189 matches found
Microsoft Office IME (Chinese) Privilege Elevation Vulnerability (2652016)
This host is missing an important security update according to Microsoft Bulletin MS11-088. OpenVAS Vulnerability Test $Id: secpodms11-088.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Office IME Chinese Privilege Elevation Vulnerability 2652016 Authors: Antu Sanadi Copyright: Copyright c 2011...
MS11-088: Vulnerability in Microsoft Office IME (Chinese) could allow elevation of privilege: December 13, 2011
Resolves security vulnerabilities that exist in Microsoft Office Pinyin IME Chinese that could allow arbitrary code to run when a maliciously modified file is opened.IntroductionMicrosoft has released security bulletin MS11-088. To view the complete security bulletin, visit one of the following...
Microsoft Pinyin IME (CVE-2011-2010) Local Privilege Escalation Vulnerability
Description Microsoft Pinyin IME is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers. Failed exploit attempts may...
MS11-088: Vulnerability in Microsoft Office IME (Chinese) Could Allow Elevation of Privilege (2652016)
The version of Microsoft Office Input Method Editor Chinese installed on the remote host has a privilege escalation vulnerability. A local attacker could exploit this by utilizing the MSPY IME toolbar in an unspecified manner, resulting in arbitrary code execution in kernel mode. C Tenable Networ...
New Trojan Disguised as Windows IME
There’s a new attack technique in use right now that enables attackers to inject Trojan code onto victims’ machines by disguising it as a Windows input method editor IME. The technique is a twist on the classic attack vector of making malicious code look like something benign. In this case, the...
CentOS Update for kernel CESA-2008:0972 centos4 i386
Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2008:0972 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...
Memory corruption
Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to the layout engine and 1 a zero value of the "this" variable in the...
CVE-2008-4063
CVE-2008-4063 affects Mozilla Firefox 3.x up to 3.0.2. The issue involves memory corruption in the layout engine via multiple vectors: (1) this==0 in nsContentList::Item, (2) Hindi/Indic IME interaction with the g key, and (3) inline frame protection when SortByContentOrder is invoked. Impact is ...
Mozilla crashes with evidence of memory corruption
Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to the layout engine and 1 a zero value of the "this" variable in the...
CVE-2008-4063
Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to the layout engine and 1 a zero value of the "this" variable in the...
Microsoft Internet Explorer IMSKDIC.DLL拒绝服务漏洞
Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer实例化IMSKDIC.DLL COM对象存在问题，远程攻击者可以利用漏洞进行内存破坏攻击，可能以进程权限执行任意指令。 当Microsoft Internet Explorer尝试以ActiveX控件实例化IMSKDIC.DLLMicrosoft IME COM对象，可能破坏系统内存造成拒绝服务，可能导致任意代码执行。 Microsoft Internet Explorer 6.0 SP2 Microsoft Internet Explorer 6.0...
CVE-2006-4193
Microsoft Internet Explorer 6.0 SP1 and possibly other versions allows remote attackers to cause a denial of service and possibly execute arbitrary code by instantiating COM objects as ActiveX controls, including 1 imskdic.dll Microsoft IME, 2 chtskdic.dll Microsoft IME, and 3 msoe.dll Outlook,...
Microsoft Windows Korean IME privilege escalation
Help subsystem is executed with LocalSystem privileges...
CVE-2005-4210
Opera before 8.51 on Windows with an installed Input Method Editor (IME) is vulnerable. Bookmarking a site with a long title may trigger a denial of service via persistent application crash. This vulnerability is documented across multiple sources (NVD/NVD mirror entries, JVNDB entry, CVE listing...
A very long title in a web page can cause a crash on startup
If a Windows user with Input Method Editor IME installedbookmarks a page with an extremely long element,Opera will crash upon next startup. Opera will not recoverfrom this on its own, so the user will not be able to startOpera.This affects Japanese users and others using IME for textinput. It als...
CVE-2000-0933
Technical details (affected products, exact root cause, vulnerable components, versions, or fixes) are not provided in the connected documents; monitor for updates.
CVE-2000-0933
The Input Method Editor IME in the Simplified Chinese version of Windows 2000 does not disable access to privileged functionality that should normally be restricted, which allows local users to gain privileges, aka the "Simplified Chinese IME State Recognition" vulnerability...
CVE-2000-0933
The Input Method Editor IME in the Simplified Chinese version of Windows 2000 does not disable access to privileged functionality that should normally be restricted, which allows local users to gain privileges, aka the "Simplified Chinese IME State Recognition" vulnerability...
New Dictionaries for Microsoft IMEs
Contains the new dictionaries published by Microsoft for Microsoft IMEs, IME dictionary is a data file which usually contains the terms in a domain to help improve input accuracy in that domain...