Update Protection against Winny Remote Buffer Overflow Vulnerability

A critical vulnerability was reported in Winny, a popular Japanese P2P application. The vulnerability may allow a remote attacker to execute arbitrary code in the context of the user who executed the Winny...

Microsoft Internet Explorer 6 - Nested OBJECT Tag Memory Corruption

Microsoft Internet Explorer 6 - Nested OBJECT Tag Memory Corruption source: https://www.securityfocus.com/bid/17658/info Microsoft Internet Explorer is prone to a memory-corruption vulnerability. This issue is due to a flaw in the application in handling nested OBJECT tags in HTML content. An...

Microsoft Internet Explorer 6 - Nested OBJECT Tag Memory Corruption

source: https://www.securityfocus.com/bid/17658/info Microsoft Internet Explorer is prone to a memory-corruption vulnerability. This issue is due to a flaw in the application in handling nested OBJECT tags in HTML content. An attacker could exploit this issue via a malicious web page to potential...

Microsoft Internet Explorer HTML Tag Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability. This is related to the handling of certain HTML tags. Attackers could exploit this issue via a malicious web page to execute arbitrary code in the context of the currently logged-in user. They could also use HT...

ee -- temporary file privilege escalation

Problem description The ispellop function used by ee1 while executing spell check operations employs an insecure method of temporary file generation. This method produces predictable file names based on the process ID and fails to confirm which path will be over written with the user. It should b...

iDEFENSE Security Advisory 03.28.05: Multiple Telnet Client slc_add_reply() Buffer Overflow Vulnerability

Multiple Telnet Client slcaddreply Buffer Overflow Vulnerability iDEFENSE Security Advisory 03.28.05 www.idefense.com/application/poi/display?id=220&type=vulnerabilities March 28, 2005 I. BACKGROUND The TELNET protocol allows virtual network terminals to be connected to over the internet. The...

Microsoft JET 3.5/3.51/4.0 - VBA Shell

source: https://www.securityfocus.com/bid/548/info A vulnerability affects Microsoft's Jet 3.51 and 4.0 driver MSJET35.DLL and MSJET40.DLL. This vulnerability could allow an attacker to create malicious '.xls' or '.doc' files incorporating VBA shell commands. When the file is opened, the shell...

Security Update For Exchange Server 2016 CU10 (KB4459266)

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the System user. An attacker could then install programs;...