7 matches found
The vulnerability of the dynamically linked library docmgmt.dll, which is part of the Siemens Solid Edge design and simulation tools, allows a hacker to execute arbitrary code.
The vulnerability of the dynamically linked library docmgmt.dll, which is part of Siemens Solid Edge’s design and simulation tools, relates to the possibility of writing beyond the buffer boundaries in memory during syntax analysis of PAR, ASM, and DFT files. Exploiting this vulnerability can all...
GHSA-JQX5-H2HW-5Q4F Denial of Service in Apache POI
The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service OutOfMemoryError exception and possibly JVM destabilization via a crafted length value in a Channel Definition Format CDF or Compound Fi...
CVE-2012-0213
The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service OutOfMemoryError exception and possibly JVM destabilization via a crafted length value in a Channel Definition Format CDF or Compound Fi...
CVE-2012-0213
The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service OutOfMemoryError exception and possibly JVM destabilization via a crafted length value in a Channel Definition Format CDF or Compound Fi...
Internet Explorer CDF Cross Domain Scripting (MS05-014; CVE-2005-0056)
Microsoft Internet Explorer employs the concept of security zones, which enables the browser to apply different security policies based on the origin of the content that is being rendered. For instance, separate restrictions may be set for remote content and for local content. As a rule, Internet...
CVE-2005-0056
Internet Explorer 5.01, 5.5, and 6 does not properly validate certain URLs in Channel Definition Format CDF files, which allows remote attackers to obtain sensitive information or execute arbitrary code, aka the "Channel Definition Format CDF Cross Domain Vulnerability."...
Microsoft Internet Explorer contains a Channel Definition Format (CDF) cross-domain vulnerability
Overview Microsoft Internet Explorer contains a vulnerability that may allow unintended information disclosure or remote code execution due to a flaw in handling Channel Definition Format CDF files. Description From the Microsoft Channel Definition Format description:Channel Definition Format CDF...