The vulnerability of the Microsoft Excel Viewer, a spreadsheet viewer, and the Microsoft Excel spreadsheet editor, as well as the Microsoft Office Compatibility Pack, allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Excel Viewer, a spreadsheet viewer, and the Microsoft Excel spreadsheet editor, as well as the Microsoft Office Compatibility Pack, is caused by buffer overflow. Exploitation of this vulnerability can allow an attacker to execute arbitrary code using a specially...

Google Chrome Cross-Site Scripting Vulnerability (CNVD-2015-08389)

Google Chrome is a simple and efficiently designed web browsing tool developed by Google. A cross-site scripting vulnerability exists in versions of Google Chrome prior to 47.0.2526.80. It allows remote attackers to inject arbitrary web script or HTML crafted documents via crafted documents...

libreoffice: Arbitrary file disclosure in Calc and Writer

It was discovered that LibreOffice did not properly restrict automatic link updates. By tricking a victim into opening specially crafted documents, an attacker could possibly use this flaw to disclose contents of files accessible by the victim...

chromium-browser: Escaping issue in saved pages

The WebPageSerializerImpl::openTagToString function in WebKit/Source/web/WebPageSerializerImpl.cpp in the page serializer in Google Chrome before 47.0.2526.80 does not properly use HTML entities, which might allow remote attackers to inject arbitrary web script or HTML via a crafted document, as...

Microsoft Word Arbitrary Code Execution Vulnerability (CNVD-2015-07571)

Microsoft Word is a word processing tool in the Office suite of software from Microsoft. Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Office Compatibility Pack SP3,Word Viewer version suffers from an arbitrary code execution The vulnerabilit...

Apple iWork Memory Corruption Vulnerability (CNVD-2015-06782)

Apple iWork is an office software suite for OS X and iOS operating systems. A security vulnerability exists in Apple iWork versions prior to 2.6, Apple Pages versions prior to 5.6, Apple Keynote versions prior to 6.6, and Apple Numbers versions prior to 3.6. A remote attacker could exploit this...

CVE-2015-7032

The Apple iWork application before 2.6 for iOS, Apple Keynote before 6.6, Apple Pages before 5.6, and Apple Numbers before 3.6 allow remote attackers to obtain sensitive information via a crafted document...

The vulnerabilities of Microsoft Excel editors, the Microsoft Office Compatibility Pack, and the Microsoft Excel Viewer allow a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Excel editors, the Microsoft Office Compatibility Pack, and the Microsoft Excel Viewer are caused by buffer overflow attacks. Exploitation of this vulnerability can allow a malicious actor to execute arbitrary code using a specially crafted document...

GNU troff contrib/pdfmark/pdfroff.sh design error vulnerability

Groff GNU Troff is the latest open source implementation of Troff, a document preparation system that generates print and screen documents from the same input source for a variety of devices. GNU troff groff versions prior to 1.21 in contrib/pdfmark/pdfroff.sh starts the Ghostscript program witho...

Microsoft Office Memory Corruption Vulnerability (CNVD-2015-04590)

Microsoft Office is an office software suite of products developed by the American Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Office. A remote attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service memory corruption with...

Microsoft Office Memory Corruption Vulnerability (CNVD-2015-04591)

Microsoft Office is an office software suite of products developed by the American Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Office. A remote attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service memory corruption with...

Microsoft Office Memory Corruption Vulnerability (CNVD-2015-04588)

Microsoft Office is an office software suite of products developed by the American Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Office. A remote attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service memory corruption with...

Microsoft Office Memory Corruption Vulnerability (CNVD-2015-04589)

Microsoft Office is an office software suite of products developed by the American Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Office. A remote attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service memory corruption with...

Adobe Reader/Acrobat Javascript API Execution Limit Bypass Vulnerability (CNVD-2015-03080)

Adobe Reader/Acrobat are popular applications for processing PDF files. A vulnerability exists in Adobe Reader/Acrobat's handling of special PDF files, which allows remote attackers to exploit the vulnerability to construct malicious files and trick users into parsing them, which can bypass...

Unspecified Memory Corruption Arbitrary Code Execution Vulnerability in Adobe Reader/Acrobat (CNVD-2015-03134)

Adobe Reader/Acrobat are popular applications for processing PDF files. A memory corruption vulnerability exists in Adobe Reader/Acrobat's handling of particular PDF files, which allows remote attackers to exploit the vulnerability to construct malicious files and trick users into parsing them,...

Microsoft Office Component Memory Misreference Vulnerability (CNVD-2015-02512)

Microsoft office is a suite of office applications distributed by Microsoft. A memory misreference vulnerability in Microsoft's handling of specially crafted office documents allows remote attackers to construct malicious files that can be parsed by tricking users into executing arbitrary code...

Microsoft Office Component Memory Misreference Vulnerability (CNVD-2015-02511)

Microsoft office is a suite of office applications distributed by Microsoft. A memory misreference vulnerability in Microsoft's handling of specially crafted office documents allows remote attackers to construct malicious files that can be parsed by tricking users into executing arbitrary code...

Google Chrome PDFium Memory Misreference Vulnerability

Google Chrome is the United States Google Google company developed a Web browser. PDFium is one of the open source PDF rendering engine. Google Chrome 40.0.2214.85 and previous versions of PDFium used in the fpdfsdk/src/fpdfview.cpp and fpdfsdk/src/fsdkmgr.cpp file memory misreference...

UBUNTU-CVE-2015-1359

Multiple off-by-one errors in fpdfapi/fpdffont/fontint.h in PDFium, as used in Google Chrome before 40.0.2214.91, allow remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via a crafted PDF document, related to an "intra-object-overflow" issue, ...

ruby: REXML billion laughs attack via parameter entity expansion

The REXML parser in Ruby 1.9.x before 1.9.3-p550, 2.0.x before 2.0.0-p594, and 2.1.x before 2.1.4 allows remote attackers to cause a denial of service memory consumption via a crafted XML document, aka an XML Entity Expansion XEE attack...