837 matches found
Microsoft Office multiple security vulnerabilities
Privilege escalation, use-after-free, insecure DLL loading, memory corruption...
Microsoft Internet Explorer Multiple Vulnerabilities (2618444)
This host is missing an important security update according to Microsoft Bulletin MS11-099. OpenVAS Vulnerability Test $Id: secpodms11-099.nasl 6526 2017-07-05 05:43:52Z cfischer $ Microsoft Internet Explorer Multiple Vulnerabilities 2618444 Authors: Rachana Shetty Copyright: Copyright c 2011...
Microsoft Internet Explorer CVE-2011-2019 DLL Loading Arbitrary Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a specially crafted Dynamic...
Microsoft PowerPoint CVE-2011-3396 DLL Loading Arbitrary Code Execution Vulnerability
Description Microsoft PowerPoint is prone to vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location which contains a specially crafted Dynamic Link...
PT-2011-4429
Name of the Vulnerable Software and Affected Versions Microsoft PowerPoint versions 2007 SP2 through 2010 Description The issue allows local users to gain privileges via a Trojan horse DLL in the current working directory. A remote code execution vulnerability exists in the way that Microsoft...
Authentication flaw
CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 does not require authentication, which allows remote attackers to execute arbitrary code via vectors related to creation of a file, loading a DLL, and process control...
CVE-2011-4051
CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 does not require authentication, which allows remote attackers to execute arbitrary code via vectors related to creation of a file, loading a DLL, and process control...
CVE-2011-4051: Improper Authentication
CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 does not require authentication, which allows remote attackers to execute arbitrary code via vectors related to creation of a file, loading a DLL, and process control...
PHP Foreign Function Interface Arbitrary DLL Loading safe_mode Restriction Bypass
According to its banner, the version of PHP installed on the remote host is affected by a security bypass vulnerability. The Foreign Function Interface ffi extension does not follow safemode restrictions, which allows context-dependent attackers to execute arbitrary code by loading an arbitrary D...
PT-2011-4830
Name of the Vulnerable Software and Affected Versions InduSoft Web Studio versions 6.1 through 7.0 Description The issue allows remote attackers to execute arbitrary code without requiring authentication. This is related to vectors involving the creation of a file, loading a DLL, and process...
Microsoft Windows Mail Insecure Library Loading Code Execution (MS11-085; CVE-2011-2016)
A remote code execution vulnerability has been reported in Microsoft Windows Mail and Windows Meeting Space. The vulnerability is due to an error in the way the application improperly restricts the path loading of dynamic link library DLL files. A remote attacker may exploit this vulnerability by...
Microsoft Windows multiple security vulnerabilities
Active Accessibility and Media Center insecure DLL loading...
PT-2011-3547 · Microsoft · Windows Vista +3
Name of the Vulnerable Software and Affected Versions: Microsoft Windows Vista SP2 Microsoft Windows 7 Gold and SP1 Windows Media Center TV Pack for Windows Vista Description: A remote code execution issue exists in the way Windows Media Center handles the loading of DLL files, allowing an attack...
Microsoft Active Accessibility DLL Loading Remote Code Execution (MS11-075; CVE-2011-1247)
A remote code execution vulnerability has been reported in Microsoft Windows Active Accessibility component. The vulnerability is due to an error in the way certain applications using OleAut32.dll handle the loading of DLL files. A remote attacker may exploit this vulnerability by enticing a user...
Microsoft Office multiple security vulnerabilities
Multiple Excel memory corruptions, Word uninitialized pointer dereference, unsafe DLL loading...
PT-2011-3531 · Microsoft · Display Panning Cpl Extension +11
Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows 7 versions Gold through SP1 Description: T...
PT-2011-3521
Name of the Vulnerable Software and Affected Versions Microsoft Office versions 2003 SP3 through 2007 SP2 Description The issue allows local users to gain privileges via a Trojan horse DLL in the current working directory. A remote code execution vulnerability exists in the way that Microsoft...
Multiple Products .DLL Insecure Library Loading (CVE-2011-0029; CVE-2011-1980)
A remote code execution vulnerability exists in the way that certain products handle the loading of DLL files. Certain applications improperly restrict the path used for loading external libraries. A remote attacker could exploit this vulnerability by manipulating a user to open a legitimate file...
Microsoft Windows Multiple Components Insecure Library Loading (MS11-071; CVE-2011-1991)
A remote code execution vulnerability has been reported in the way that certain Windows components handle the loading of DLL files. A remote attacker could exploit this vulnerability to execute arbitrary code in an affected system...
Microsoft Windows Data Access Component DLL Loading Arbitrary Code Execution Vulnerability
Description Microsoft Windows is prone to an arbitrary-code-execution vulnerability that affects the Data Access Component. Attackers can exploit this vulnerability to execute arbitrary code in the context of the user running the vulnerable application. Technologies Affected Avaya Aura Conferenci...