1387 matches found
Microsoft Office巴西葡萄牙语语法检查器远程代码执行漏洞（MS07-001）
Microsoft Office是非常流行的办公软件套件。 Office 2003葡萄牙语（巴西）语法检查器中存在一个远程执行代码漏洞，远程攻击者可能利用此漏洞控制用户机器。 攻击者可以通过诱骗用户打开恶意文档来利用此漏洞，如果用户使用管理用户权限登录，成功利用此漏洞的攻击者便可完全控制受影响的系统。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。那些帐户被配置为拥有较少系统用户权限的用户比具有管理用户权限的用户受到的影响要小。 Microsoft Office 2003 SP2（巴西葡萄牙语版本） Microsoft Office Multilingual...
CVE-2006-5574
The CVE-2006-5574 entry concerns Office 2003 Brazilian Portuguese Grammar Checker vulnerability. A remote code execution flaw exists when the Office 2003 Brazilian Portuguese Grammar Checker parses text inside a file opened by the user, enabling an attacker to gain complete control if the user is...
Microsoft Office Brazilian Portuguese Grammar Checker Remote Code Execution Vulnerability
Description Microsoft Office is prone to a remote code-execution vulnerability. This issue occurs when the application processes certain Office files. Note that this issue may not be exploited automatically through email. For an attack to succeed, a victim must manually open an attachment sent by...
Microsoft Security Bulletin MS07-001 Vulnerability in Microsoft Office 2003 Brazilian Portuguese Grammar Checker Could Allow Remote Code Execution (921585)
Microsoft Security Bulletin MS07-001 Vulnerability in Microsoft Office 2003 Brazilian Portuguese Grammar Checker Could Allow Remote Code Execution 921585 Published: January 9, 2007 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Office 2003 Brazilian Portuguese...
CVE-2006-5574
Unspecified vulnerability in the Brazilian Portuguese Grammar Checker in Microsoft Office 2003 and the Multilingual Interface for Office 2003, Project 2003, and Visio 2003 allows user-assisted remote attackers to execute arbitrary code via crafted text that is not properly parsed...
linkscaffe30.txt
Gonafish.com LinksCaffe 3.0 is free link indexing directory, we found that the file admin1953.php can be accessed directly to get full administration rights without password and username. Proof of exploit: http://www.example.com/pathtolinksCaffe/Admin/admin1953.php Or the images of mirror...
DokuWiki: PHP code injection
Background DokuWiki is a simple to use wiki targeted at developer teams, workgroups and small companies. Description Stefan Esser discovered that the DokuWiki spell checker fails to properly sanitize PHP's "complex curly syntax". Impact A unauthenticated remote attacker may execute arbitrary PHP...
Immunity Canvas: DOKUWIKI_EXEC
Name| dokuwikiexec ---|--- CVE| CVE-2006-2878 Exploit Pack| CANVAS Description| DokuWiki Spell Checker Embedded Link Arbitrary PHP Code Execution Notes| CVE Name: CVE-2006-2878 VENDOR: DokuWiki Repeatability: Infinite References: 'http://www.hardened-php.net/advisory042006.119.html' CVSS: 7.5 DOR...
DSA-1035-1 fcheck - insecure temporary file
Bulletin has no description...
ReadDesign checker
This plugin checks for ReadDesign vulns on the remote web server. For more information, see: https://www.appsecinc.com/Policy/PolicyCheck1520.html OpenVAS Vulnerability Test $Id: readdesigncheck.nasl 6046 2017-04-28 09:02:54Z teissa $ Description: ReadDesign checker Authors: Hemil Shah Copyright:...
CVE-2002-1650
CVE-2002-1650 impacts SquirrelMail’s spell checker plugin (check_me.mod.php) in all releases before 1.2.3. The underlying issue is a flaw in handling the sqspell_command parameter, which allows remote attackers to execute arbitrary commands. The vulnerability enables remote code execution with ne...
CVE-2002-1650
The spell checker plugin checkme.mod.php for SquirrelMail before 1.2.3 allows remote attackers to execute arbitrary commands via a modified sqspellcommand parameter...
Fedora Core 3 : kernel-2.6.10-1.737_FC3 (2005-013)
This update rebases the kernel to match the upstream 2.6.10 release, and adds a number of security fixes by means of adding the latest -ac patch. CVE-2004-1235 Paul Starzetz from isec.pl found a problem in the binary format loaders uselib function that could lead to potential priveledge escalatio...
DSA-630-1 lintian - insecure temporary directory
Bulletin has no description...
CVE-2002-1650
The spell checker plugin checkme.mod.php for SquirrelMail before 1.2.3 allows remote attackers to execute arbitrary commands via a modified sqspellcommand parameter...
Security Bulletin MS02-002
---------------------------------------------------------------------- Title: Malformed Network Request can cause Office v. X for Mac to Fail Date: 06 February 2002 Software: Microsoft Office v. X for Mac Impact: Denial of Service Max Risk: Low Bulletin: MS02-002 Microsoft encourages customers to...
CVE-1999-0924
The CVE-1999-0924 entry concerns ColdFusion Server 4.0, where the Syntax Checker component is the vulnerable element. The issue enables remote denial of service. The connected documents reiterate the same description and do not provide explicit exploit vectors, affected build numbers beyond “4.0,...
fcheck prior to 2.07.59 - vulnerability - improper use of perl 'magic open'
VULNERABLE: Probably all versions prior to 2.07.59 - the author of fcheck can't be bothered to note security fixes in his change log, but most likely all prior versions had this vulnerability. Vulnerability: by placing a carefully crafted filename in a directory checked by vulnerable versions of...