Stable Channel Update

The Stable channel has been updated to 27.0.1453.110 for Windows, Macintosh, Linux and Chrome Frame platforms. Security fixes and rewards: Please see the Chromium security page for more information. Note that the referenced bugs may be kept private until a majority of our users are up to date wit...

CVE-2013-0549

Cross-site scripting XSS vulnerability in the Web Content Manager - Web Content Viewer Portlet in the server in IBM WebSphere Portal 7.0.0.x through 7.0.0.2 CF22 and 8.0.0.x through 8.0.0.1 CF5, when the IBM Portlet API is used, allows remote attackers to inject arbitrary web script or HTML via a...

ERS Viewer 2013 ERS File Handling Buffer Overflow

This module exploits a buffer overflow vulnerability found in ERS Viewer 2013. The vulnerability exists in the module ermapperu.dll, where the function rfreporterror handles user provided data in an insecure way. It results in arbitrary code execution under the context of the user viewing a...

CVE-2013-1335

Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code via crafted shape data in a Word document, aka "Word Shape Corruption Vulnerability."...

CVE-2013-1335

Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code via crafted shape data in a Word document, aka "Word Shape Corruption Vulnerability."...

CVE-2013-1335

CVE-2013-1335 affects Microsoft Word 2003 SP3 and Word Viewer, where parsing of crafted shape data in Word documents can lead to remote code execution. The root cause is a memory-corruption/shape-data handling issue used to execute arbitrary code when a user opens a malicious Word file. Impact is...

Microsoft Office Wordview Remote Code Execution Vulnerability (2830399)

This host is missing a important security update according to Microsoft Bulletin MS13-043. OpenVAS Vulnerability Test $Id: secpodwinwordviewms13-043.nasl 6079 2017-05-08 09:03:33Z teissa $ Microsoft Office Wordview Remote Code Execution Vulnerability 2830399 Authors: Antu Sanadi Copyright:...

Attempt to launch Veeam Backup and Replication fails

Challenge An attempt to launch Veeam Backup & Replication fails with the message that Veeam Backup and Replication service is not running: The service can actually be seen as running: The following entries can be seen in VeeamShell.log: Timestamp Info ------- Started new session of Veeam Shell...

MS13-043: Vulnerability in Microsoft Word Could Allow Remote Code Execution (2830399)

The version of Office and/or Microsoft Word Viewer installed on the remote host is affected by a remote code execution vulnerability due to the way that Microsoft Word parses content in Word files. To exploit this issue, an attacker would need to trick a user into opening a specially crafted file...

ERS Viewer 2011 - '.ERS' File Handling Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "ERS Viewer 2011 E...

VMAX Web Viewer Default Credentials (HTTP)

VMAX Web Viewer is using known default credentials. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-1223

The log viewer in Cisco Unified Customer Voice Portal CVP Software before 9.0.1 ES 11 does not properly validate an unspecified parameter, which allows remote attackers to read arbitrary files via a crafted 1 HTTP or 2 HTTPS request, aka Bug ID CSCub38372...

ERS Viewer 2011 ERS File Handling Buffer Overflow Vulnerability

This Metasploit module exploits a buffer overflow vulnerability found in ERS Viewer 2011 version 11.04. The vulnerability exists in the module ermapperu.dll where the function ERMconverttocorrectwebpath handles user provided data in an insecure way. It results in arbitrary code execution under th...

ERS Viewer 2011 ERS File Handling Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "ERS Viewer 2011 E...

Stack overflow

Stack-based buffer overflow in the ERMconverttocorrectwebpath function in ermapperu.dll in ERDAS ER Viewer before 13.00.0001 allows remote attackers to execute arbitrary code via a crafted pathname in an ERS file...

ERS Viewer 2011 ERS File Handling Buffer Overflow

This module exploits a buffer overflow vulnerability found in ERS Viewer 2011 version 11.04. The vulnerability exists in the module ermapperu.dll where the function ERMconverttocorrectwebpath handles user provided data in an insecure way. It results in arbitrary code execution under the context o...

Design/Logic Flaw

The EdrawSoft EDOFFICE.EDOfficeCtrl.1 ActiveX control, as used in Edraw Office Viewer Component, the client in IBM Cognos Disclosure Management CDM 10.2.0, and other products, allows remote attackers to read arbitrary files, or download an arbitrary program onto a client machine and execute this...

PT-2013-61: Disclosure of sensitive information in Web Viewer for Samsung DVR

The specialists of the Positive Research center have detected "Disclosure of sensitive information" vulnerability associated with Absence of Password Hashing in Web Viewer for Samsung DVR. Users credentials logins and passwords are stored in plaintext at pages, not hashed or encrypted. This...

SuSE 11.2 Security Update : poppler (SAT Patch Number 7560)

This update of poppler fixes the following vulnerabilities : - Various invalid memory issues could be used by attackers supplying PDFs to crash the PDF viewer or potentially execute code. CVE-2013-1788 - A crash in poppler could be used by attackers providing PDFs to crash the PDF viewer...

SuSE 10 Security Update : poppler (ZYPP Patch Number 8523)

This update of poppler fixes the following vulnerabilities : - Various invalid memory issues could be used by attackers supplying PDFs to crash the PDF viewer or potentially execute code. CVE-2013-1788 - A crash in poppler could be used by attackers providing PDFs to crash the PDF viewer...