enscript: "epsf" special escape buffer overflows

Multiple buffer overflows in the 1 recognizeepsfile function src/psgen.c and 2 tildesubst function src/util.c in GNU enscript 1.6.1, and possibly earlier, might allow remote attackers to execute arbitrary code via an epsf escape sequence with a long filename...

Microsoft Office畸形EPS/PICT过滤器远程代码执行漏洞（MS08-044）

BUGTRAQ ID: 30595,30597 CVECAN ID: CVE-2008-3019,CVE-2008-3018 Microsoft Office是非常流行的办公软件套件。 Microsoft Office过滤器处理畸形图像的方式中存在远程执行代码漏洞，攻击者可以通过构建特制封装的PostScript（EPS）或PICT文件来利用此漏洞。如果用户使用Office应用程序打开该文件，可能允许远程执行代码。此类特制文件可能包括在电子邮件附件中，或者宿主在恶意网站或受危害网站上。成功利用此漏洞的攻击者可以完全控制受影响的系统。不过，要利用此漏洞，需要进行大量用户交互。...

Security feature bypass

Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of an Encapsulated PostScript EPS file, which allows remote attackers to execute arbitrary code via a crafted EPS file, aka the "Malformed EPS Filter Vulnerability."...

CVE-2008-3019

Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of an Encapsulated PostScript EPS file, which allows remote attackers to execute arbitrary code via a crafted EPS file, aka the "Malformed EPS Filter Vulnerability."...

CVE-2008-3019

Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of an Encapsulated PostScript EPS file, which allows remote attackers to execute arbitrary code via a crafted EPS file, aka the "Malformed EPS Filter Vulnerability."...

CVE-2008-3019

CVE-2008-3019 describes a remote code execution vulnerability in Microsoft Office filters related to malformed Encapsulated PostScript (EPS) handling. A crafted EPS file could allow code execution when opened with affected Office products: Office 2000 SP3, XP SP3, and 2003 SP2, plus the Office Co...

EPS Files (CVE-2008-3019)

EPS is a standard file format for importing and exporting PostScript files. It is usually a single page PostScript program that describes an illustration or an entire page. An EPS file can contain any combination of text, graphics and images. A remote code execution vulnerability was reported in...

Microsoft Office Malformed EPS Filter Remote Code Execution Vulnerability

Description Microsoft Office is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious EPS Encapsulated PostScript file. Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of t...

CVE-2008-3019: Undefined Security Weakness

Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of an Encapsulated PostScript EPS file, which allows remote attackers to execute arbitrary code via a crafted EPS file, aka the "Malformed EPS Filter Vulnerability."...

CVE-2008-1667

The Probe Builder Service aka PBOVISServer.exe in European Performance Systems EPS Probe Builder 2.2 before A.02.20.901, as used in HP OpenView Internet Services OVIS on Windows, allows remote attackers to kill arbitrary processes via a process ID number in an unspecified opcode...

CVE-2008-1667

The CVE concerns HP OpenView Internet Services’ Probe Builder (EPS Probe Builder 2.2) on Windows where PBOVISServer.exe exposes an opcode allowing remote, unauthenticated termination of arbitrary processes by PID. Affected: EPS Probe Builder 2.2 prior to A.02.20.901 (used with HP OVIS). Impact: r...

CVE-2008-1667: Undefined Security Weakness

The Probe Builder Service aka PBOVISServer.exe in European Performance Systems EPS Probe Builder 2.2 before A.02.20.901, as used in HP OpenView Internet Services OVIS on Windows, allows remote attackers to kill arbitrary processes via a process ID number in an unspecified opcode...

CVE-2006-2983

CVE-2006-2983 is a PHP remote file inclusion vulnerability affecting Enterprise Timesheet and Payroll Systems (EPS) version 1.1 and earlier. The flaw allows an attacker to execute arbitrary PHP code by supplying a URL in the absolutepath parameter of cal.php. This vulnerability has a CVSS v2 base...

CVE-2006-2982

EPS (Enterprise Timesheet and Payroll Systems) 1.1 and earlier suffer PHP remote file inclusion via the absolutepath parameter in footer.php and admin/footer.php, allowing remote code execution. Root cause: improper handling of user-supplied URLs in these PHP files. Affected components: footer.ph...

CVE-2006-2983: Undefined Security Weakness

PHP remote file inclusion vulnerability in Enterprise Timesheet and Payroll Systems EPS 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter in cal.php. NOTE: the provenance of this information is unknown; the details are obtained solely fr...

Enterprise TimeSheet and Payroll (EPS) <= v.1.1 Remote File Include Vulnerability

$$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ Enterprise TimeSheet and Payroll EPS = v.1.1 Remote File Include Vulnerability $$ Script site: http://epayroll.sourceforge.net/ $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$ $$ Find by: Kacper a.k.a Rahi...

Enterprise Payroll Systems 1.1 - footer Remote File Inclusion

Enterprise Payroll Systems 1.1 - footer Remote File Inclusion $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ Enterprise TimeSheet and Payroll EPS = v.1.1 Remote File Include Vulnerability $$ Script site: http://epayroll.sourceforge.net/ $$...

Enterprise Payroll Systems 1.1 - 'footer' Remote File Inclusion

$$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ Enterprise TimeSheet and Payroll EPS = v.1.1 Remote File Include Vulnerability $$ Script site: http://epayroll.sourceforge.net/ $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$ $$ Find by: Kacper a.k.a Rahi...

Enterprise Payroll Systems <= 1.1 (footer) Remote Include Vulnerability

No description provided by source. $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ Enterprise TimeSheet and Payroll EPS = v.1.1 Remote File Include Vulnerability $$ Script site: http://epayroll.sourceforge.net/ $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$...

Ubuntu 4.10 : enscript vulnerabilities (USN-68-1)

Erik Sjolund discovered several vulnerabilities in enscript which could cause arbitrary code execution with the privileges of the user calling enscript. Quotes and other shell escape characters in titles and file names were not handled in previous versions. CAN-2004-1184 Previous versions support...