IrfanView 4.33 - Format PlugIn ECW Decompression Heap Overflow

Application: IrfanView 4.33 Format PlugIn ECW Decompression Heap Overflow Plateform: Windows Exploitation: Remote code execution Secunia Number: SA49204 PRL: 2012-10 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction...

Topics Viewer 2.3 Local File Inclusion / SQL Injection

Exploit Title: Topics viewer v 2.3 Multiple Vulnerabilities Software Link: http://nilehoster.com/default/topicsviewer Author: n4ss1m Date: 19-05-2012 Tested on: win/linux Home : www.Sec4ever.com Local File Inclusion footer.php "; @include "themes/$sitetheme/templates/footerhead.html"; "; ...etc...

Nilehoster Topics Viewer 2.3 - Multiple SQL Injections Local File Inclusion

Nilehoster Topics Viewer 2.3 - Multiple SQL Injections Local File Inclusion source: https://www.securityfocus.com/bid/53708/info Nilehoster Topics Viewer is prone to multiple SQL-injection vulnerabilities and a local file-include vulnerability because it fails to sufficiently sanitize user-suppli...

Topics viewer v 2.3 csrf (Add Admin) / XSS Vulnerabilites

Exploit for php platform in category web applications !/usr/bin/env python Title : Topics viewer v 2.3 csrf Add Admin and XSS Author : Cyber-Crystal Version : 2.3 Homepage : http://nilehoster.com/default/topicsviewer Dork : "Programmed by : Nilehoster.com" Tested on: Win/7 Based on POC :...

CVE-2012-0018

Microsoft Visio Viewer 2010 Gold and SP1 does not properly validate attributes in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "VSD File Format Memory Corruption Vulnerability."...

Memory corruption

Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel...

Memory corruption

Microsoft Visio Viewer 2010 Gold and SP1 does not properly validate attributes in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "VSD File Format Memory Corruption Vulnerability."...

Microsoft Excel内存破坏远程代码执行漏洞(CVE-2012-0142)(MS12-030)

BUGTRAQ ID: 53373 CVE ID: CVE-2012-0142 Excel是微软公司的办公软件Microsoft office的组件之一，是由Microsoft为Windows和Apple Macintosh操作系统的电脑而编写和运行的一款试算表软件。 Microsoft Excel在实现上存在内存破坏导致的远程代码执行漏洞，攻击者通过诱使用户打开特制的Excel文件，利用此漏洞以当前用户权限执行任意代码。 0 Microsoft Office Excel 2003 Microsoft Office Office for Mac 2011 Microsoft Office...

Microsoft Excel SXLI记录内存破坏远程代码执行漏洞(CVE-2012-0184)(MS12-030)

BUGTRAQ ID: 53375 CVE ID: CVE-2012-0184 Excel是微软公司的办公软件Microsoft office的组件之一，是由Microsoft为Windows和Apple Macintosh操作系统的电脑而编写和运行的一款试算表软件。 Microsoft Excel在实现上存在远程代码执行漏洞，攻击者通过诱使用户打开特制的Excel文件，利用此漏洞以当前用户权限执行任意代码。 0 Microsoft Office Excel 2003 Microsoft Office Office for Mac 2011 Microsoft Office Office...

Microsoft Excel 'MergeCells'记录堆溢出远程代码执行漏洞(MS12-030)

BUGTRAQ ID: 53376 Excel是微软公司的办公软件Microsoft office的组件之一，是由Microsoft为Windows和Apple Macintosh操作系统的电脑而编写和运行的一款试算表软件。 Microsoft Excel在实现上存在远程代码执行漏洞，攻击者通过诱使用户打开特制的Excel文件，利用此漏洞以当前用户权限执行任意代码。 0 Microsoft Office Excel 2003 Microsoft Office Office for Mac 2011 Microsoft Office Office Excel Viewer 2007...

CVE-2012-0018

CVE-2012-0018 affects Microsoft Visio Viewer 2010 Gold and SP1. The issue is memory corruption caused by improper validation of attributes in Visio files, leading to remote code execution when processing crafted Visio documents (aka VSD File Format Memory Corruption). Severity in NVD is high (CVS...

Microsoft Office Visio Viewer Remote Code Execution Vulnerability (2597981)

This host is missing an important security update according to Microsoft Bulletin MS12-031. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Excel 内存破坏远程代码执行漏洞(CVE-2012-0143)(MS12-030)

BUGTRAQ ID: 53374 CVE ID: CVE-2012-0143 Excel是微软公司的办公软件Microsoft office的组件之一，是由Microsoft为Windows和Apple Macintosh操作系统的电脑而编写和运行的一款试算表软件。 Microsoft Excel在实现上存在远程代码执行漏洞，攻击者通过诱使用户打开特制的Excel文件，利用此漏洞以当前用户权限执行任意代码。 0 Microsoft Office Excel 2003 Microsoft Office Office for Mac 2011 Microsoft Office Office...

CVE-2012-0018

Microsoft Visio Viewer 2010 Gold and SP1 does not properly validate attributes in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "VSD File Format Memory Corruption Vulnerability."...

MS12-031: Vulnerability in Microsoft Visio Viewer 2010 Could Allow Remote Code Execution (2597981)

The version of Microsoft Visio Viewer installed on the remote Windows host is reportedly affected by a memory corruption vulnerability due to the way the application handles memory when parsing specially crafted Visio files. An attacker who tricked a user on the affected host into opening a...

CVE-2012-0185

CVE-2012-0185 is a heap-based buffer overflow affecting Microsoft Excel 2007 SP2/SP3, Excel 2010 Gold/SP1, Excel Viewer, and Office Compatibility Pack SP2/SP3 . The vulnerability arises from inefficient/incorrect memory handling during opening of crafted spreadsheets , specifically related to the...

CVE-2012-0141

CVE-2012-0141 affects Microsoft Excel and related Office components across Windows and Mac platforms (Excel 2003 SP3, 2007 SP2/SP3, 2010 SP1/Gold, Office 2011 for Mac, Excel Viewer, Office Compatibility Pack). The root cause is memory corruption during parsing/opening specially crafted Excel/RTF ...

Microsoft Visio Viewer VSD文件格式远程代码执行漏洞(MS12-031)

BUGTRAQ ID: 53328 CVE ID: CVE-2012-0018 Microsoft Visio是Windows操作系统下运行的流程图软件，它现在是Microsoft Office软件的一个部分。 MMicrosoft Visio在验证Visio文件格式的某些属性的实现上存在远程代码执行漏洞，攻击者可通过特制的Visio文件利用此漏洞破坏内存，以当前用户权限执行任意代码。 0 Microsoft Visio Viewer 2010 SP1 Microsoft Visio Viewer 2010 0 厂商补丁： Microsoft ---------...

Microsoft Office Visio Viewer Remote Code Execution Vulnerability (2597981)

This host is missing an important security update according to Microsoft Bulletin MS12-031. OpenVAS Vulnerability Test $Id: secpodms12-031.nasl 6538 2017-07-05 11:38:27Z cfischer $ Microsoft Office Visio Viewer Remote Code Execution Vulnerability 2597981 Authors: Antu Sanadi Copyright: Copyright ...

CVE-2012-0185

Heap-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 Gold and SP1, Excel Viewer, and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet that triggers incorrect handling of memory during opening, aka "Excel MergeCell...