131 matches found
Office Product Key Finder 1.5.4 - Denial of Service (PoC)
Office Product Key Finder 1.5.4 - Denial of Service PoC Exploit Title: Office Product Key Finder 1.5.4 - Denial of Service PoC Date: 2020-01-06 Vendor Homepage: http://www.nsauditor.com/ Software Link: http://www.nsauditor.com/downloads/officeproductkeyfindersetup.exe Exploit Author: Gokkul Teste...
CVE-2018-0862
Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is...
openSUSE Security Update : clamav (openSUSE-2015-366)
The ClamAV antivirus engine was updated to version 0.98.7 to fix several security and non-security issues. The following vulnerabilities were fixed bsc929192 : - CVE-2015-2170: Fix crash in upx decoder with crafted file. Discovered and patch supplied by Sebastian Andrzej Siewior. - CVE-2015-2221:...
Microsoft-Office-2003-HomePro
Exploit: Microsoft Office 2003 Home/Pro 0day - Tested on XP SP1,2.3 Authors: b33f Ruben Boonen g11tch Chris Hodges import binascii filename = "evil.doc" ----------------------------------------------------------------------------------- File Structure...
Microsoft Office 2003 Web Component Memory Access Violation Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26405/info Microsoft Office Web Component is prone to a denial-of-service vulnerability because of a memory access violation. Attackers can exploit this issue to crash Internet Explorer and deny service to legitimate user...
Microsoft Works 8.0 File Converter Field Length Remote Code Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27659/info Microsoft Works File Converter is prone to a remote code-execution vulnerability because it fails to adequately validate user-supplied input. An attacker could exploit this issue by enticing a victim to open a...
MS Word Record Parsing Buffer Overflow (MS09-027)
No description provided by source. MS Word Record Parsing Buffer OverflowMS-09-027 Vulnerble application MS office 2003 Tested on XP SP2 - MS Ofice 2003 v. 11.5604.5606 Bug Found By Wushi of team509 !/usr/bin/python import sys import zlib windows/exec - CMD=calc.exe shellcode =...
Microsoft Office 2003 - Denial of Service (DoS) Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22716/info Microsoft Office is prone to a denial-of-service condition when the malformed WMF file is viewed in an Office application. Exploiting this issue allows remote attackers to crash applications, denying service to...
Microsoft Office 2003 Embedded Shockwave Flash Object Security Bypass Weakness
No description provided by source. source: http://www.securityfocus.com/bid/18583/info Microsoft Office is prone to a weakness that may allow remote attackers to execute arbitrary script code contained in Shockwave Flash Objects without first requiring confirmation from users. A successful attack...
MS Word - Record Parsing Buffer Overflow MS09-027 (meta)
No description provided by source. $Id: ms09-027 10477 2011-04-13 11:59:02Z mc $ This file is not part of the Metasploit Framework and may not be subject to redistribution and commercial restrictions. TODO some testing to find the real banned characters and maxlen add those parameters to the .rb...
Microsoft Word RTF pFragments Stack Buffer Overflow (File Format)
No description provided by source. $Id: ms10087rtfpfragmentsbof.rb 11875 2011-03-04 08:39:48Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
ProduKey - Recover lost Windows product key (CD-Key) and Office 2003/2007 product key
ProduKey is a small utility that displays the ProductID and the CD-Key of Microsoft Office Microsoft Office 2003, Microsoft Office 2007, Windows Including Windows 7 and Windows Vista, Exchange Server, and SQL Server installed on your computer. You can view this information for your current runnin...
Microsoft Office Remote Code Execution Vulnerability (2908005)
This host is missing a critical security update according to Microsoft Bulletin MS13-096. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Office WPD File CVE-2013-1324 Remote Memory Corruption Vulnerability
Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. Successful exploits will allow attackers to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in...
Microsoft Word远程内存破坏漏洞(CVE-2013-3858)(MS13-072)
BUGTRAQ ID: 62226 CVECAN ID: CVE-2013-3858 Microsoft Word 属于办公软件是微软公司的一个文字处理器应用程序。 受影响的 Microsoft Office 软件分析特制文件的方式中存在远程执行代码漏洞。成功利用这些漏洞的攻击者可以完全控制受影响的系统。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 0 Microsoft Office 2010 Microsoft Office 2007 Microsoft Office 2003 临时解决方法： 安装和配置 MOICE 以 成为 .doc...
Microsoft Word CVE-2013-3160 XML Files Handling Information Disclosure Vulnerability
Description Microsoft Word is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Office 2003 SP1 Microsoft Office 2003 SP2 Microsoft Office 2003 SP3 Microsoft Office 20...
More on Office 2003 Zero Day Vulnerability Patch
This week’s patch and security advisory for a vulnerability in Microsoft Office is the perfect example of why enterprise administrators need to take Microsoft’s criticality ratings as a suggestion and not gospel. Microsoft pushed security update MS13-051 through on Tuesday with a rating of...
Buffer overflow
Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading to improper memory allocation, aka "Office Buffer Overflow Vulnerability."...
Microsoft XML Core Services Remote Code Execution Vulnerabilities (2756145)
This host is missing a critical security update according to Microsoft Bulletin MS13-002. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Word RTF File 'listoverridecount'远程代码执行漏洞（MS12-079)
BUGTRAQ ID: 56834 CVECAN ID: CVE-2012-2539 Microsoft Word 属于办公软件是微软公司的一个文字处理器应用程序。 Microsoft Word 在解析listoverridecount相关的RTF（Rich Text Format）数据时存在漏洞。通过诱使用户浏览恶意网站或在e-mail邮件中打开特定格式的rtf文件，未经身份验证的远程攻击者可利用此漏洞以当前用户权限执行任意代码。 0 Microsoft Office 2003 Professional Edition Microsoft Office Word Viewer...