Wieland wieplan 4.1 Document Parsing Java Code Execution Using XMLDecoder

Summary Your new software for the configuration of Wieland terminal rails. wieplan enables you to plan a complete terminal rail in a very simple way and to then place an order with Wieland. The configured terminal rail can be stored in DXF format and read into a CAD tool for further processing. D...

Wieland wieplan 4.1 - Document Parsing Java Code Execution Using XMLDecoder

Wieland wieplan 4.1 Document Parsing Java Code Execution Using XMLDecoder Vendor: Wieland Electric GmbH Product web page: http://www.wieland-electric.com Affected version: 4.1 Build 9 Summary: Your new software for the configuration of Wieland terminal rails. wieplan enables you to plan a complet...

Wieland wieplan 4.1 - Document Parsing Java Code Execution Using XMLDecoder

Exploit for multiple platform in category local exploits Wieland wieplan 4.1 Document Parsing Java Code Execution Using XMLDecoder Vendor: Wieland Electric GmbH Product web page: http://www.wieland-electric.com Affected version: 4.1 Build 9 Summary: Your new software for the configuration of...

Moderate: Red Hat Security Advisory: libreoffice security update

Updated libreoffice packages that fixes multiple security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, a...

freexl library DoS

DoS on Excel document parsing...

Microsoft Office memory corruptions

Memory corruptions on documents parsing...

Hancom Office memory corruption

Memory corruption on document parsing...

Oracle - Outside-In '.DOCX' File Parsing Memory Corruption

Title: Oracle Outside-In DOCX File Parsing Memory Corruption Platforms: Windows CVE: Secunia: PRL: 2015-04 Author: Francis Provencher Protek Research Lab’s Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timeline 3 Technical details 4 POC ==============...

Pentaho < 4.5.0 - User Console XML Injection

======================================================================== title: Pentaho User Console XML Injection Vulnerability program: Pentaho BI User Console vulnerable version: Pentaho was injected into the XML of the client's POST request. This tag defines an external entity, xxe8295c, whic...

CVE-2014-1592

Use-after-free vulnerability in the nsHtml5TreeOperation function in xul.dll in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to execute arbitrary code by adding a second root element to an HTML5 document duri...

Microsoft Word code execution

Code execution on Word document parsing...

AIX Java Advisory : java_jan2014_advisory.asc

The version of Java SDK installed on the remote host is potentially affected by the following vulnerabilities : - Vulnerabilities in Oracle Java allow a remote attacker to bypass security features through flaws in XML document parsing. CVE-2013-5878, CVE-2013-5910 - An information disclosure flaw...

Google Chrome < 30.0.1599.66 Multiple Vulnerabilities

Binary data 801606.prm...

FreeBSD : chromium -- multiple vulnerabilities (ae651a4b-0a42-11e3-ba52-00262d5ed8ee)

Google Chrome Releases reports : 25 security fixes in this release, including : - 181617 High CVE-2013-2900: Incomplete path sanitization in file handling. Credit to Krystian Bigaj. - 254159 Low CVE-2013-2905: Information leak via overly broad permissions on shared memory files. Credit to Christi...

Google Chrome 29 Fixes 25 Vulnerabilities

There are 25 fresh security patches in the newest version of Google Chrome, including fixes for a number of high-severity vulnerabilities. Chrome 29 also includes a number of performance enhancements. Google regularly pushes out new versions of its browser every few weeks, and sometimes will only...

OpenOffice < 3.3 Multiple Vulnerabilities

Binary data 5745.prm...

Mozilla Firefox SVG Data Processing Memory Corruption (CVE-2009-0771)

Mozilla Firefox is a web browser developed by Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions HTML, XML, XUL, JavaScript, various graphics formats, and so on. The browser runs on the Windows,...

IBM Lotus Notes Applix Graphics Parsing Buffer Overflow (CVE-2007-5405)

IBM Lotus Notes is an integrated collaborative software that consists of features such as an email client, calendering, contact management, and instant messaging. The Lotus Notes email client application is capable of communicating with email servers over a range of protocols, such as: SMTP, POP,...

OpenOffice Word Document Table Parsing Heap Overflow (CVE-2009-0201)

OpenOffice.org is an open source office suite. The suite includes a word processor, a spreadsheet application, a presentation creator, an illustration drawer, a desktop database, and an equation editor. The product is made available for multiple platforms and languages. A heap overflow...

金山毒霸杀毒软件套装文档解析拒绝服务漏洞

BUGTRAQ ID: 37247 金山毒霸是一种个人电脑安全防护软件，集合了查毒、杀毒、实时监控、垃圾邮件过滤、防网页挂马和隐私数据保护等实用性强的功能于一身。 金山毒霸在处理解析特定类型的畸形文档时存在漏洞，远程攻击者可能利用此漏洞导致毒霸发生崩溃，失去正常的功能，攻击者可能执行进一步的攻击。 Kingsoft Corp Kingsoft Internet Security 9 厂商补丁： Kingsoft Corp ------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...