OpenOffice.org: heap based buffer overflow in PPT import

Heap-based buffer overflow in Impress in OpenOffice.org OOo 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PNG file in an ODF or Microsoft Office document, as demonstrated by a PowerPoint aka PPT...

OpenOffice.org: Heap-based buffer overflow by processing *.doc files with WW8 list styles with specially-crafted count of list levels

The WW8ListManager::WW8ListManager function in oowriter in OpenOffice.org OOo 2.x and 3.x before 3.3 does not properly handle an unspecified number of list levels in user-defined list styles in WW8 data in a Microsoft Word document, which allows remote attackers to cause a denial of service...

OpenOffice.org: heap based buffer overflow when parsing TGA files

Heap-based buffer overflow in Impress in OpenOffice.org OOo 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Truevision TGA TARGA file in an ODF or Microsoft Office document...

PT-2011-1221 · Apache +1 · Openoffice +1

Name of the Vulnerable Software and Affected Versions: OpenOffice versions 2.x through 3.x before 3.3 OpenOffice version 3.x before 3.3 Description: The issue is related to the incorrect handling of an unspecified number of list levels in user-defined list styles in WW8 data in a Microsoft Word...

PT-2011-1224 · Oracle +3 · Openoffice.Org +3

Name of the Vulnerable Software and Affected Versions: OpenOffice.org OOo versions 2.x through 3.x before 3.3 Description: The issue is related to a heap-based buffer overflow in Impress, which can be triggered by a crafted PNG file in an ODF or Microsoft Office document. This can cause a denial ...

SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 6993)

Specially crafted PDF documents could crash acroread or even lead to execution of arbitrary code. CVE-2010-0190 / CVE-2010-0191 / CVE-2010-0192 / CVE-2010-0193 / CVE-2010-0194 / CVE-2010-0195 / CVE-2010-0196 / CVE-2010-0197 / CVE-2010-0198 / CVE-2010-0199 / CVE-2010-0201 / CVE-2010-0202 /...

SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 7131)

Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code CVE-2010-1240 / CVE-2010-2862. This has been fixed. This update also incorporates the Adobe Flash Player update APSB10-16 for the bundled flash player parts. CVE-2010-0209 / CVE-2010-2188 / CVE-2010-2213 /...

SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 6994)

Specially crafted PDF documents could crash acroread or even lead to execution of arbitrary code. CVE-2010-0190 / CVE-2010-0191 / CVE-2010-0192 / CVE-2010-0193 / CVE-2010-0194 / CVE-2010-0195 / CVE-2010-0196 / CVE-2010-0197 / CVE-2010-0198 / CVE-2010-0199 / CVE-2010-0201 / CVE-2010-0202 /...

WebKit: Memory corruption due to improper handling of large text area

WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, does not properly handle large text areas, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted HTML document...

SuSE 11 Security Update : OpenOffice_org (SAT Patch Number 1258)

This update of OpenOffice.org fixes potential buffer overflow in EMF parser code enhwmf.cxx, emfplus.cxx Thanks to Petr Mladek. Additionally Secunia reported an integer underflow CVE-2009-0200 and a buffer overflow CVE-2009-0201 that could be triggered while parsing Word documents. Also provides...

Julian Assange's hacking offences revealed in Australian court documents !!

IN 1991, using just a "simple, basic computer" from his home in suburban Melbourne, a young Julian Assange created a program that allowed him to access about 11,000 computers belonging to the giant Canadian telecommunications company Northern Telecom. New details of the WikiLeaks founder's early...

Thurston sees largest identity theft case in the county's history !!

An Olympia-area man has been arrested in what the Thurston County Sheriff's Office says is the largest identity-theft case in the county's history. More than 1,000 victims statewide had their driver's licenses, credit cards and Social Security numbers stolen, according to the Sheriff's Office...

Microsoft Graphics Rendering Engine Thumbnail Image Stack Buffer Overflow (CVE-2010-3970)

Thumbnails are reduced-size versions of pictures, used to help in recognizing and organizing them, serving the same role for images as a normal text index does for words. A stack buffer overflow vulnerability has been discovered in Microsoft's Graphics Rendering Engine. The vulnerability is due t...

Jose Ignacio Lopez (GM)

Lopez was the head of General Motors’ Global Purchasing division when he defected for GM competitor VW to head that company’s purchasing operation in 1993. According to a lawsuit filed by GM, Lopez and other company executives brought with them more than two million pages of top-secret GM...

Ross Klein (Starwood Hotels and Resorts Worldwide)

Klein and Amar Lalvani were two top executives at the Starwood hotel chain when they were recruited by Starwood’s chief competitor, Hilton, to help it start a new line of “lifestyle” hotels to compete with Starwood’s popular “W” hotels. According to a lawsuit filed by Starwood, the two executives...

Yonggang "Gary" Min (DuPont)

Min worked at Delaware based chemicals giant DuPont for over a decade before he surreptitiously took a job at DuPont competitor, Victrex. Over a four month period after accepting that offer, and before informing DuPont of his decision, Min systematically copied thousands of pages of confidential...

PFC Bradley Manning (U.S. Army)

Bradley Manning’s is the face that launched a hundred thousand leaks. The 22 year-old intelligence analyst for the U.S. Army’s 2nd Brigade Combat Team, 10th Mountain Division was stationed in Iraq when, allegedly, he downloaded hundreds of thousands of classified documents and video from SIPRnet,...

Microsoft Windows CreateSizedDIBSECTION Stack Buffer Overflow

$Id: ms11xxxcreatesizeddibsection.rb 11473 2011-01-04 23:00:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft Warns Of Security Hole in Windows Graphics Engine

Microsoft issued an advisory to Windows users about a security vulnerability in a common Windows component that could be used by remote attackers to run malicious code on machines running the Windows XP, Vista and Windows Server 2003 operating systems. The company said on Tuesday that it is...

SUSE: Security Advisory for acoread (SUSE-SA:2010:058)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...