6106 matches found
Microsoft Office Word 2007 Multiple Vulnerabilities
No description provided by source. Mati Aharoni muts .@. offensive-security.com http://www.offensive-security.com My 7 line python fuzzer found several file format bugs in 3 hours. Quite alarming. No deep analysis was done, I leave that to the community. These are some of the results: ...
Microsoft Word 2007 - Multiple Vulnerabilities
Microsoft Word 2007 - Multiple Vulnerabilities Mati Aharoni muts .@. offensive-security.com http://www.offensive-security.com My 7 line python fuzzer found several file format bugs in 3 hours. Quite alarming. No deep analysis was done, I leave that to the community. These are some of the results:...
Microsoft Office Word 2007 Multiple Vulnerabilities
Exploit for unknown platform in category dos / poc =================================================== Microsoft Office Word 2007 Multiple Vulnerabilities =================================================== Mati Aharoni muts email protected offensive-security.com http://www.offensive-security.com...
[Full-disclosure] Some 0day Pocs
Mati Aharoni muts .@. offensive-security.com mailto:[email protected] http://www.offensive-security.com My 7 line python fuzzer found several file format bugs in 3 hours. Quite alarming. No deep analysis was done, I leave that to the community. These are some of the results: file789-1.d...
Microsoft Word 2007 - Multiple Vulnerabilities
Mati Aharoni muts .@. offensive-security.com http://www.offensive-security.com My 7 line python fuzzer found several file format bugs in 3 hours. Quite alarming. No deep analysis was done, I leave that to the community. These are some of the results: file789-1.doc - Unspecified Overflow in word...
[SECURITY] Fedora Core 5 Update: openoffice.org-2.0.2-5.21.2
OpenOffice.org is an Open Source, community-developed, multi-platform office productivity suite. It includes the key desktop applications, such as a word processor, spreadsheet, presentation manager, formula editor and drawing program, with a user interface and feature set similar to other office...
[SECURITY] Fedora Core 6 Update: libwpd-0.8.9-1.fc6
Library that handles Word Perfect documents...
[SECURITY] Fedora Core 5 Update: libwpd-0.8.9-1.fc5
Library that handles Word Perfect documents...
Mandrake Linux Security Advisory : libwpd (MDKSA-2007:063)
iDefense reported several overflow bugs in libwpd. An attacker could create a carefully crafted Word Perfect file that could cause an application linked with libwpd, such as OpenOffice, to crash or possibly execute arbitrary code if the file was opened by a victim. Updated packages have been...
libwpd /OpenOffice / AbiWord multiple security vulnerabilities
Multiple buffer overflows on Word Perfect documents parsing...
Important: Red Hat Security Advisory: libwpd security update
Updated libwpd packages to correct a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. libwpd is a library for reading and converting Word Perfect documents. iDefense reported...
Microsoft Word畸形字符串远程代码执行漏洞(MS07-014)
Microsoft Word是微软发布的非常流行的文字处理办公软件。 Microsoft Word在处理文档中的畸形字符串时存在漏洞，远程攻击者可能利用此漏洞通过诱使用户打开恶意文档控制用户机器。 如果用户受骗打开了恶意的Word文档的话，则在解析文档中畸形字符串时就会触发内存破坏，导致执行任意指令。 Microsoft Word 2004 for Mac Microsoft Word 2003 Microsoft Word 2002 Microsoft Word 2000 临时解决方法： 不要打开不可信任来源的WORD文档。 厂商补丁： Microsoft ---------...
Microsoft Word畸形数据结构远程代码执行漏洞(MS07-014)
Microsoft Word是微软发布的非常流行的文字处理办公软件。 Microsoft Word在处理带有畸形数据结构的恶意文档时存在漏洞，远程攻击者可能利用此漏洞通过诱使用户打开恶意文档控制用户机器。 如果用户受骗打开了恶意的Word文档的话，则在解析文档中畸形数据结构时就会触发缓冲区溢出，导致执行任意指令。目前这个漏洞正在被名为Trojan.Mdropper.X木马积极的利用。 Microsoft Word Viewer 2003 Microsoft Word 2004 for Mac Microsoft Word 2003 Microsoft Word 2002 Microsof...
Microsoft Word宏权限绕过任意代码执行漏洞(MS07-014)
Microsoft Word是微软发布的非常流行的文字处理办公软件。 Microsoft Word修改文档中的修改属性时存在漏洞，远程攻击者可能利用此漏洞在用户机器上执行恶意代码。 Word没有正确地检查被修改文档中的属性，导致当文档中存在宏的时候可能不会对用户提示宏安全警告，这样用户就可能错误的打开危险的Word文档。 Microsoft Word 2004 for Mac Microsoft Word 2003 Microsoft Word 2002 临时解决方法： 不要打开不可信任来源的WORD文档。 厂商补丁： Microsoft ---------...
Microsoft Word畸形绘图对象任意代码执行漏洞(MS07-014)
Microsoft Word是微软发布的非常流行的文字处理办公软件。 Microsoft Word在处理文档中畸形绘图对象时存在漏洞，远程攻击者可能利用此漏洞控制用户机器。 Word在处理文件内容时没有执行充分的数据验证，如果打开了特制Word文件并解析其中的畸形绘图对象时，就会破坏系统内存，导致执行任意代码。 Microsoft Word 2004 for Mac Microsoft Word 2002 Microsoft Word 2000 临时解决方法： 不要打开不可信任来源的WORD文档。 厂商补丁： Microsoft ---------...
Microsoft Windows OLE32.DLL Word文档处理拒绝服务漏洞
Microsoft Windows是微软发布的非常流行的操作系统。 Windows的OLE32.DLL库处理畸形DOC文档时存在漏洞，可能导致资源器在访问文档时发生崩溃。 Windows的OLE32.DLL库在处理包含有超大文件大小值的.doc文档时存在错误的指针应用。用户不必打开恶意的文档，只要将光标移动至该文档的图标就会导致资源管理器崩溃。 Microsoft Windows XP SP2 Microsoft Windows 2000SP4 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
Word Press Sensitive Directory exposure (SQL)
Found By: r00tati Web App: Word Press Versions: unknown Level: low File Name: admin-functions.php //SQL EXAMPLE ERROR: Fatal error: Call to undefined function in /usr/local/www//data/wp-admin/admin-functions.php on line 1593 Thanks, r00t...
Word 格式错误的字符串漏洞(MS07-014)
在 Microsoft Word 以一个特制的字符串处理 Word 文件的方式中存在一个远程执行代码漏洞。 此类特制文件可能包括在电子邮件附件中或宿主在恶意网站上。 攻击者可以通过构建特制的 Word 文件来利用此漏洞，此文件可能允许远程执行代码。 Microsoft Office 2000 Service Pack 3 Microsoft Word 2000 Microsoft Office XP Service Pack 3 Microsoft Word 2002 Microsoft Office 2003 Service Pack 2 Microsoft Word 2003...
Word 格式错误的功能漏洞(MS07-014)
Microsoft Word 中存在一个远程执行代码漏洞。 当 Word 分析文件和处理格式错误功能时，攻击者可以利用此漏洞。 此类特制文件可能包括在电子邮件附件中或宿主在恶意网站上。 在受影响的 Outlook 版本中查看或预览格式错误的电子邮件不会导致利用此漏洞。 攻击者可以通过构建特制的 Word 文件来利用此漏洞，此文件可能允许远程执行代码。 Microsoft Office 2000 Service Pack 3 Microsoft Word 2000 Microsoft Office XP Service Pack 3 Microsoft Word 2002 Microsof...
WMF File Denial Of Service
WMF File Denial Of Service Программа "Microsoft Office Word 2003" подвисает при вставке спецрисункаиз файла в формате WMF Программа "IrfanView" подвисает при открытии файла формата WMF Протестированно: Microsoft Office Word 2003 11.6568.8122 SP2 IrfanView 3.99 Windows XP SP2...