8374 matches found
CVE-2014-4117
Microsoft Office 2007 SP3, Word 2007 SP3, Office 2010 SP1 and SP2, Word 2010 SP1 and SP2, Office for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP1 and SP2, and Word Web Apps 2010 Gold, SP1, and SP2 allow remote attackers to execute arbitrary code...
Format string
Microsoft Office 2007 SP3, Word 2007 SP3, Office 2010 SP1 and SP2, Word 2010 SP1 and SP2, Office for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP1 and SP2, and Word Web Apps 2010 Gold, SP1, and SP2 allow remote attackers to execute arbitrary code...
CVE-2014-4117
CVE-2014-4117 affects Microsoft Office and related components (Word 2007/2010, Office 2010, Office for Mac 2011, Word Web Apps, SharePoint) where remote code execution is possible via crafted Word document properties. Root cause: improper handling/parsing of Word file format elements allows arbit...
CVE-2014-4117: Improper Input Validation
Microsoft Office 2007 SP3, Word 2007 SP3, Office 2010 SP1 and SP2, Word 2010 SP1 and SP2, Office for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP1 and SP2, and Word Web Apps 2010 Gold, SP1, and SP2 allow remote attackers to execute arbitrary code...
MS14-061: Vulnerability in Microsoft Word and Office Web Apps Could Allow Remote Code Execution (3000434)
The remote Mac OS X host is running a version of Microsoft Word that is affected by a remote code execution vulnerability due to a flaw in parsing Word documents. This vulnerability can be triggered by tricking a user into opening a specially crafted Word document. TRUSTED...
MS14-061: Vulnerability in Microsoft Word and Office Web Apps Could Allow Remote Code Execution (3000434)
The remote Windows host has a version of Microsoft Office, Microsoft Word, Office Compatibility Pack, SharePoint Server, or Microsoft Office Web Apps that is affected by remote code execution vulnerability due to a flaw in parsing Word documents. This vulnerability can be triggered by tricking a...
Microsoft Office Web Apps Memory Corruption Vulnerability (3000434)
This host is missing an important security update according to Microsoft Bulletin MS14-061. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...
MS14-061: Vulnerability in Microsoft Word and Office Web Apps could allow remote code execution: October 14, 2014
This security update resolves a vulnerability in Microsoft Word that could allow remote code execution if an attacker convinces a user to open a specially crafted Microsoft Office file.INTRODUCTIONMicrosoft has released security bulletin MS14-061. To learn more about this security bulletin:Home...
The Snappening — Snapchat Hacker Threatens to Leak thousands of Images
The waves of celebrities photos have not yet stopped completely, and a new privacy threat has emerged exposing tens of thousands of private photographs and videos of innocent users are circulating over the Internet. The personal image that are believed to be sent through Snapchat — the ephemeral...
Apple iOS v7.1.2 - Merge Apps Service Local Bypass Vulnerability
Document Title: =============== Apple iOS v7.1.2 - Merge Apps Service Local Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1280 Video: http://www.vulnerability-lab.com/getcontent.php?id=1281 Vulnerability Magazine:...
How To Run Almost Any Android App On Windows, OS X, Linux with Chrome
From last week, Google began paving the way to run Android apps on Chrome Operating System through the project named "App Runtime for Chrome", but the release came with a lot of limitations – it only supported certain Android apps and on Chrome OS only. At the launch, initially only 4 Android app...
CVE-2014-4384
Directory traversal vulnerability in the App Installation feature in Apple iOS before 8 allows local users to install unverified apps by triggering code-signature validation of an unintended bundle...
CVE-2014-4386
Race condition in the App Installation feature in Apple iOS before 8 allows local users to gain privileges and install unverified apps by leveraging /tmp write access...
Race condition
Race condition in the App Installation feature in Apple iOS before 8 allows local users to gain privileges and install unverified apps by leveraging /tmp write access...
Directory traversal
Directory traversal vulnerability in the App Installation feature in Apple iOS before 8 allows local users to install unverified apps by triggering code-signature validation of an unintended bundle...
CVE-2014-4384
Directory traversal vulnerability in the App Installation feature in Apple iOS before 8 allows local users to install unverified apps by triggering code-signature validation of an unintended bundle...
CVE-2014-4384
CVE-2014-4384 affects iOS App Installation (Apple) and describes a path traversal in the App Installation workflow. A local attacker could retarget code signature validation to a different bundle during installation, allowing the installation of an unverified app. Apple’s advisory notes the issue...
PT-2014-5851
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8 Description A directory traversal issue exists in the App Installation feature, allowing local users to install unverified apps. This is achieved by triggering code-signature validation of an unintended bundle...
CVE-2014-4384: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the App Installation feature in Apple iOS before 8 allows local users to install unverified apps by triggering code-signature validation of an unintended bundle...
WordPress Mobile Pack 1.0.8223 - 2.0.1 Password Protected Post Disclosure
The WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps WordPress plugin was affected by a 2.0.1 Password Protected Post Disclosure security vulnerability...