The vulnerability of the Microsoft .NET Framework software platform, which allows a perpetrator to forge digital signatures

The vulnerability of the Microsoft .NET Framework software arises from improper validation of digital signatures for individual elements of XML documents. Exploiting this vulnerability allows a malicious actor to forge digital signatures using modified XML documents...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Windows PDF library exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted PDF document...

DEBIAN-CVE-2016-1974

The nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not verify that memory allocation succeeds, which allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via crafted Unicode data in an HTM...

VulnCheck KEV: CVE-2016-0021

Microsoft InfoPath 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

GLSA-201603-05 : LibreOffice, OpenOffice: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201603-05 LibreOffice, OpenOffice: Multiple vulnerabilities Multiple vulnerabilities were found in both LibreOffice and OpenOffice that allow the remote execution of arbitrary code and potential Denial of Service. These...

CVE-2016-0132

Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 mishandles signature validation for unspecified elements of XML documents, which allows remote attackers to spoof signatures via a modified document, aka ".NET XML Validation Security Feature Bypass."...

CVE-2016-0021

Microsoft InfoPath 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

CVE-2016-0134

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Office Web Apps 2010 SP2, and Web Apps Server...

SAP 3D Visual Enterprise Viewer SketchUp Document Memory Error References Remote Code Execution Vulnerability

SAP 3D Visual Enterprise Viewer is the 3D visualization viewer. A vulnerability exists in SAP 3D Visual Enterprise Viewer's handling of SketchUp documents. An attacker can reuse a freed hanging pointer to execute arbitrary code in the current process context...

The vulnerability of the Microsoft SharePoint Server corporate application package, the Microsoft SharePoint Designer HTML editor, the Microsoft SharePoint Foundation email processing software, the Microsoft Excel and Excel For Mac spreadsheet editors, the Microsoft Excel Viewer email viewer, the Microsoft Office Web Apps suite, and the Microsoft Office Compatibility Pack allows a malicious actor to execute arbitrary code.

The vulnerability of the Microsoft SharePoint Server corporate application package, the Microsoft SharePoint Designer HTML editor, the Microsoft SharePoint Foundation email processing software, the Microsoft Excel and Excel For Mac spreadsheet editors, the Microsoft Excel Viewer, the Microsoft...

Vulnerability of the Office Web Apps Server web server, Microsoft Word and Word For Mac word processors, the Microsoft Office Compatibility Pack compatibility package, programs for reading Word Viewer doc files, the Microsoft SharePoint Server corporate application, which allows a hacker to execute arbitrary code.

The vulnerability in the Office Web Apps Server web server, Microsoft Word and Word For Mac text editors, the Microsoft Office Compatibility Pack, Word Viewer software for reading doc files, and the Microsoft SharePoint Server enterprise application is caused by a buffer overflow. Exploitation of...

The vulnerability of the Microsoft Office Compatibility Pack, a suite of Microsoft Office programs, and the Microsoft Word text editor allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Office Compatibility Pack, the Microsoft Office suite of programs, and the Microsoft Word text editor is due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted Office document from a...

The vulnerability of the Internet Explorer browser, which allows a violator to obtain confidential information

The vulnerability of the Hyperlink Object Library component in Internet Explorer is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to obtain confidential information through a specially crafted URL in an email message or Office docume...

LibreOffice LwpTocSuperLayout Denial of Service Vulnerability

LibreOffice is a free and open source office software suite. LibreOffice handles LotusWordPro lwp documents with a security vulnerability that allows a remote attacker to build files containing specially crafted LwpTocSuperLayout records that crash the application...

Threat Outbreak Alert RuleID21140: Email Messages Distributing Malicious Software on February 18, 2016

Medium Alert ID: 43615 First Published: 2016 February 18 16:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21140 and RuleID21140KVR may contain the...

(0Day) SAP 3D Visual Enterprise Viewer SketchUp document Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

USN-2899-1 libreoffice vulnerabilities

It was discovered that LibreOffice incorrectly handled LWP document files. If a user were tricked into opening a specially crafted LWP document, a remote attacker could cause LibreOffice to crash, and possibly execute arbitrary code...

Microsoft Internet Explorer Information Disclosure Vulnerability (CNVD-2016-01023)

Microsoft Internet Explorer is a popular web browser introduced by Microsoft and bundled with the Windows operating system. An information disclosure vulnerability exists in Microsoft Internet Explorer 9 through 11 that could allow a remote attacker to obtain sensitive information from process...

CVE-2016-0053

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps Server 2013 SP1, and SharePoint Server 2013 SP1 allow remote attackers to execut...

Wieland wieplan 4.1 - Document Parsing Java Code Execution Using XMLDecoder

Wieland wieplan 4.1 Document Parsing Java Code Execution Using XMLDecoder Vendor: Wieland Electric GmbH Product web page: http://www.wieland-electric.com Affected version: 4.1 Build 9 Summary: Your new software for the configuration of Wieland terminal rails. wieplan enables you to plan a complet...