398 matches found
MailMachine Pro 2.2.4 Remote SQL Injection Vulnerability
No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / &nb...
MailMachine Pro 2.2.4 - SQL Injection
MailMachine Pro 2.2.4 - SQL Injection --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...
Apple Mac OSX 10.5.x - Mail Arbitrary Code Execution
Apple Mac OSX 10.5.x - Mail Arbitrary Code Execution source: https://www.securityfocus.com/bid/26510/info Apple Mac OS X is prone to a vulnerability that can allow arbitrary code to run. This issue affects the Mail application when handling email attachments. Attackers can exploit this issue to...
Apple Mac OSX 10.5.x - Mail Arbitrary Code Execution
source: https://www.securityfocus.com/bid/26510/info Apple Mac OS X is prone to a vulnerability that can allow arbitrary code to run. This issue affects the Mail application when handling email attachments. Attackers can exploit this issue to execute arbitrary code in the context of the user...
Microsoft Outlook Web Access Remote Script Injection Vulnerability
Description Microsoft Outlook Web Access is prone to a script-injection vulnerability because the application fails to properly handle specially crafted email attachments. To exploit this issue, attackers must send specially crafted files through email messages to users of the affected applicatio...
CVE-2006-5877
The enigmail extension before 0.94.2 does not properly handle large, encrypted file e-mail attachments, which allows remote attackers to cause a denial of service crash, as demonstrated with Mozilla Thunderbird...
CVE-2006-5877
The enigmail extension before 0.94.2 does not properly handle large, encrypted file e-mail attachments, which allows remote attackers to cause a denial of service crash, as demonstrated with Mozilla Thunderbird...
Microsoft Office Publisher Invalid Memory Reference Remote Code Execution Vulnerability
Description Microsoft Office Publisher is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting victim to open a maliciously crafted Publisher file. Successful exploits may allow attackers to execute arbitrary code with privileges of the us...
Microsoft Word Macro Permissions Bypass Arbitrary Code Execution Vulnerability
Description Microsoft Word is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious Word file. If the vulnerability is successfully exploited, this could result in the execution of arbitrary code in the context of the current...
PT-2007-2125 · Microsoft · Office Excel +2
Name of the Vulnerable Software and Affected Versions: Microsoft Excel versions 2000, XP, 2003, and 2004 for Mac Description: A remote code execution issue exists in Excel, allowing attackers to execute arbitrary code when the application opens a specially crafted file. This file could be sent as...
Microsoft Excel Opcode Handling Unspecified Remote Code Execution Vulnerability
Description Microsoft Excel is reportedly prone to an unspecified remote code-execution vulnerability. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of targeted users. Note that Microsoft Office applications include functionality to embed Office file...
Microsoft Office Malformed Record Remote Code Execution Vulnerability
Description Microsoft Office is prone to a remote code-execution vulnerability. This issue occurs when Office attempts to process malformed files. An attacker could exploit this issue by enticing a victim to load a malicious Office file. If the vulnerability is successfully exploited, this could...
Microsoft PowerPoint Data Record Remote Code Execution Vulnerability
Description Microsoft PowerPoint is prone to a remote code-execution vulnerability. Exploiting this issue can allow remote attackers to execute arbitrary code on a vulnerable computer by supplying a malicious PowerPoint .ppt document to a user. Technologies Affected Microsoft Office 2000 Microsof...
Microsoft PowerPoint Record Improper Memory Access Remote Code Execution Vulnerability
Description Microsoft PowerPoint is prone to a remote code-execution vulnerability. Exploiting this issue can allow remote attackers to execute arbitrary code on a vulnerable computer by supplying a malicious PowerPoint .ppt document to a user. Technologies Affected Microsoft Office 2000 Microsof...
Microsoft Visual Basic for Applications Document Check Buffer Overflow Vulnerability
Description A vulnerability has been discovered in Microsoft Visual Basic for Applications. The vulnerability occurs due to insufficient bounds checking when checking the properties of malicious documents. As a result, a malformed document may be able to trigger a buffer-overflow within the...
Microsoft Office Malformed String Parsing Code Execution Vulnerability
Description Microsoft Office is prone to a code-execution vulnerability. This condition can occur when a malformed string within an Office file is parsed. This vulnerability is located in a shared library used by multiple Office applications, potentially allowing many different attack vectors. An...
US-CERT Technical Cyber Security Alert TA06-139A -- Microsoft Word Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA06-139A Microsoft Word Vulnerability Original release date: May 19, 2006 Last revised: -- Source: US-CERT Systems Affected Microsoft Word 2003 Microsoft Word XP 2002 Microsoft Word is includ...
Microsoft Word object pointer memory corruption vulnerability
Overview A memory corruption vulnerability in Microsoft Word could allow a remote attacker to execute arbitrary code with the privileges of the user running Word. Description Microsoft Word contains a memory corruption vulnerability. According to Microsoft Security Bulletin MS06-027:When a user...
CVE-2006-2036
CVE-2006-2036 affects iOpus Secure Email Attachments (SEA) 1.0. Root cause: improper handling of passwords that are repetitions of a substring, enabling an attacker to decrypt files by entering only the substring. Impact: partial confidentiality. No remediation details are provided in the supplie...
Ubuntu 4.10 / 5.04 / 5.10 : imagemagick vulnerabilities (USN-246-1)
Florian Weimer discovered that the delegate code did not correctly handle file names which embed shell commands CVE-2005-4601. Daniel Kobras found a format string vulnerability in the SetImageInfo function CVE-2006-0082. By tricking a user into processing an image file with a specially crafted fi...