2205 matches found
Microsoft PowerPoint Malformed Record Remote Code Execution Vulnerability
Description Microsoft PowerPoint is prone to a remote code-execution vulnerability. The issue is related to how the application processes malformed record data in PowerPoint documents. To exploit this issue, an attacker must entice a victim to open a malicious PowerPoint file. If the exploit is...
Microsoft Windows Media Player Malformed PNG Remote Code Execution Vulnerability
Description Microsoft Windows Media Player is prone to a remote code-execution vulnerability. This vulnerability is related to handling of malicious PNG images. PNG images may be embedded in Windows Media Player skin files. Attackers may be able to exploit this issue by causing the application to...
Microsoft Internet Explorer COM Object Instantiation Code Execution Vulnerability Variant
Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability that is related to the instantiation of COM objects. This issue results from a design error. The vulnerability arises because of the way Internet Explorer tries to instantiate certain COM objects as ActiveX...
Microsoft Windows MHTML URI Buffer Overflow Vulnerability
Description Microsoft Windows is prone to a remote buffer-overflow vulnerability in 'INETCOMM.DLL'. The library fails to properly bounds-check user-supplied input data before copying it into an insufficiently sized memory buffer. Remote attackers may exploit this issue to execute arbitrary machin...
Symantec AntiVirus Remote Stack Buffer Overflow Vulnerability
Description Multiple Symantec products are prone to a remote stack buffer-overflow vulnerability. This issue allows remote attackers to execute arbitrary machine code with SYSTEM-level privileges, facilitating the complete compromise of affected computers. Symantec AntiVirus Corporate Edition 10....
Microsoft Word Malformed Object Pointer Remote Code Execution Vulnerability
Description Microsoft Word is prone to a remote code-execution vulnerability. The issue arises because Word fails to properly handle malformed object pointers. Reports indicate that this issue can allow remote attackers to execute arbitrary code on a vulnerable computer by supplying a malicious...
Microsoft Exchange Server Calendar Remote Code Execution Vulnerability
Description Microsoft Exchange Server is prone to a vulnerability that may let attackers execute code remotely. This issue is exposed when the server handles emails that contain malicious calendar data that is included in meeting requests. If the issue is successfully exploited, this could...
Microsoft Internet Explorer COM Object Instantiation Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability that is related to the instantiation of COM objects. This issue results from a design error. The vulnerability arises because of the way Internet Explorer tries to instantiate certain COM objects as ActiveX...
Microsoft Internet Explorer Double Byte Character Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability. This is related to an error in how double-byte character set DBCS characters are handled in Internationalized Domain Names IDN included in URLS from rendered HTML content. An attacker could exploit this issue v...
Microsoft Internet Explorer HTML Tag Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability. This is related to the handling of certain HTML tags. Attackers could exploit this issue via a malicious web page to execute arbitrary code in the context of the currently logged-in user. They could also use HT...
Microsoft Outlook Express Windows Address Book File Parsing Buffer Overflow Vulnerability
Description Microsoft Outlook Express is prone to a remote buffer-overflow vulnerability. This vulnerability presets itself when the application processes a specially crafted Windows Address Book .wab file. An attacker may exploit this issue to execute arbitrary code in the context of a user...
Microsoft Internet Explorer CreateTextRange Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is susceptible to a remote code-execution vulnerability. This issue is due to a flaw that results in an invalid table-pointer dereference. Remote attackers may exploit this issue to crash affected browsers or to execute arbitrary machine code in the context...
Microsoft Excel Malformed Record Remote Code Execution Vulnerability
Description Microsoft Excel is prone to a remote code-execution vulnerability. This issue may be triggered when a Excel document with malformed record data is opened. Technologies Affected Avaya Modular Messaging MAS 3.0.0 Microsoft Excel 2000 Microsoft Excel 2000 SP2 Microsoft Excel 2000 SP3...
Microsoft Excel Malformed Parsing Format File Remote Code Execution Vulnerability
Description Microsoft Excel is prone to a remote code-execution vulnerability. This issue may be triggered when a malformed Excel document is opened. Technologies Affected Avaya Modular Messaging MAS 3.0.0 Microsoft Excel 2000 Microsoft Excel 2000 SP2 Microsoft Excel 2000 SP3 Microsoft Excel 2000...
Microsoft Excel Malformed Formula Size Remote Code Execution Vulnerability
Description Microsoft Excel is prone to a remote code-execution vulnerability. This issue may be triggered when an Excel document with a malformed formula size is opened. Technologies Affected Avaya Modular Messaging MAS 3.0.0 Microsoft Excel 2000 Microsoft Excel 2000 SP2 Microsoft Excel 2000 SP3...
Microsoft Office Routing Slip Processing Remote Buffer Overflow Vulnerability
Description Microsoft Office is prone to a remote buffer-overflow vulnerability. This vulnerability occurs when the application handles a specially crafted document. A successful attack can result in a remote compromise in the context of an affected user. Update: This issue is known to be exploit...
Microsoft Windows Web Client Buffer Overflow Vulnerability
Description Microsoft Windows Web Client is prone to a buffer overflow. Successful exploitation could allow arbitrary code execution with System privileges. Technologies Affected Microsoft Windows Server 2003 Datacenter Edition Microsoft Windows Server 2003 Datacenter Edition Itanium Microsoft...
Microsoft Windows Media Player Bitmap Handling Buffer Overflow Vulnerability
Description Microsoft Windows Media Player is prone to a remote buffer-overflow vulnerability. The vulnerability arises when the application handles a skin file containing a specially crafted bitmap image. This issue can also be triggered by just supplying a malicious bitmap to the application...
Microsoft Windows Media Player Plugin Buffer Overflow Vulnerability
Description The Microsoft Windows Media Player plugin for non-Microsoft browsers is prone to a buffer-overflow vulnerability. The application fails to do proper boundary checks on user-supplied data before using it in a finite-sized buffer. An attacker can exploit this issue to execute arbitrary...
Microsoft Outlook / Microsoft Exchange TNEF Decoding Remote Code Execution Vulnerability
Description Microsoft Exchange Server and Outlook email clients are prone to a remote code-execution vulnerability. This vulnerability presents itself when the applications decode a message containing a specially crafted TNEF MIME attachment. Successful exploitation may result in arbitrary code...