Google Chrome 29 Fixes 25 Vulnerabilities

There are 25 fresh security patches in the newest version of Google Chrome, including fixes for a number of high-severity vulnerabilities. Chrome 29 also includes a number of performance enhancements. Google regularly pushes out new versions of its browser every few weeks, and sometimes will only...

PT-2012-2380

Name of the Vulnerable Software and Affected Versions Microsoft Word versions 2007 SP2 through 2007 SP3 Description A remote code execution issue exists due to improper memory handling during the parsing of Word documents, allowing attackers to execute arbitrary code via a crafted document. This...

PT-2011-4775

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 16.0.912.63 Description The issue is related to the improper parsing of SVG documents, which can be exploited by remote attackers to cause a denial of service through an out-of-bounds read. The estimated number ...

OpenOffice < 3.3 Multiple Vulnerabilities

Binary data 5745.prm...

Mozilla Firefox SVG Data Processing Memory Corruption (CVE-2009-0771)

Mozilla Firefox is a web browser developed by Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions HTML, XML, XUL, JavaScript, various graphics formats, and so on. The browser runs on the Windows,...

IBM Lotus Notes Applix Graphics Parsing Buffer Overflow (CVE-2007-5405)

IBM Lotus Notes is an integrated collaborative software that consists of features such as an email client, calendering, contact management, and instant messaging. The Lotus Notes email client application is capable of communicating with email servers over a range of protocols, such as: SMTP, POP,...

OpenOffice Word Document Table Parsing Heap Overflow (CVE-2009-0201)

OpenOffice.org is an open source office suite. The suite includes a word processor, a spreadsheet application, a presentation creator, an illustration drawer, a desktop database, and an equation editor. The product is made available for multiple platforms and languages. A heap overflow...

金山毒霸杀毒软件套装文档解析拒绝服务漏洞

BUGTRAQ ID: 37247 金山毒霸是一种个人电脑安全防护软件，集合了查毒、杀毒、实时监控、垃圾邮件过滤、防网页挂马和隐私数据保护等实用性强的功能于一身。 金山毒霸在处理解析特定类型的畸形文档时存在漏洞，远程攻击者可能利用此漏洞导致毒霸发生崩溃，失去正常的功能，攻击者可能执行进一步的攻击。 Kingsoft Corp Kingsoft Internet Security 9 厂商补丁： Kingsoft Corp ------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Microsoft Word buffer overflows

Fre different buffer overflows on document parsing...

Mozilla Thunderbird < 2.0.0.18 Multiple Vulnerabilities

The installed version of Thunderbird is earlier than 2.0.0.18. Such versions are potentially affected by the following security issues : - The canvas element can be used in conjunction with an HTTP redirect to bypass same-origin restrictions and gain access to the content in arbitrary images from...

Mozilla Firefox < 2.0.0.18 Multiple Vulnerabilities

Binary data 4751.prm...

OpenOffice多个缓冲区溢出漏洞

BUGTRAQ ID: 28819 CVECAN ID: CVE-2007-5745,CVE-2007-5747,CVE-2007-5746,CVE-2008-0320 OpenOffice是个整合性的软件，包含了许多文字处理、表格、公式等办公工具。 OpenOffice在解析文件中的Attribute和Font...

wvWare library integer overflows

Few integer overflows on Microsoft Word document parsing...

wvWare多个整数溢出漏洞

wvWare是一个用于装载和解析Microsoft Word文件的库。 WV库的实现上存在多个整数溢出漏洞，攻击者可能利用这些漏洞在用户机器上执行任意指令。 WV库在解析文档时没有检查溢出情况便使用常数乘以用户所提供的整数值： 35 int 36 wvGetLFOrecords LFO lfo, LFOLVL lfolvl, LVL lvl, U32 nolfo, 37 U32 nooflvl, U32 offset, U32 len, wvStream fd 38 .. 47 for i = 0; i nolfo; i++ 48 nooflvl += lfoi.clfolvl; .. ...

[Full-Disclosure] [HV-HIGH] MS Word multiple exceptions, at least one exploitable

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MS Word multiple exceptions, at least one exploitable. Classification: =============== Level: low-MED-high-crit ID: HEXVIEW200410061 Overview: ========= MS Word is a highly overrated and widely used text processor, a part of monstrous collection of...