2637 matches found
Windows Media Player ASX PlayList File Heap Overflow Vulnerability
Description Windows Media Player is prone to a heap-overflow issue. Successfully exploiting this issue allows remote attackers to execute arbitrary machine code in the context of the affected user. Failed exploit attempts likely result in application crashes. Technologies Affected Avaya Agent...
Apple Mac OS X fails to properly handle corrupted DMG image structures
Overview Apple Mac OS X fails to properly handle corrupted DMG image structures. The complete impact of this vulnerability is unclear, but may include execution of arbitrary code or denial of service. Description A vulnerability in the way Mac OS X com.apple.AppleDiskImageController handles...
AOL Nullsoft Winamp Lyrics3 heap buffer overflow
Overview AOL Nullsoft Winamp contains a heap-based buffer overflow in the code that handles Lyrics3 tags. This vulnerability may allow a remote, unauthenticated attacker execute arbitrary code on a vulnerable system. Description Lyrics3 is a system for embedding the lyrics inside an MP3 song file...
Microsoft Internet Explorer 7 - Popup Address Bar Spoofing
Microsoft Internet Explorer 7 - Popup Address Bar Spoofing function StartTest var padding = ''; for i=0 ; i milw0rm.com 200...
Microsoft Office Smart Tag Remote Code Execution Vulnerability
Description Microsoft Office is prone to a remote code-execution vulnerability. This issue occurs when Office attempts to process malformed files. An attacker could exploit this issue by enticing a victim to load a malicious Office file. If the vulnerability is successfully exploited, this could...
Microsoft Office Malformed Chart Record Remote Code Execution Vulnerability
Description Microsoft Office is prone to a remote code-execution vulnerability. This issue occurs when Office attempts to process malformed files. An attacker could exploit this issue by enticing a victim to load a malicious Office file. If the vulnerability is successfully exploited, this could...
Microsoft Excel Lotus 1-2-3 File Handling Remote Code Execution Vulnerability
Description Microsoft Excel is prone to a remote code-execution vulnerability. A remote attacker may exploit this issue to execute arbitrary machine code in the context of the user running the application. This issue was originally described in BID 18989 and has now been assigned its own BID...
Microsoft PowerPoint Object Pointer Remote Code Execution Vulnerability
Description Microsoft PowerPoint is prone to a remote code-execution vulnerability. Exploiting this issue can allow remote attackers to execute arbitrary code on a vulnerable computer by supplying a malicious PowerPoint .ppt document to a user. Technologies Affected Microsoft Office 2000 Microsof...
Microsoft Word Malformed String Remote Code Execution Vulnerability
Description Microsoft Word is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to load a malicious Word file. If the vulnerability is successfully exploited, this could result in the execution of arbitrary code in the context of the current...
Microsoft Office Malformed Record Remote Code Execution Vulnerability
Description Microsoft Office is prone to a remote code-execution vulnerability. This issue occurs when Office attempts to process malformed files. An attacker could exploit this issue by enticing a victim to load a malicious Office file. If the vulnerability is successfully exploited, this could...
Apple Mac OS X Pre 10.4.8 Multiple Security Vulnerabilities
Description Apple Mac OS X is prone to multiple security vulnerabilities. These issue affect Mac OS X and various applications including CFNetwork, Safari, Kernel, ImageIO, LoginWindow, System Preferences, QuickDraw Manager, and Workgroup Manager. An attacker can exploit these issues to execute...
Apple QuickTime Plug-In Arbitrary Script Execution Weakness
Description Apple QuickTime plug-in is prone to an arbitrary-script-execution weakness when executing QuickTime Media Link files .qtl. An attacker can exploit this issue to execute arbitrary script code in the context of the affected application and load local content in a user's browser. Althoug...
Apple QuickTime movie buffer overflow vulnerability
Overview A buffer overflow vulnerability in the way Apple QuickTime handles movie files could allow a remote attacker to execute arbitrary code or cause a denial-of-service condition. Description A buffer overflow vulnerability in QuickTime for Windows and Mac OS X may allow an attacker to execut...
Microsoft Powerpoint Remote Code Execution Vulnerability
Description Microsoft PowerPoint is prone to a remote code-execution vulnerability. This issue occurs when the application handles malformed record data within a presentation file. A successful exploit of this issue will let attackers execute arbitrary code in the context of the targeted user...
Microsoft PowerPoint fails to properly handle malformed records
Overview Microsoft PowerPoint fails to properly handle malformed records allowing a buffer overflow to occur. This vulnerability may allow a remote attacker to execute arbitrary code on a vulnerable system. Description Microsoft PowerPoint fails to properly handle malformed records. Specifically,...
Microsoft Excel Selection Record Remote Code Execution Vulnerability
Description Microsoft Excel is prone to a remote code-execution vulnerability. Successfully exploiting this issue allows attackers to corrupt process memory and to execute arbitrary code in the context of targeted users. Note that Microsoft Office applications include functionality to embed Offic...
Microsoft Excel LABEL Record Remote Code Execution Vulnerability
Description Microsoft Excel is prone to a remote code-execution vulnerability. Successfully exploiting this issue allows attackers to corrupt process memory and to execute arbitrary code in the context of targeted users. Note that Microsoft Office applications include functionality to embed Offic...
Microsoft Office fails to properly handle document properties
Overview Microsoft Office contains a buffer overflow when handling specially crafted document properties. This vulnerability could allow a remote attacker to execute arbitrary code. Description Microsoft Office applications fail to properly validate property fields resulting in a buffer overflow...
Microsoft Excel DATETIME Remote Code Execution Vulnerability
Description Microsoft Excel is prone to a remote code-execution vulnerability. A remote attacker may exploit this issue to execute arbitrary machine code in the context of the user running the application. Note that Microsoft Office applications include functionality to embed Office files as...
Microsoft Excel URL unicode buffer overflow
Added: 06/21/2006 CVE: CVE-2006-3086 BID: 18500 OSVDB: 26666 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows platforms. Problem A buffer overflow in Excel when processing long URL strings allows command execution when a user clicks ...