1039 matches found
MS ATL ActiveX Controls for MS Office Could Allow Remote Code Execution (973965)
This host is missing a critical security update according to Microsoft Bulletin MS09-060. OpenVAS Vulnerability Test $Id: secpodms09-060.nasl 6533 2017-07-05 08:41:34Z santu $ MS ATL ActiveX Controls for MS Office Could Allow Remote Code Execution 973965 Authors: Antu Sanadi Updated By: Antu Sana...
PT-2009-4908 · Microsoft · Works +26
Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer version 6 SP1 Windows XP versions SP2 and SP3 Office XP version SP3 Office 2003 version SP3 2007 Microsoft Office System versions SP1 and SP2 Office Project 2002 version SP1 Visio 2002 version SP2 Office Word Viewe...
Security Update for Microsoft Visio 2002 (KB975365)
A security vulnerability exists in Microsoft Visio 2002 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Microsoft GDI+ TIFF File Processing 'BitsPerSample' Tag Remote Code Execution Vulnerability
Description Microsoft GDI+ is prone to a remote code-execution vulnerability because the vector graphics link library improperly processes TIFF image files. An attacker could exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts...
Microsoft GDI+ PNG File Integer Overflow Remote Code Execution Vulnerability
Description Microsoft GDI+ is prone to a remote code-execution vulnerability because the vector graphics link library improperly processes PNG image files. An attacker could exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts m...
Microsoft GDI+ CCITT G4 TIFF File Processing Memory Corruption Remote Code Execution Vulnerability
Description Microsoft GDI+ is prone to a remote code-execution vulnerability because the vector graphics link library improperly processes TIFF image files. This issue occurs when CCITT G4 compressed TIFF images are decompressed. An attacker could exploit this issue to execute arbitrary code with...
Microsoft GDI+ PNG File Processing Remote Code Execution Vulnerability
Description Microsoft GDI+ is prone to a remote code-execution vulnerability because the vector graphics link library improperly processes PNG image files. An attacker could exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts m...
Microsoft Visio Version Number Handling Code Execution (MS07-030; CVE-2007-0934)
Microsoft Visio is a diagramming application that is part of the Microsoft Office suite. Microsoft Office is a popular productivity application suite released by Microsoft Corporation. It includes a word processor, a spreadsheet application, a presentation editor, and a number of other applicatio...
Microsoft Visual Studio ATL 'VariantClear()' Remote Code Execution Vulnerability
Description Microsoft Visual Studio is prone to a remote code-execution vulnerability in the Active Template Library ATL. Remote attackers can exploit this issue to execute arbitrary code with the privileges of the user running an application built with the affected library. Technologies Affected...
Microsoft Visual Studio Active Template Library COM Object Remote Code Execution Vulnerability
Description Microsoft Visual Studio is prone to a remote code-execution vulnerability in the Active Template Library ATL. Remote attackers can exploit this issue to execute arbitrary code with the privileges of the user running an application built against the affected library. Failed exploit...
Microsoft Office Visio File Multiple Memory Corruptions (MS09-005; CVE-2009-0095; CVE-2009-0096; CVE-2009-0097)
Microsoft Visio is a diagram creation software for Microsoft Windows. Multiple remote code execution vulnerabilities have been reported in Microsoft Visio. A remote attacker could trigger these flaws by convincing the victim to open a specially crafted Visio file. Successful exploitation of these...
Office Visio多个内存破坏漏洞（MS09-005）
BUGTRAQ ID: 33659,33660,33661 CVECAN ID: CVE-2009-0095,CVE-2009-0096,CVE-2009-0097 Visio是微软Office套件中的图形编辑工具。 Microsoft Office Visio在打开Visio文件时验证对象数据、复制内存中的对象数据和处理内存的方式存在多个内存破坏漏洞。攻击者可能通过发送特制的文件来利用该漏洞，该文件可能作为电子邮件附件提供或者宿主在特制的或被破坏的网站上。...
Vulnerabilities in Microsoft Office Visio Could Allow Remote Code Execution (957634)
This host is missing a critical security update according to Microsoft Bulletin MS09-005. OpenVAS Vulnerability Test $Id: secpodms09-005.nasl 5346 2017-02-19 08:43:11Z cfi $ Vulnerabilities in Microsoft Office Visio Could Allow Remote Code Execution 957634 Authors: Chandan S Copyright c 2009...
Vulnerabilities in Microsoft Office Visio Could Allow Remote Code Execution (957634)
This host is missing a critical security update according to Microsoft Bulletin MS09-005. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Security Bulletin MS09-005 - Important Vulnerabilities in Microsoft Office Visio Could Allow Remote Code Execution (957634)
Microsoft Security Bulletin MS09-005 - Important Vulnerabilities in Microsoft Office Visio Could Allow Remote Code Execution 957634 Published: February 10, 2009 Version: 1.0 General Information Executive Summary This security update resolves three privately reported vulnerabilities in Microsoft...
Microsoft Visio multiple security vulnerabilities
Multiple memory corruptions...
MS09-005: Vulnerabilities in Microsoft Office Visio Could Allow Remote Code Execution (957634)
The remote host contains a version of Microsoft Visio that is affected by memory corruption and memory validation vulnerabilities triggered when parsing specially crafted Visio files that could be be abused to execute arbitrary code on the remote host. To exploit this vulnerability, an attacker...
Input validation
Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly validate object data in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Memory Validation Vulnerability."...
Memory corruption
Microsoft Office Visio 2002 SP2 and 2003 SP3 does not properly validate memory allocation for Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Memory Corruption Vulnerability."...
CVE-2009-0097
Microsoft Office Visio 2002 SP2 and 2003 SP3 does not properly validate memory allocation for Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Memory Corruption Vulnerability."...