5702 matches found
[SECURITY] Fedora 19 Update: libreoffice-4.1.0.3-2.fc19
LibreOffice is an Open Source, community-developed, office productivity sui te. It includes the key desktop applications, such as a word processor, spreadsheet, presentation manager, formula editor and drawing program, with a user interface and feature set similar to other office suites...
Oracle Outside In vulnerable to denial-of-service (DoS)
Overview Oracle Outside In is a library to decode over 500 file types. Oracle Outside In contains a denial-of-service DoS vulnerability. Takahiro Haruyama of Internet Initiative Japan Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Earl...
JVN#07497769: Oracle Outside In vulnerable to buffer overflow
Oracle Outside In is a library to decode over 500 file types. Oracle Outside In contains a buffer overflow vulnerability. Impact When Oracle Outside In processes a specially crafted Ichitaro Word Processor file, arbitrary code may be executed. Solution Apply an update Update to the latest version...
JVN#68663052: Oracle Outside In vulnerable to denial-of-service (DoS)
Oracle Outside In is a library to decode over 500 file types. Oracle Outside In contains a denial-of-service DoS vulnerability. Impact When Oracle Outside In processes a specially crafted Hangul Word Processor file, the process may hang. Solution Apply an update Update to the latest version...
Oracle Linux 3 / 4 : openoffice.org (ELSA-2009-1426)
From Red Hat Security Advisory 2009:1426 : Updated openoffice.org packages that correct security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office...
NetTraveler Attackers Using PRISM Program as Bait
Never let it be said that attackers don’t keep up with the news. The crew behind the NetTraveler cyberespionage attacks is now using the news about the NSA’s PRISM surveillance program as bait in a new spear-phishing campaign. Security researcher Brandon Dixon of 9bplus came across a malicious...
WPA Cluster Cracker: Moscrack
Moscrack WPA Cluster Cracker Moscrack facilitates the use of a WPA cracker on a cluster. Currently it works with Mosix clustering software, SSH, RSH and Pyrit. It works by reading a word list from STDIN or a file, breaking it into chunks and passing those chunks off to seperate processes that run...
CVE-2013-1335
Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code via crafted shape data in a Word document, aka "Word Shape Corruption Vulnerability."...
Memory corruption
Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code via crafted shape data in a Word document, aka "Word Shape Corruption Vulnerability."...
CVE-2013-1335
CVE-2013-1335 affects Microsoft Word 2003 SP3 and Word Viewer, where parsing of crafted shape data in Word documents can lead to remote code execution. The root cause is a memory-corruption/shape-data handling issue used to execute arbitrary code when a user opens a malicious Word file. Impact is...
CVE-2013-1335
Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code via crafted shape data in a Word document, aka "Word Shape Corruption Vulnerability."...
Microsoft Office Word Remote Code Execution Vulnerability (2830399)
This host is missing a important security update according to Microsoft Bulletin MS13-043. OpenVAS Vulnerability Test $Id: secpodwinwordms13-043.nasl 6065 2017-05-04 09:03:08Z teissa $ Microsoft Office Word Remote Code Execution Vulnerability 2830399 Authors: Antu Sanadi Copyright: Copyright c 20...
MS13-043: Vulnerability in Microsoft Word Could Allow Remote Code Execution (2830399)
The version of Office and/or Microsoft Word Viewer installed on the remote host is affected by a remote code execution vulnerability due to the way that Microsoft Word parses content in Word files. To exploit this issue, an attacker would need to trick a user into opening a specially crafted file...
Microsoft Office Wordview Remote Code Execution Vulnerability (2830399)
This host is missing a important security update according to Microsoft Bulletin MS13-043. OpenVAS Vulnerability Test $Id: secpodwinwordviewms13-043.nasl 6079 2017-05-08 09:03:33Z teissa $ Microsoft Office Wordview Remote Code Execution Vulnerability 2830399 Authors: Antu Sanadi Copyright:...
Microsoft Office Word Remote Code Execution Vulnerability (2830399)
This host is missing an important security update according to Microsoft Bulletin MS13-043. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Security Update for Word 2003 (KB2810046)
A security vulnerability exists in Word 2003 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Microsoft Word CVE-2013-1335 Remote Code Execution Vulnerability
Description Microsoft Word is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user, which can lead to a complete compromise of the affected computer. Technologies Affected Microsoft Office 2003...
Stealthy BaneChant Trojan Lurks in Word File, Relies on Multiple Mouse Clicks
Much like malware that was discovered last year, a new Trojan has been reported that relies on detecting mouse clicks to evade sandbox analysis. BaneChant masquerades as a Word document and incorporates advanced evasion techniques making it stealthier than its predecessor. Researchers at FireEye...
Windows Gather Microsoft Office Word UNC Path Injector
This module modifies a remote .docx file that will, upon opening, submit stored netNTLM credentials to a remote host. Verified to work with Microsoft Word 2003, 2007, 2010, and 2013. In order to get the hashes the auxiliary/server/capture/smb module can be used. This module requires Metasploit:...
