Microsoft Word Record RTF Parsing Engine Remote Heap Buffer Overflow Vulnerability

Description Microsoft Word is prone to a remote heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary-checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed...

IBM Lotus Notes DOC Attachment Viewer Buffer Overflow (CVE-2007-5544)

Lotus Notes is a client-server collaborative software and email system provided by IBM. The Lotus Notes email client application is capable of communicating with email servers over a range of protocols, such as: SMTP, POP, and IMAP. A stack buffer overflow vulnerability exists in the way IBM Lotu...

[SECURITY] Fedora 12 Update: w3m-0.5.2-17.fc12

The w3m program is a pager or text file viewer that can also be used as a text-mode Web browser. W3m features include the following: when reading an HTML document, you can follow links and view images using an external image viewer; its internet message mode determines the type of document from t...

[SECURITY] Fedora 13 Update: w3m-0.5.2-18.fc13

The w3m program is a pager or text file viewer that can also be used as a text-mode Web browser. W3m features include the following: when reading an HTML document, you can follow links and view images using an external image viewer; its internet message mode determines the type of document from t...

[SECURITY] Fedora 13 Update: gv-3.7.1-1.fc13

GNU gv is a user interface for the Ghostscript PostScriptTM interpreter. Gv can display PostScript and PDF documents on an X Window System...

Applicure dotDefender 4.01-3 - Persistent Cross-Site Scripting

An advisory by EnableSecurity. ID: ES-20100601 Advisory URL: http://resources.enablesecurity.com/advisories/ES-20100601-dotdefender4.txt Affected Versions: version 4.0 Fixed versions: 4.01-3 and later Description: Applicure dotDefender is a Web Application Firewall that can be installed on Window...

Adobe SVG Viewer Circle Transform Remote Code Execution

The version of Adobe SVG Viewer on the remote host has a remote code execution vulnerability. A remote attacker could exploit this by tricking a user into requesting a maliciously crafted web page, resulting in arbitrary code execution. C Tenable Network Security, Inc. include"compat.inc"; if...

FreeBSD : cacti -- multiple vulnerabilities (e02e6a4e-6b26-11df-96b2-0015587e2cc1)

Multiple vulnerabilities have been reported to exist in older version of Cacti. The release notes of Cacti 0.8.7f summarizes the problems as follows : - SQL injection and shell escaping issues - Cross-site scripting issues - Cacti Graph Viewer SQL injection vulnerability %NASLMINLEVEL 70300 C...

Orbital Viewer 1.04 - .ov Local Universal Stack Overflow (SEH)

Orbital Viewer 1.04 - .ov Local Universal Stack Overflow SEH !usr/bin/perl Pro: Orbital Viewer v1.04 .orb/.ov Local Universal Stack Overflow Exploit SEH Author: CrazyHacker Download: http://www.orbitals.com/orb/setupov.exe Date: 20-6-2010 Tested: WinXp SP2 $junk = 6060; $header =...

Orbital Viewer v1.04 (.ov) Local Universal Stack Overflow Exploit (SEH)

Exploit for windows platform in category local exploits ======================================================================= Orbital Viewer v1.04 .ov Local Universal Stack Overflow Exploit SEH ======================================================================= !usr/bin/perl Pro: Orbital...

Orbital Viewer 1.04 - '.ov' Local Universal Stack Overflow (SEH)

!usr/bin/perl Pro: Orbital Viewer v1.04 .orb/.ov Local Universal Stack Overflow Exploit SEH Author: CrazyHacker Download: http://www.orbitals.com/orb/setupov.exe Date: 20-6-2010 Tested: WinXp SP2 $junk = 6060; $header = "OrbitalFileV1.0\n"; $nseh = "\xeb\xf9\xff\xff"; jmp back 7 bytes $seh =...

Cross site scripting

Cross-site scripting XSS vulnerability in Help Viewer in Apple Mac OS X 10.6 before 10.6.4 allows remote attackers to inject arbitrary web script or HTML via a crafted help: URL, related to "URL parameters in HTML content."...

CVE-2010-1373

CVE-2010-1373 : Apple Mac OS X 10.6 before 10.6.4 contains a cross-site scripting (XSS) vulnerability in Help Viewer. A crafted help: URL can inject arbitrary web script or HTML due to issues with URL parameters in HTML content, enabling remote HTML/script injection. Affected component: Help View...

CVE-2010-1373

Cross-site scripting XSS vulnerability in Help Viewer in Apple Mac OS X 10.6 before 10.6.4 allows remote attackers to inject arbitrary web script or HTML via a crafted help: URL, related to "URL parameters in HTML content."...

Adobe SVG Viewer 3.0 - Circle Transform Remote Code Execution

Adobe SVG Viewer 3.0 - Circle Transform Remote Code Execution source: https://www.securityfocus.com/bid/40885/info Adobe SVG Viewer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the application. Failed attacks may...

Adobe SVG Viewer 3.0 - Circle Transform Remote Code Execution

source: https://www.securityfocus.com/bid/40885/info Adobe SVG Viewer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the application. Failed attacks may cause a denial-of-service condition. Adobe SVG Viewer 3.03 is...

Mac OS X 10.6.x < 10.6.4 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.4. Mac OS X 10.6.4 contains security fixes for the following components : - CUPS - DesktopServices - Flash Player plug-in - Folder Manager - Help Viewer - iChat - ImageIO - Kerberos - Kernel - libcurl - Network...

Office Excel畸形图表子流解析远程代码执行漏洞（MS10-038）

BUGTRAQ ID: 40521 CVE ID: CVE-2010-0823 Excel是微软Office套件中的电子表格工具。 Excel在解析电子表格中的畸形图表子流时存在内存破坏漏洞，用户受骗打开了畸形的Excel文档就会导致执行任意代码。 Microsoft Excel Viewer SP2 Microsoft Excel Viewer SP1 Microsoft Excel 2007 SP2 Microsoft Excel 2007 SP1 Microsoft Excel 2003 SP3 Microsoft Excel 2003 SP2 Microsoft Excel 20...

Microsoft Office Excel Remote Code Execution Vulnerabilities (2027452)

This host is missing a critical security update according to Microsoft Bulletin MS10-038. OpenVAS Vulnerability Test $Id: secpodms10-038.nasl 6538 2017-07-05 11:38:27Z cfischer $ Microsoft Office Excel Remote Code Execution Vulnerabilities 2027452 Authors: Madhuri D Copyright: Copyright c 2010...

Security Update for Microsoft Office Excel Viewer (KB982333)

A security vulnerability exists in Microsoft Office Excel Viewer that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...