[BSA-096] Security Update for libreoffice

Rene Engelhard uploaded new packages for libreoffice which fixed the following security problems: CVE-2014-0247 It was discovered that LibreOffice unconditionally executed certain VBA macros, contrary to user expectations. https://security-tracker.debian.org/tracker/CVE-2014-0247 The stable...

USN-2253-1: LibreOffice vulnerability

It was discovered that LibreOffice unconditionally executed certain VBA macros, contrary to user expectations...

CVE-2014-0247

LibreOffice 4.2.4 executes unspecified VBA macros automatically, which has unspecified impact and attack vectors, possibly related to doc/docmacromode.cxx...

openSUSE Security Update : clamav (openSUSE-SU-2011:0208-1)

Specially crafted VBA data in Microsoft Office documents could crash clamav or potentially even cause execution of arbitrary code. clamav was updated to version 0.97 to fix the issue CVE-2011-1003. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...

CVE-2012-1661

ESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing embedded VBA macros, which allows user-assisted remote attackers to execute arbitrary VBA code via a crafted map .mxd file...

Code injection

ESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing embedded VBA macros, which allows user-assisted remote attackers to execute arbitrary VBA code via a crafted map .mxd file...

EUVD-2012-1671

ESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing embedded VBA macros, which allows user-assisted remote attackers to execute arbitrary VBA code via a crafted map .mxd file...

CVE-2012-1661

ESRI ArcMap 9 and ArcGIS Desktop 10.0.2.3200 and earlier are affected by a flaw that does not properly prompt before executing embedded VBA macros in map files (.mxd), allowing user‑assisted remote code execution. Root cause: VBA macro execution is not prompting the user. Affected products/versio...

CVE-2012-1661

ESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing embedded VBA macros, which allows user-assisted remote attackers to execute arbitrary VBA code via a crafted map .mxd file...

PT-2012-3425 · Esri · Esri Arcgis +1

Name of the Vulnerable Software and Affected Versions: ESRI ArcMap version 9 ESRI ArcGIS versions 10.0.2.3200 and earlier Description: The issue allows user-assisted remote attackers to execute arbitrary VBA code via a crafted map .mxd file, due to the software not properly prompting users before...

Microsoft Office security vulnerabilities

VBA unsafe library loading, Office for Mac weak files permissions...

CVE-2012-1854

Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications VBA; and Summit Microsoft Visual Basic for Applications SDK allows local users to gain privileges via a Trojan horse DLL in the current...

Design/Logic Flaw

Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications VBA; and Summit Microsoft Visual Basic for Applications SDK allows local users to gain privileges via a Trojan horse DLL in the current...

ESRI ArcGIS 10.0.X / ArcMap 9 Arbitrary Code Execution

Exploit for windows platform in category local exploits ===== TITLE ===== ESRI ArcMap Arbitrary Code Execution Via Crafted Map File ============ Description: ============ Opening a specially crafted mxd file will execute arbitrary code without prompting and without a crash of the application. Thi...

ESRI ArcMap Arbitrary Code Execution

Description: Opening a specially crafted mxd file will execute arbitrary code without prompting and without a crash of the application. This is due to a flaw in the programs ability to prompt a user before executing embedded VBA. Mxd files are not filtered by email systems so this allows a remote...

ESRI ArcGIS 10.0.x / ArcMap 9 - Arbitrary Code Execution

===== TITLE ===== ESRI ArcMap Arbitrary Code Execution Via Crafted Map File ============ Description: ============ Opening a specially crafted mxd file will execute arbitrary code without prompting and without a crash of the application. This is due to a flaw in the programs ability to prompt a...

Microsoft Excel VBA Module Stream Use-After-Free

A use-after-free vulnerability has been reported in Microsoft Excel...

SuSE 10 Security Update : clamav (ZYPP Patch Number 7397)

Specially crafted VBA data in Microsoft Office documents could crash clamav or potentially even cause execution of arbitrary code. clamav was updated to version 0.97 to fix the issue. CVE-2011-1003 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novel...

Microsoft Excel 2003 11.8335.8333 - Use-After-Free

Microsoft Excel 2003 11.8335.8333 - Use-After-Free Luigi Auriemma Application: Microsoft Excel http://office.microsoft.com/en-us/excel/ http://office.microsoft.com/en-us/downloads/CD001022531.aspx Versions: tested Office 2003 11.8335.8333 SP3 Platforms: Windows Bug: use after free Exploitation:...

SuSE 10 Security Update : clamav (ZYPP Patch Number 7380)

Specially crafted VBA data in Microsoft Office documents could crash clamav or potentially even cause execution of arbitrary code. clamav was updated to version 0.97 to fix the issue. CVE-2011-1003 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novel...