Lucene search
K

486 matches found

0day.today
0day.today
added 2010/04/02 12:0 a.m.50 views

Google Chrome 4.1 OOB Array Indexing Bug

Exploit for windows platform in category dos / poc ======================================== Google Chrome 4.1 OOB Array Indexing Bug ======================================== Author: Tobias Klein tk at trapkit.de Affected Software: Google Chrome = 4.1.249.1042 Build 42199 Remotely Exploitable: Yes...

7AI score
Exploits0
exploitpack
exploitpack
added 2010/04/02 12:0 a.m.20 views

Google Chrome 4.1 - Out-of-Bounds Array Indexing

Google Chrome 4.1 - Out-of-Bounds Array Indexing -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: Google Chrome OOB Array Indexing Bug Advisory ID: TKADV2010-004 Revision: 1.0 Release Date: 2010/03/31 Last Modified: 2010/03/31 Date Reported: 2010/03/21 Author: Tobias Klein tk at trapkit.de...

0.4AI score
Exploits0
Exploit DB
Exploit DB
added 2010/04/02 12:0 a.m.32 views

Google Chrome 4.1 - Out-of-Bounds Array Indexing

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: Google Chrome OOB Array Indexing Bug Advisory ID: TKADV2010-004 Revision: 1.0 Release Date: 2010/03/31 Last Modified: 2010/03/31 Date Reported: 2010/03/21 Author: Tobias Klein tk at trapkit.de Affected Software: Google Chrome = 4.1.249.1042...

7.4AI score
Exploits0
OpenVAS
OpenVAS
added 2010/02/10 12:0 a.m.29 views

Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (975416)

This host is missing a critical security update according to Microsoft Bulletin MS10-004. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

9.3CVSS5AI score0.79579EPSS
Exploits18References10
OpenVAS
OpenVAS
added 2010/02/10 12:0 a.m.26 views

Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (975416)

This host is missing a critical security update according to Microsoft Bulletin MS10-004. OpenVAS Vulnerability Test $Id: secpodms10-004.nasl 6538 2017-07-05 11:38:27Z cfischer $ Microsoft Office PowerPoint Remote Code Execution Vulnerabilities 975416 Authors: Antu Sanadi Copyright: Copyright c...

9.3CVSS0.6AI score0.79579EPSS
Exploits18References4
Check Point Advisories
Check Point Advisories
added 2010/02/09 12:0 a.m.2 views

Microsoft PowerPoint OEPlaceholderAtom Arbitrary Array Indexing (MS10-004; CVE-2010-0031; CVE-2010-0032)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. Multiple remote code execution vulnerabilities have been identified in Microsoft PowerPoint. The vulnerabilities are due to an invalid array indexing and to a use after free error in Microsoft PowerPoint...

9.3CVSS7.6AI score0.57317EPSS
Exploits7
Symantec
Symantec
added 2009/06/09 12:0 a.m.13 views

Microsoft Excel Array Indexing Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers may exploit this issue by enticing victims into opening a maliciously crafted Excel file. Successful exploits may allow attackers to execute arbitrary code with the privileges of the user running the...

0.1AI score
Exploits0Affected Software2
Prion
Prion
added 2009/05/12 10:30 p.m.18 views

Memory corruption

Microsoft Office PowerPoint 2002 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format, leading to improper "array indexing" and memory corruption, aka "PP7 Memory Corruption Vulnerability."...

9.3CVSS8AI score0.5571EPSS
Exploits2References9Affected Software1
ATTACKERKB
ATTACKERKB
added 2009/05/12 10:30 p.m.3 views

CVE-2009-0225

Microsoft Office PowerPoint 2002 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format, leading to improper "array indexing" and memory corruption, aka "PP7 Memory Corruption Vulnerability."...

9.3CVSS6AI score0.5571EPSS
Exploits2References10
OpenVAS
OpenVAS
added 2009/04/06 12:0 a.m.29 views

Mandrake Security Advisory MDVSA-2009:086 (gstreamer-plugins)

The remote host is missing an update to gstreamer-plugins announced via advisory MDVSA-2009:086. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

9.3CVSS6.4AI score0.00674EPSS
Exploits1References1
OpenVAS
OpenVAS
added 2009/02/10 12:0 a.m.27 views

RedHat Security Advisory RHSA-2009:0271

The remote host is missing updates announced in advisory RHSA-2009:0271. GStreamer is a streaming media framework, based on graphs of filters which operate on media data. GStreamer Good Plug-ins is a collection of well-supported, GStreamer plug-ins of good quality released under the LGPL license...

9.3CVSS6.6AI score0.17875EPSS
Exploits3References2
Tenable Nessus
Tenable Nessus
added 2009/02/09 12:0 a.m.30 views

RHEL 5 : gstreamer-plugins-good (RHSA-2009:0271)

Updated gstreamer-plugins-good packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. GStreamer is a streaming media framework, based on graphs of filters whi...

9.3CVSS6.2AI score0.17875EPSS
Exploits3References7
RedHat Linux
RedHat Linux
added 2009/02/06 12:42 p.m.30 views

Important: Red Hat Security Advisory: gstreamer-plugins-good security update

Updated gstreamer-plugins-good packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. GStreamer is a streaming media framework, based on graphs of filters whi...

9.3CVSS6AI score0.17875EPSS
Exploits3References4
securityvulns
securityvulns
added 2008/12/10 12:0 a.m.69 views

Secunia Research: Microsoft Excel NAME Record Array Indexing Vulnerability

====================================================================== Secunia Research 09/12/2008 - Microsoft Excel NAME Record Array Indexing Vulnerability - ====================================================================== Table of Contents Affected...

9.3CVSS0.1AI score0.5929EPSS
Exploits1
OpenVAS
OpenVAS
added 2008/09/24 12:0 a.m.10 views

Gentoo Security Advisory GLSA 200804-17 (speex)

The remote host is missing updates announced in advisory GLSA 200804-17. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS6.6AI score0.05935EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2008/09/24 12:0 a.m.9 views

Gentoo Security Advisory GLSA 200708-02 (xvid)

The remote host is missing updates announced in advisory GLSA 200708-02. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS7.1AI score0.06293EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2008/09/24 12:0 a.m.22 views

Gentoo Security Advisory GLSA 200804-17 (speex)

The remote host is missing updates announced in advisory GLSA 200804-17. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

9.3CVSS0.3AI score0.05935EPSS
Exploits1
securityvulns
securityvulns
added 2008/08/13 12:0 a.m.49 views

iDefense Security Advisory 08.12.08: Microsoft Excel FORMAT Record Invalid Array Index Vulnerability

iDefense Security Advisory 08.12.08 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 12, 2008 I. BACKGROUND Microsoft Excel is the spreadsheet application that is included with Microsoft Corp.'s Office productivity software suite. More information is available at the following website...

9.3CVSS6.8AI score0.54907EPSS
Exploits5
Gentoo Linux
Gentoo Linux
added 2008/04/17 12:0 a.m.16 views

Speex: User-assisted execution of arbitrary code

Background Speex is an audio compression format designed for speech that is free of patent restrictions. Description oCERT reported that the Speex library does not properly validate the "mode" value it derives from Speex streams, allowing for array indexing vulnerabilities inside multiple player...

9.3CVSS7.2AI score0.05935EPSS
Exploits1
securityvulns
securityvulns
added 2008/03/25 12:0 a.m.56 views

[Full-disclosure] CVE-2008-0073 - MPlayer and VLC "sdpplin_parse()" Array Indexing Vulnerability

Hello, CVE-2008-0073 apply also to MPlayer and VLC. -MPlayer-1.0-rc2, stream/realrtsp/sdpplin.c: 161: desc-streamid=atoibuf; 283: desc-streamstream-streamid=stream; - vlc-0.8.6e, modules/access/rtsp/realsdpplin.c: 141: desc-streamid=atoibuf; 257: desc-streamstream-streamid=stream; With MPlayer: e...

6.8CVSS0.9AI score0.01773EPSS
Exploits6
Rows per page
Query Builder