported in Microsoft .NET Framework and Silverlight framework. The vulnerability is due to the way that .NET Framework and Silverlight framework restrict inheritance within classes. A remote attacker may exploit this vulnerability by enticing...

GOM Player ActiveX Control Buffer Overflow (CVE-2007-5779)

A remote code execution vulnerability has been reported in GOM player. The vulnerability is due to a boundary error in GOM while handling a certain method. A remote attacker may exploit this vulnerability by enticing an unsuspecting user to open a specially crafted HTML page. Successful...

ESTsoft ALZip MIM File Buffer Overflow (CVE-2011-1336)

A remote code execution vulnerability has been reported in ESTsoft's ALZip. The vulnerability is due to an error while parsing MIME files. A remote attacker may exploit this vulnerability by sending a specially crafted .mim file to an affected user. Successful exploitation of this vulnerability...

EnjoySAP SAP GUI ActiveX Control Buffer Overflow (CVE-2007-3605)

A file execution vulnerability has been reported in EnjoySAP SAP GUI. The vulnerability is due to a boundary error in EnjoySAP while handling a certain method. A remote attacker may exploit this vulnerability by enticing an unsuspecting user to open a malicious link. Successful exploitation of th...

Microsoft Excel Out of Bounds Array Indexing Code Execution (MS11-072; CVE-2011-1987)

A remote code execution vulnerability has been reported in Microsoft Office Excel. An attacker could exploit this vulnerability to execute arbitrary code in an affected system. The vulnerability is due to an error in the way the application handles specially crafted Excel files. A remote attacker...

Microsoft Office Visio UML Parsing Use After Free (MS11-060; CVE-2011-1972)

Microsoft Visio is a diagram creation software for Microsoft Windows. A remote code execution vulnerability has been reported in Microsoft Office Visio. The vulnerability is due to the improper way in which the application validates objects in memory when parsing specially crafted Visio files. An...

PT-2011-2619

Name of the Vulnerable Software and Affected Versions HP ArcSight Connector Appliance versions prior to 6.1 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the Windows XP variable in a file. This could potentially lead to...

Adobe Audition Session File TRKM Stack Buffer Overflow (APSB11-10; CVE-2011-0615)

Adobe Audition formerly Cool Edit Pro is a digital audio workstation from Adobe Systems featuring both a multi-track, non-destructive mix/edit environment and a destructive-approach waveform editing view. A stack buffer overflow exists in Adobe Audition. The vulnerability is due to an error when...

Adobe Flash Player ActionScript Rest Array Memory Corruption (APSB11-18; CVE-2011-2110)

The vulnerability is due to an error when processing ActionScript Rest array in flash files. A remote attacker can exploit this vulnerability by enticing a user to download and view a Flash file that contains a malicious ActionScript code. Successful exploitation of this vulnerability could cause...

Rosoft MediaPlayer v4.4.4 - Buffer Overflow Vulnerability

Document Title: =============== Rosoft MediaPlayer v4.4.4 - Buffer Overflow Vulnerability Release Date: ============= 2011-06-21 Vulnerability Laboratory ID VL-ID: ==================================== 94 Product & Service Introduction: =============================== Ever since we released our ve...

Adobe Reader PDF 3D Image JavaScript RemoveItem Code Execution (APSB11-16; CVE-2011-2099)

A memory corruption vulnerability has been reported in Adobe Reader that could potentially allow an attacker to crash the application and take control of the system...

Workaround for Microsoft Office Excel BIFF5 Records Vulnerabilities (MS11-045; CVE-2011-1273)

A remote code execution vulnerability exists in the way that Microsoft Excel handles specially crafted Excel files. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; o...

Microsoft Windows Distributed File System Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. The issue affects the Windows Distributed File System DFS. An attacker can exploit this issue by sending a specially crafted DFS response to the affected application. Successfully exploiting this issue allows an...

Microsoft Windows DFS PathConsumed Code Injection (MS11-042; CVE-2011-1868)

This is a remote code execution vulnerability. The vulnerability is caused by the Microsoft Distributed File System DFS implementation improperly validating all fields within specially crafted DFS responses. An attacker who successfully exploited this vulnerability could take complete control of ...

Microsoft Office Excel SerAuxTrend Record Remote Code Execution (MS11-045; CVE-2011-1274)

This is a remote code execution vulnerability. When Microsoft Excel validates record information upon opening a specially crafted Excel file, a memory handling error may corrupt system memory in such a way that an attacker could execute arbitrary code. Successful exploitation of this vulnerabilit...

Adobe Flash Player DefineFontAlignZones Tag Code Execution (APSB11-12; CVE-2011-0626)

The Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient bounds checking by the Adobe Flash Player. A remote attacker can exploit th...

Adobe Flash Player ActionScript DoABC Tag Integer Overflow (APSB11-12; CVE-2011-0618)

The Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an integer overflow in the Adobe Flash Player when parsing specially crafted SWF files. A...

Adobe Flash Player ActionScript callMethod Code Execution (APSA11-02; CVE-2011-0611)

The Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient verification of segment data by the Adobe Flash Player. A remote attacker c...

Microsoft Office共享组件DLL加载任意代码执行漏洞(MS11-023)

BUGTRAQ ID: 47246 CVE ID: CVE-2011-0107 Microsoft Office是一套由微软公司开发的办公软件，它为Microsoft Windows和Apple Macintosh操作系统而开发。 Microsoft Office在实现上存在共享组件DLL加载任意代码执行，远程攻击者可利用此漏洞以当前用户权限执行任意代码。 Microsoft...