1106 matches found
Microsoft Visio Remote Code Execution Vulnerabilities (2451879)
This host is missing a critical security update according to Microsoft Bulletin MS11-008. OpenVAS Vulnerability Test $Id: secpodms11-008.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Visio Remote Code Execution Vulnerabilities 2451879 Authors: Antu Sanadi Copyright c 2011 SecPod,...
Microsoft Ships 12 Bulletins in February's Patch Tuesday
Microsoft addressed 22 flaws with 12 separate bulletins in February’s edition of Patch Tuesday, including three bulletins that were rated critical with the remaining nine rated as important. Among the programs affected are Microsoft Windows, Internet Explorer, Office, Visual Studio, and IIS. The...
Security Update for Microsoft Office Visio 2003 (KB2434733)
A security vulnerability exists in Microsoft Office Visio 2003 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Microsoft going to patch 22 bugs, 3 zero-days !
Microsoft today said it will affair 12 aegis updates abutting anniversary to application 22 vulnerabilities in Internet Explorer IE, Windows, its Internet server and Visio, the company's abstracts diagramming tool. The aggregation additionally appear it will accommodate patches abutting Tuesday f...
Microsoft Visio Object Memory Corruption (CVE-2011-0092) Remote Code Execution Vulnerability
Description Microsoft Visio is prone to a remote code-execution vulnerability because it fails to adequately handle user-supplied data. Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will result in a...
Microsoft Visio 2007 LZW Stream Decompression Exception Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Visio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Visio...
Microsoft Visio Data Type Memory Corruption (CVE-2011-0093) Remote Code Execution Vulnerability
Description Microsoft Visio is prone to a remote code-execution vulnerability because it fails to adequately handle user-supplied data. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Failed exploit attempts will result in a...
MS11-008: Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution (2451879)
The remote host contains a version of Microsoft Visio that is affected by multiple memory corruption vulnerabilities. A remote attacker could exploit these by tricking a user into opening a specially crafted Visio file, resulting in arbitrary code execution. C Tenable Network Security, Inc...
Microsoft Visio 2007 DLL Hijacking Exploit (mfc80esn.dll)
Exploit for windows platform in category local exploits / ========================================================= Microsoft Visio 2007 DLL Hijacking Exploit mfc80esn.dll ========================================================= $ Program: MS Visio $ Version: 2007 $ Download:...
Microsoft Visio 2007 - mfc80esn.dll DLL Loading Arbitrary Code Execution
Microsoft Visio 2007 - mfc80esn.dll DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/43914/info Microsoft Visio is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the...
Microsoft Visio 2007 - 'mfc80esn.dll' DLL Loading Arbitrary Code Execution
// source: https://www.securityfocus.com/bid/43914/info Microsoft Visio is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that...
Month Of Abysssec Undisclosed Bugs - Microsoft Office Visio Overflow
''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Day 8 Binary Analysis | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-8-microsoft-office-visio-dxf-file-stack-overflow/ http://www.exploit-db.com/sploits/moaub-8-exploit.zip ''' ''' Title :...
Microsoft Office Visio DXF File Stack based Overflow
No description provided by source. ''' Title : Microsoft Office Visio DXF File Stack based Overflow Version : Microsoft Office Visio 2002xp Analysis : http://www.abysssec.com Vendor : http://www.microsoft.com Impact : Ciritial Contact : shahin at abysssec.com , info at abysssec.com Twitter :...
Microsoft Visio 2002 - .DXF Local Stack Overflow
Microsoft Visio 2002 - .DXF Local Stack Overflow ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Day 8 Binary Analysis | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-8-microsoft-office-visio-dxf-file-stack-overflow/...
Microsoft Office Visio DXF File Stack based Overflow
Exploit for windows platform in category remote exploits ==================================================== Microsoft Office Visio DXF File Stack based Overflow ==================================================== Title : Microsoft Office Visio DXF File Stack based Overflow Version : Microsoft...
Microsoft Visio 2002 - '.DXF' Local Stack Overflow
''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Day 8 Binary Analysis | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-8-microsoft-office-visio-dxf-file-stack-overflow/...
CVE-2010-3148
Untrusted search path vulnerability in Microsoft Visio 2003 SP3 allows local users to gain privileges via a Trojan horse mfc71enu.dll file in the current working directory, as demonstrated by a directory that contains a .vsd, .vdx, .vst, or .vtx file, aka "Microsoft Visio Insecure Library Loading...
Design/Logic Flaw
Untrusted search path vulnerability in Microsoft Visio 2003 SP3 allows local users to gain privileges via a Trojan horse mfc71enu.dll file in the current working directory, as demonstrated by a directory that contains a .vsd, .vdx, .vst, or .vtx file, aka "Microsoft Visio Insecure Library Loading...
CVE-2010-3148
Untrusted search path vulnerability in Microsoft Visio 2003 SP3 allows local users to gain privileges via a Trojan horse mfc71enu.dll file in the current working directory, as demonstrated by a directory that contains a .vsd, .vdx, .vst, or .vtx file, aka "Microsoft Visio Insecure Library Loading...
CVE-2010-3148
CVE-2010-3148 relates to an insecure library loading vulnerability in Microsoft Visio 2003 SP3. The root cause is loading an unintended DLL (notably mfc71enu.dll) from the current working directory, enabling a Trojan horse DLL to be used via crafted Visio files (e.g., .vsd, .vdx, .vst, .vtx). The...