Microsoft Office multiple security vulnerabilities

Multiple memory corruptions in Excel and PowerPoint, unsafe DLL loading, memory corruption in Office Graphic...

Design/Logic Flaw

Untrusted search path vulnerability in Microsoft Office XP SP3, Office 2003 SP3, and Office 2007 SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka "Office Component Insecure Library...

Google Picasa Insecure Library Loading Arbitrary Code Execution Vulnerability (Windows)

The host is running Google Picasa and is prone to arbitrary code execution vulnerability. OpenVAS Vulnerability Test $Id: gbgooglepicasaarbitrarycodeexecvulnwin.nasl 7019 2017-08-29 11:51:27Z teissa $ Google Picasa Insecure Library Loading Arbitrary Code Execution Vulnerability Windows Authors:...

Microsoft Word .docx Insecure Library Loading (MS11-023; CVE-2011-0107)

Microsoft Word is a popular word processing software. A remote code execution vulnerability has been reported in the way that Microsoft Word handles the loading of DLL files. The vulnerability is caused when Microsoft Office Word incorrectly restricts the path used for loading external libraries...

Antamedia Internet Cafe Software 7.1 Insecure Permissions/DLL Loading

Summary Internet Cafe Software – Cyber Cafe software is a worldwide top selling solution for CyberCafe management and game center control. It protects your computers from unauthorized usage and helps with customer billing. Many features like POS, print manager, console controller, smart cards,...

Google Picasa 3.x 不安全库装载任意代码执行漏洞

CVE ID: CVE-2011-0458 Google Picasa一款可帮助您在计算机上立即找到、修改和共享所有图片的图象浏览器。 Google Picasa在实现上存在不安全库加载漏洞，远程攻击者可利用此漏洞控制用户系统。 此漏洞源于应用程序以不安全的方式加载库。可通过"Locate on Disk"功能诱使用户打开位于远程WebDAV或SMB共享上的某些文件加载任意库。 Google Picasa 3.x 厂商补丁： Google ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.google.com...

Microsoft Office Groove Insecure Library Loading

Added: 03/28/2011 CVE: CVE-2010-3146 BID: 42695 OSVDB: 67484 Background Microsoft Office Groove is a collaboration-based software application that allows teams and organizations to work together regardless of physical or network location. Problem Microsoft Office Groove has a vulnerability due to...

Microsoft Office Groove Insecure Library Loading

Added: 03/28/2011 CVE: CVE-2010-3146 BID: 42695 OSVDB: 67484 Background Microsoft Office Groove is a collaboration-based software application that allows teams and organizations to work together regardless of physical or network location. Problem Microsoft Office Groove has a vulnerability due to...

Microsoft Office Groove Insecure Library Loading

Added: 03/28/2011 CVE: CVE-2010-3146 BID: 42695 OSVDB: 67484 Background Microsoft Office Groove is a collaboration-based software application that allows teams and organizations to work together regardless of physical or network location. Problem Microsoft Office Groove has a vulnerability due to...

Microsoft Office Groove Insecure Library Loading

Added: 03/28/2011 CVE: CVE-2010-3146 BID: 42695 OSVDB: 67484 Background Microsoft Office Groove is a collaboration-based software application that allows teams and organizations to work together regardless of physical or network location. Problem Microsoft Office Groove has a vulnerability due to...

Picasa may insecurely load executable files

Overview Picasa may use unsafe methods for determining how to load executables .exe Picasa is a software for viewing and managing photos. Picasa loads certain executables when using the "Locate on Disk" function. Picasa contains an issue with the file search path, which may insecurely load...

Microsoft Remote Desktop Connection Insecure Library Injection

Added: 03/14/2011 CVE: CVE-2011-0029 BID: 46678 OSVDB: 71014 Background The Windows Remote Desktop allows desktop access to one Windows computer from another Windows computer. Problem A library loading vulnerability in the Remote Desktop Client allows arbitrary command execution when a user opens...

Design/Logic Flaw

Untrusted search path vulnerability in DirectShow in Microsoft Windows Vista SP1 and SP2, Windows 7 Gold and SP1, Windows Server 2008 R2 and R2 SP1, and Windows Media Center TV Pack for Windows Vista allows local users to gain privileges via a Trojan horse DLL in the current working directory, as...

Design/Logic Flaw

Untrusted search path vulnerability in the client in Microsoft Remote Desktop Connection 5.2, 6.0, 6.1, and 7.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .rdp file, aka "Remote Desktop Insecure...

CVE-2011-0032

Untrusted search path vulnerability in DirectShow in Microsoft Windows Vista SP1 and SP2, Windows 7 Gold and SP1, Windows Server 2008 R2 and R2 SP1, and Windows Media Center TV Pack for Windows Vista allows local users to gain privileges via a Trojan horse DLL in the current working directory, as...

CVE-2011-0029

Untrusted search path vulnerability in the client in Microsoft Remote Desktop Connection 5.2, 6.0, 6.1, and 7.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .rdp file, aka "Remote Desktop Insecure...

Microsoft Windows multiple security vulnerabilities

Unsafe library loading, code execution with .dvr-ms files...

Microsoft Groove Remote Code Execution Vulnerability (2494047)

This host is missing a critical security update according to Microsoft Bulletin MS11-016. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Remote Desktop Connection Client DLL Loading Arbitrary Code Execution Vulnerability

Description Microsoft Remote Desktop Connection client is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a specially...

Microsoft Remote Desktop Client Insecure Library Loading (MS11-017; CVE-2011-0029)

The Remote Desktop feature in Windows enables access to all of the programs, resources, and accessories on a user's computer from another Windows-based computer. Once connected, Remote Desktop gives mouse and keyboard control over the computer while showing everything that is happening on the...