CVE-2013-2189: Out-of-bounds Write

Apache OpenOffice.org OOo before 4.0 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via invalid PLCF data in a DOC document file...

Apache OpenOffice 文档内存破坏漏洞(CVE-2013-2189)

BUGTRAQ ID: 61465 CVECAN ID: CVE-2013-2189 Apache OpenOffice是开源办公软件套装。 OpenOffice 3.4.0、3.4.1处理畸形DOC文件内的PLCF数据会造成内存破坏，导致拒绝服务。 0 OpenOffice 3.4.0 - 3.4.1 厂商补丁： OpenOffice ---------- OpenOffice已经为此发布了一个安全公告（CVE-2013-2189）以及相应补丁: CVE-2013-2189：CVE-2013-2189...

WordPress Plugin Google Document Embedder Arbitrary File Disclosure (CVE-2012-4915)

A remote code execution vulnerability has been reported in Google Doc Embedder Plugin for WordPress...

Silentblast Interactive Multiple Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

phonon, qt security update

CentOS Errata and Security Advisory CESA-2013:0669 Updated qt packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score,...

MS Office 2010 Download Execute

No description provided by source. !/usr/bin/python Exploit Title: MS Office 2010 Download Execute Google Dork: NA Date: 19 Feb 2013 Exploit Author: g11tch Vendor Homepage: Software Link: Version: ALL Tested on: Windows XP SP1, SP2, Windows 7 CVE : Just generate a meterpreter .exe, then provide t...

rubygem-rdoc: Cross-site scripting in the documentation created by Darkfish Rdoc HTML generator / template

darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site scripting XSS attacks via a crafted URL...

CVE-2011-5260: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in SAP/BW/DOC/METADATA in SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via the page parameter...

Google Doc Embedder Plugin for WordPress 'File' Parameter Traversal Arbitrary File Disclosure

The Google Doc Embedder Plugin for WordPress installed on the remote host is affected by a file disclosure vulnerability due to a failure to properly sanitize user-supplied input to the 'file' parameter of the 'libs/pdf.php' script. This vulnerability could allow an unauthenticated, remote attack...

PT-2014-2287

Name of the Vulnerable Software and Affected Versions Google Doc Embedder plugin versions prior to 2.5.4 Description The issue allows remote attackers to read arbitrary files. This is achieved by using a .. dot dot in the file parameter to the "libs/pdf.php" endpoint. Recommendations For versions...

WordPress Google Doc Embedder Plugin Arbitrary File Disclosure Vulnerability

The Google Doc Embedder Plugin for WordPress is prone to an arbitrary file-disclosure vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Microsoft Office Word 2010 Stack Overflow

StackOverflow during the handling of the doc files a context-dependent attacker can execute arbitrary code. Title : Microsoft Office Word 2010 Stack Overflow Version : Microsoft Office professional Plus 2010 Date : 2012-10-23 Vendor : http://office.microsoft.com Impact : Med/High Contact :...

Microsoft Word 2010 - Crash (PoC)

Microsoft Word 2010 - Crash PoC Title : Microsoft Office Word 2010 Stack Overflow Version : Microsoft Office professional Plus 2010 Date : 2012-10-23 Vendor : http://office.microsoft.com Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 ENG Bug : ----...

Heap overflow

Microsoft Works 9 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via a crafted Word .doc file, aka "Works Heap Vulnerability."...

CVE-2012-2550

Microsoft Works 9 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via a crafted Word .doc file, aka "Works Heap Vulnerability."...

CVE-2012-2550

Microsoft Works for Windows (Works 9) has a heap overflow/heap memory corruption vulnerability in Word file handling that could allow remote code execution when a user opens a crafted .doc file. An attacker could run arbitrary code subject to the user’s privileges. This is referenced as MS12-065 ...

PT-2012-4094

Name of the Vulnerable Software and Affected Versions Microsoft Works version 9 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to heap memory corruption. This can be achieved via a crafted Word .doc file. Recommendations For Microsoft Work...

CVE-2012-2550: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Works 9 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via a crafted Word .doc file, aka "Works Heap Vulnerability."...

CVE-2010-5267

Untrusted search path vulnerability in MunSoft Easy Office Recovery 1.1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .doc, .xls, or .ppt file. NOTE: some of these details are obtained from...

RedHat Update for tetex RHSA-2012:1201-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...