Microsoft GDI+ GIF File Parsing Remote Code Execution Vulnerability

Description Microsoft GDI+ is prone to a remote code-execution vulnerability because the vector graphics link library improperly parses GIF image files. An attacker could exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts may...

Microsoft Office Products Detection (Windows SMB Login)

SMB login-based detection of Microsoft Office Products. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Multiple Vendors Malicious SVG File Denial of Service PoC

Exploit for multiple platform in category dos / poc ========================================================= Multiple Vendors Malicious SVG File Denial of Service PoC ========================================================= """ Malicious SVG file DoS The following applications were tested in...

Mozilla FirefoxEvinceEOGGimp - .SVG Denial of Service (PoC)

Mozilla FirefoxEvinceEOGGimp - .SVG Denial of Service PoC """ Malicious SVG file DoS The following applications were tested in their latest revisions: Firefox's "browse for file, preview" object on linux: affected evince on linux: affected eog on linux: affected gimp on linux: affected inkscape o...

Microsoft Visio多个远程代码执行漏洞（MS08-019）

BUGTRAQ ID: 28555,28556 CVECAN ID: CVE-2008-1089,CVE-2008-1090 Visio是微软Office套件中的图形编辑工具。 Microsoft Visio在打开Visio文件时没有正确地验证对象头数据，在从磁盘将特制的.DXF文件加载到内存时没有正确地验证内存分配。如果用户受骗打开了畸形文档，就可能触发这些漏洞，导致执行任意指令。 Microsoft Visio 2007 SP1 Microsoft Visio 2007 Microsoft Visio 2003 SP3 Microsoft Visio 2003 SP2 Microso...

CVE-2008-1089

Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute arbitrary code via a Visio file containing crafted object header data, aka "Visio Object Header Vulnerability."...

Input validation

Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute arbitrary code via a crafted .DXF file, aka "Visio Memory Validation Vulnerability."...

Spoofing

Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute arbitrary code via a Visio file containing crafted object header data, aka "Visio Object Header Vulnerability."...

CVE-2008-1090

Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute arbitrary code via a crafted .DXF file, aka "Visio Memory Validation Vulnerability."...

CVE-2008-1089

Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute arbitrary code via a Visio file containing crafted object header data, aka "Visio Object Header Vulnerability."...

CVE-2008-1089

CVE-2008-1089 (Visio Object Header Vulnerability) affects Microsoft Visio 2002 SP2, 2003 SP2/SP3, and 2007 up to SP1. The flaw stems from improper validation of object header data when opening Visio files, which could allow a remote attacker to execute arbitrary code on a vulnerable system. Explo...

CVE-2008-1090

Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute arbitrary code via a crafted .DXF file, aka "Visio Memory Validation Vulnerability."...

CVE-2008-1090

CVE-2008-1090 is a Visio memory validation vulnerability in Microsoft Visio 2002 SP2, 2003 SP2/SP3, and 2007 up to SP1. A remote attacker could exploit memory allocation handling when loading specially crafted .DXF files from disk, leading to remote code execution if a user opens the file. The vu...

Security Update for Microsoft Office Visio 2003 (KB947650)

A security vulnerability exists in Microsoft Office Visio 2003 that could allow arbitrary code to run when a maliciously modified file is opened.This update resolves the vulnerability so that documents are handled appropriately...

Security Update for Microsoft Visio 2002 (KB947896)

A security vulnerability exists in Microsoft Visio 2002 that could allow arbitrary code to run when a maliciously modified file is opened.This update resolves the vulnerability so that documents are handled appropriately...

Microsoft Security Bulletin MS08-019 – Important Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution (949032)

Microsoft Security Bulletin MS08-019 – Important Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution 949032 Published: April 8, 2008 Version: 1.0 General Information Executive Summary This security update resolves privately reported vulnerabilities in Microsoft Office Visio that...

Microsoft Visio Object Header Remote Code Execution Vulnerability

Description Microsoft Visio is prone to a remote code-execution vulnerability because it fails to adequately handle user-supplied data. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Failed exploit attempts will result in a...

Workaround for Multiple Microsoft Visio Vulnerabilities (MS08-019)

Multiple remote code execution vulnerabilities have been reported in Microsoft Visio. Microsoft Visio is a diagram creation software for Microsoft Windows. A remote attacker can exploit these vulnerabilities via a specially crafted Visio file. Successful exploitation may allow execution of...

Microsoft Visio multiple security vulnerabilities

Memory corruption and code execution on files parsing...

Microsoft Visio Memory Validation Remote Code Execution Vulnerability

Description Microsoft Visio is prone to a remote code-execution vulnerability because it fails to adequately handle user-supplied data. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Failed exploit attempts will result in a...