Lucene search
K

486 matches found

0day.today
0day.today
added 2012/06/20 12:0 a.m.54 views

Adobe Flash Player AVM Verification Logic Array Indexing Code Execution

Exploit for windows platform in category remote exploits $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require...

7.1AI score0.86421EPSS
Exploits11
Exploit DB
Exploit DB
added 2012/06/20 12:0 a.m.48 views

Adobe Flash Player - AVM Verification Logic Array Indexing Code Execution (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Adobe Flash Player AVM...

10CVSS8.8AI score0.86421EPSS
Exploits11
Zero Day Initiative
Zero Day Initiative
added 2011/10/13 12:0 a.m.42 views

Adobe Reader Compound Glyphs Array Indexing Error Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Adobe Reade...

7.5CVSS2.2AI score0.07964EPSS
Exploits1References1
NVD
NVD
added 2011/09/15 12:26 p.m.19 views

CVE-2011-1990

Microsoft Excel 2007 SP2; Excel in Office 2007 SP2; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and Excel Services on Office SharePoint Server 2007 SP2 do not properly validate the sign of an unspecified array index, which allows remote...

9.3CVSS7.5AI score0.20486EPSS
Exploits0References3
Prion
Prion
added 2011/09/15 12:26 p.m.19 views

Out-of-bounds

Microsoft Excel 2007 SP2; Excel in Office 2007 SP2; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and Excel Services on Office SharePoint Server 2007 SP2 do not properly validate the sign of an unspecified array index, which allows remote...

9.3CVSS8AI score0.20486EPSS
Exploits0References3Affected Software4
OpenVAS
OpenVAS
added 2011/09/14 12:0 a.m.40 views

Microsoft Office Excel Remote Code Execution Vulnerabilities (2587505)

This host is missing an important security update according to Microsoft Bulletin MS11-072. OpenVAS Vulnerability Test $Id: secpodms11-072.nasl 6523 2017-07-04 15:46:12Z cfischer $ Microsoft Office Excel Remote Code Execution Vulnerabilities 2587505 Authors: Madhuri D Copyright: Copyright c 2011...

9.3CVSS0.9AI score0.27767EPSS
Exploits2References5
OpenVAS
OpenVAS
added 2011/09/14 12:0 a.m.31 views

Microsoft Office Excel Remote Code Execution Vulnerabilities (2587505)

This host is missing an important security update according to Microsoft Bulletin MS11-072. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

9.3CVSS4.9AI score0.27767EPSS
Exploits2References9
Symantec
Symantec
added 2011/09/13 12:0 a.m.17 views

Microsoft Excel Array Indexing 'iax' Field Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers could exploit this issue by enticing victims to open a maliciously crafted Excel file. Successful exploits will allow attackers to execute arbitrary code with the privileges of the user running the applicatio...

0.1AI score
Exploits0References1Affected Software3
OpenVAS
OpenVAS
added 2011/08/09 12:0 a.m.19 views

CentOS Update for gstreamer-plugins CESA-2009:0269 centos3 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

9.3CVSS5.2AI score0.0319EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2011/06/16 12:0 a.m.29 views

SuSE 11.1 Security Update : flash-player (SAT Patch Number 4715)

A critical vulnerability has been identified in Adobe Flash Player 10.3.181.23 and earlier versions for Windows, Macintosh, Linux and Solaris, and Adobe Flash Player 10.3.185.23 and earlier versions for Android. This memory corruption vulnerability CVE-2011-2110 could cause a crash and potentiall...

10CVSS5.5AI score0.86421EPSS
Exploits11References3
securityvulns
securityvulns
added 2011/04/14 12:0 a.m.38 views

Vulnerabilities in Microsoft Reader and HIS

Microsoft Reader is a PC/tablet software for reading the ebooks in LIT format and the Audible audio books. The following are a couple of integer overflows, an heap and an array indexing overflow and the writing of a NULL byte in an arbitrary memory location: http://aluigi.org/adv/msreader1-adv.tx...

1.1AI score
Exploits0
Prion
Prion
added 2011/02/10 7:0 p.m.14 views

Stack overflow

Stack-based buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via vectors related to an axis properties...

9.3CVSS8.5AI score0.42562EPSS
Exploits5References10Affected Software4
OpenVAS
OpenVAS
added 2011/01/31 12:0 a.m.26 views

VLC Media Player 'CDG decoder' multiple buffer overflow vulnerabilities (Linux)

The host is installed with VLC Media Player and is prone multiple buffer overflow vulnerabilities. OpenVAS Vulnerability Test $Id: gbvlcmediaplayerbofvulnjan11lin.nasl 7019 2017-08-29 11:51:27Z teissa $ VLC Media Player 'CDG decoder' multiple buffer overflow vulnerabilities Linux Authors: Madhuri...

9.3CVSS0.5AI score0.05773EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2011/01/31 12:0 a.m.32 views

VLC Media Player 'CDG decoder' Multiple Buffer Overflow Vulnerabilities - Windows

VLC Media Player is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

9.3CVSS7.9AI score0.05773EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2011/01/08 12:0 a.m.28 views

VLC Media Player Real Demuxer File Handling Array Indexing Vulnerabilities (Windows)

This host is installed with VLC media player and is prone to array indexing vulnerabilities. OpenVAS Vulnerability Test $Id: gbvlcmediaplayermultbofvulnwin.nasl 8174 2017-12-19 12:23:25Z cfischer $ VLC Media Player Real Demuxer File Handling Array Indexing Vulnerabilities Windows Authors: Antu...

9.3CVSS0.8AI score0.05773EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2011/01/08 12:0 a.m.33 views

VLC Media Player Real Demuxer File Handling Array Indexing Vulnerabilities - Windows

VLC media player is prone to array indexing vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

9.3CVSS9.3AI score0.05773EPSS
Exploits0References3
Prion
Prion
added 2010/12/16 7:33 p.m.17 views

Design/Logic Flaw

The OpenType Font OTF driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly perform array indexing, which allows local users to gain privileges via a crafted OpenType font, aka "OpenTy...

9.3CVSS6.7AI score0.08274EPSS
Exploits0References4Affected Software3
Prion
Prion
added 2010/12/16 7:33 p.m.16 views

Memory corruption

pubconv.dll aka the Publisher Converter DLL in Microsoft Publisher 2002 SP3 does not properly perform array indexing, which allows remote attackers to execute arbitrary code via a crafted Publisher file that uses an old file format, aka "Array Indexing Memory Corruption Vulnerability."...

9.3CVSS7.9AI score0.18927EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2010/12/16 7:0 p.m.17 views

CVE-2010-3955

pubconv.dll aka the Publisher Converter DLL in Microsoft Publisher 2002 SP3 does not properly perform array indexing, which allows remote attackers to execute arbitrary code via a crafted Publisher file that uses an old file format, aka "Array Indexing Memory Corruption Vulnerability."...

7.4AI score0.18927EPSS
Exploits0References4
CVE
CVE
added 2010/12/16 7:0 p.m.134 views

CVE-2010-3956

CVE-2010-3956 concerns the OpenType Font (OTF) driver in multiple Windows platforms (XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 Gold/SP2/R2, and Windows 7). The vulnerability arises from an error in indexing an array when parsing OpenType fonts, enabling a local privilege escalation....

9.3CVSS6.3AI score0.08274EPSS
Exploits0References4Affected Software6
Rows per page
Query Builder