Lucene search
K

21 matches found

The Hacker News
The Hacker News
added 2020/11/12 10:11 a.m.2 views

MISSIONS — The Next Level of Interactive Developer Security Training

If organizations want to get serious about software security, they need to empower their engineers to play a defensive role against cyberattacks as they craft their code. The problem is, developers haven't had the most inspiring introduction to security training over the years, and anything that...

5.8AI score
Exploits0
Saint
Saint
added 2007/05/04 12:0 a.m.33 views

Microsoft Step-by-Step Interactive Training bookmark buffer overflow

Added: 05/04/2007 CVE: CVE-2006-3448 BID: 22484 OSVDB: 31883 Background Microsoft Step-by-Step Interactive Training is the engine used by various training programs. Problem A buffer overflow vulnerability in Microsoft Step-by-Step Interactive Training allows command execution when a specially...

9.3CVSS6.8AI score0.62544EPSS
Exploits4
Saint
Saint
added 2007/05/04 12:0 a.m.29 views

Microsoft Step-by-Step Interactive Training bookmark buffer overflow

Added: 05/04/2007 CVE: CVE-2006-3448 BID: 22484 OSVDB: 31883 Background Microsoft Step-by-Step Interactive Training is the engine used by various training programs. Problem A buffer overflow vulnerability in Microsoft Step-by-Step Interactive Training allows command execution when a specially...

9.3CVSS6.9AI score0.62544EPSS
Exploits4
Saint
Saint
added 2007/05/04 12:0 a.m.30 views

Microsoft Step-by-Step Interactive Training bookmark buffer overflow

Added: 05/04/2007 CVE: CVE-2006-3448 BID: 22484 OSVDB: 31883 Background Microsoft Step-by-Step Interactive Training is the engine used by various training programs. Problem A buffer overflow vulnerability in Microsoft Step-by-Step Interactive Training allows command execution when a specially...

9.3CVSS6.8AI score0.62544EPSS
Exploits4
Saint
Saint
added 2007/05/04 12:0 a.m.35 views

Microsoft Step-by-Step Interactive Training bookmark buffer overflow

Added: 05/04/2007 CVE: CVE-2006-3448 BID: 22484 OSVDB: 31883 Background Microsoft Step-by-Step Interactive Training is the engine used by various training programs. Problem A buffer overflow vulnerability in Microsoft Step-by-Step Interactive Training allows command execution when a specially...

9.3CVSS6.9AI score0.62544EPSS
Exploits4
Check Point Advisories
Check Point Advisories
added 2007/02/15 12:0 a.m.4 views

Microsoft Step-by-Step Interactive Training Buffer Overflow (MS07-005; CVE-2006-3448)

Step-by-Step Interactive Training is an engine for interactive training titles provided by Microsoft Press and other vendors. By using the Step-by-Step Interactive Training user interface Bookmark link files .CBO,.CBL,.CBM are created. These files allow easier access to a particular topic, and...

9.3CVSS6.9AI score0.62544EPSS
Exploits4
CERT
CERT
added 2007/02/14 12:0 a.m.24 views

Microsoft Step-by-Step Interactive Training contains a buffer overflow

Overview Microsoft Step-by-Step Interactive Training contains a buffer overflow vulnerability. If successfully exploited, this vulnerability may allow an attacker to execute arbitrary code. Description Microsoft Step-by-Step Interactive Training is a training program developed by MIcrosoft. It is...

9.3CVSS7.5AI score0.62544EPSS
Exploits4References6
CVE
CVE
added 2007/02/13 8:0 p.m.40 views

CVE-2006-3448

Microsoft Step-by-Step Interactive Training contains a buffer overflow vulnerability (CVE-2006-3448) in the bookmark link handling for .CBO, .CBL, or .CBM files. Exploitation requires a user to open a crafted bookmark file, potentially allowing remote code execution on affected Windows systems (W...

9.3CVSS7.5AI score0.62544EPSS
Exploits4References11Affected Software1
Tenable Nessus
Tenable Nessus
added 2007/02/13 12:0 a.m.41 views

MS07-005: Vulnerability in Step-by-Step Interactive Training Could Allow Remote Code Execution (923723)

The remote host is running a version of Microsoft Step-by-Step Interactive Training that contains a flaw that could lead to remote code execution. To exploit this flaw, an attacker would need to trick a user on the remote host into opening a malformed file with the affected application. Tenable...

9.3CVSS5.6AI score0.62544EPSS
Exploits4References2
Symantec
Symantec
added 2007/02/13 12:0 a.m.16 views

Microsoft Step-by-Step Interactive Training Buffer Overflow Vulnerability

Description Microsoft Step-by-Step Interactive Training is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. An attacker could exploit this issue by enticing a victim to load a bookmark...

7.9AI score
Exploits0References1Affected Software1
securityvulns
securityvulns
added 2007/02/13 12:0 a.m.60 views

Microsoft Security Bulletin MS07-005

Microsoft Security Bulletin MS07-005 Vulnerability in Step-by-Step Interactive Training Could Allow Remote Code Execution 923723 Published: February 13, 2007 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows and have Step-by-Step Interactive Training installe...

9.3CVSS0.1AI score0.62544EPSS
Exploits4
securityvulns
securityvulns
added 2005/06/15 12:0 a.m.44 views

iDEFENSE Security Advisory 06.14.05: Microsoft Windows Interactive Training Buffer Overflow Vulnerability

Microsoft Windows Interactive Training Buffer Overflow Vulnerability iDEFENSE Security Advisory 06.14.05 www.idefense.com/application/poi/display?id=262&type=vulnerabilities June 14, 2005 I. BACKGROUND Microsoft Interactive Training is an application included with some OEM versions of Windows XP...

7.5CVSS1.1AI score0.40354EPSS
Exploits0
securityvulns
securityvulns
added 2005/06/15 12:0 a.m.24 views

Microsoft Step-by-Step Interactive Training buffer overflow

Buffer overflow on link files .cbo, .cbl, .cbm parsing...

5.1AI score
Exploits0References2
Cvelist
Cvelist
added 2005/06/14 4:0 a.m.18 views

CVE-2005-1212

Buffer overflow in Microsoft Step-by-Step Interactive Training orun32.exe allows remote attackers to execute arbitrary code via a bookmark link file .cbo, cbl, or .cbm extension with a long User field...

7.7AI score0.40354EPSS
Exploits0References6
CVE
CVE
added 2005/06/14 4:0 a.m.52 views

CVE-2005-1212

CVE-2005-1212 is a buffer overflow in Microsoft Step-by-Step Interactive Training (orun32.exe). A crafted bookmark link file with a long User field in extensions .cbo/.cbl/.cbm allows remote code execution, running with the caller’s privileges. The issue affects Step-by-Step Interactive Training ...

7.5CVSS7.8AI score0.40354EPSS
Exploits0References6Affected Software7
Tenable Nessus
Tenable Nessus
added 2005/06/14 12:0 a.m.30 views

MS05-031: Vulnerability in Step-by-Step Interactive Training (898458)

The remote host is running a version of Microsoft Step-by-Step Interactive Training that contains a flaw that could lead to remote code execution. To exploit this flaw, an attacker would need to trick a user on the remote host into opening a malformed file with the affected application. C Tenable...

7.5CVSS5.6AI score0.40354EPSS
Exploits0References2
Microsoft Security Update
Microsoft Security Update
added 1970/01/01 12:0 a.m.8 views

Security Update for Windows Server 2003 for Itanium-based Systems (KB923723)

A security issue has been identified in the Step-by-Step Interactive Training application that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you ma...

3AI score
Exploits0
Microsoft Security Update
Microsoft Security Update
added 1970/01/01 12:0 a.m.8 views

Security Update for Windows Server 2003 x64 Edition (KB923723)

A security issue has been identified in the Step-by-Step Interactive Training application that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you ma...

3AI score
Exploits0
Microsoft Security Update
Microsoft Security Update
added 1970/01/01 12:0 a.m.8 views

Security Update for Windows XP x64 Edition (KB923723)

A security issue has been identified in the Step-by-Step Interactive Training application that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you ma...

2.8AI score
Exploits0
Microsoft Security Update
Microsoft Security Update
added 1970/01/01 12:0 a.m.11 views

Security Update for Windows Server 2003 64-bit Itanium Edition (KB898458)

A security issue has been identified in the Step-by-Step Interactive Training application that could allow an attacker to compromise your Microsoft Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this...

2.7AI score
Exploits0
Rows per page
Query Builder