Microsoft Office不安全文档签名漏洞

Microsoft Office 2007是一款微软开发的流行的办公处理应用程序。 Microsoft Office 2007不安全对基于XML文档的签名，远程攻击者可以利用漏洞伪造签名，使目标用户盲目信任文档。 Microsoft Office文档根据文件中docProps/core.xml的DublinCore metadata来携带META数据信息，在这些META数据信息中"LastModifiedBy", "creator"字段可通过"Office Button - Prepare -...

CVE-2007-6357: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Microsoft Office Access allows remote, user-assisted attackers to execute arbitrary code via a crafted Microsoft Access Database .mdb file. NOTE: due to the lack of details as of 20071210, it is not clear whether this issue is the same as CVE-2007-6026 or...

Microsoft Jet Engine MDB file ColumnName buffer overflow

Added: 11/23/2007 CVE: CVE-2007-6026 BID: 26468 OSVDB: 44880 Background The Microsoft Jet Database Engine provides data access functionality for a number of applications. Problem A buffer overflow vulnerability in the Microsoft Jet Database Engine could lead to command execution when a user opens...

Microsoft Jet Engine MDB file ColumnName buffer overflow

Added: 11/23/2007 CVE: CVE-2007-6026 BID: 26468 OSVDB: 44880 Background The Microsoft Jet Database Engine provides data access functionality for a number of applications. Problem A buffer overflow vulnerability in the Microsoft Jet Database Engine could lead to command execution when a user opens...

Microsoft Jet Engine MDB file ColumnName buffer overflow

Added: 11/23/2007 CVE: CVE-2007-6026 BID: 26468 OSVDB: 44880 Background The Microsoft Jet Database Engine provides data access functionality for a number of applications. Problem A buffer overflow vulnerability in the Microsoft Jet Database Engine could lead to command execution when a user opens...

Microsoft Jet Engine MDB file ColumnName buffer overflow

Added: 11/23/2007 CVE: CVE-2007-6026 BID: 26468 OSVDB: 44880 Background The Microsoft Jet Database Engine provides data access functionality for a number of applications. Problem A buffer overflow vulnerability in the Microsoft Jet Database Engine could lead to command execution when a user opens...

Microsoft Jet Database Engine MDB File Parsing Remote Buffer Overflow Vulnerability

Description Microsoft Jet Database Engine is prone to a buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data. Remote attackers can exploit this issue to execute arbitrary machine code in the context of a user running the application. Successful exploits will...

docusafe-sql.txt

DocuSafe "Search" SQL Injection Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: AurA, imm02tal Vendor: http://gartha.net Google Search: intitle:Corporate Contact System insert your command in the section "search" example: 'having 1=1-- Result: MicrosoftODB...

freeforums-sql.txt

http://Aria-Security.net Aria-Security Team ------------------------------------ Free Forums Sql Injection Vendor: http://www.nvecs.com/forums the search parameter hast an sql injection example: 'having 1=1-- result: MicrosoftODBC Microsoft Access Driver Syntax error missing operator in query...

Free Forums "search" Sql Injection

http://Aria-Security.net Aria-Security Team ------------------------------------ Free Forums Sql Injection Vendor: http://www.nvecs.com/forums the search parameter hast an sql injection example: 'having 1=1-- result: MicrosoftODBC Microsoft Access Driver Syntax error missing operator in query...

Microsoft Security Bulletin MS06-047 Vulnerability in Microsoft Visual Basic for Applications Could Allow Remote Code Execution (921645)

Microsoft Security Bulletin MS06-047 Vulnerability in Microsoft Visual Basic for Applications Could Allow Remote Code Execution 921645 Published: August 8, 2006 Version: 1.0 Summary Who Should Read this Document: Customers using Microsoft Office applications or applications that use Microsoft...

Keyif Portal v2.0 - Microsoft Access Driver ( MDB ) Download

title : Keyif Portal v2.0 - Microsoft Access Driver MDB Download - script site : http://www.keyifweb.com/ - Discovered : xoron - Cont@ct : [email protected] - Exploit : http://www.target.com/path/A9S7G6ASD790/ANKET/anket.mdb http://www.target.com/path/A9S7G6ASD790/HABER/keyifweb.mdb...

keyif.txt

title : Keyif Portal v2.0 - Microsoft Access Driver MDB Download - script site : http://www.keyifweb.com/ - Discovered : xoron - Cont@ct : [email protected] - Exploit : http://www.target.com/path/A9S7G6ASD790/ANKET/anket.mdb http://www.target.com/path/A9S7G6ASD790/HABER/keyifweb.mdb...

MT rmcek Toplist v2.2 Version Microsoft Access Driver ( MDB ) Download

Title : MT Цrьmcek Toplist v2.2 Version Microsoft Access Driver MDB Download - Site : http://www.Cyber-Warrior.org - Author : StorMBoY - Mail : [email protected] - Exploit : http://www.target.com/path/db/orumcektoplist.mdb - Code : Set baglanti = Server.CreateObject"ADODB.Connection"...

MS06-038: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (917284)

The remote host is running a version of Microsoft Office that could allow arbitrary code to be run on this host. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have him open it with Microsoft Office. C Tenable Network Security, Inc...

MT Örümcek Toplist v2.2 Version Microsoft Access Driver ( MDB ) Download

Title : MT rmcek Toplist v2.2 Version Microsoft Access Driver MDB Download - Site : http://www.Cyber-Warrior.org - Author : StorMBoY - Mail : [email protected] - Exploit : http://www.target.com/path/db/orumcektoplist.mdb - Code : Set baglanti = Server.CreateObject"ADODB.Connection" baglanti.Op...

ASP database plug horse small conference-vulnerability warning-the black bar safety net

lake2 （ http://lake2.0x54.org ） With the development of technology, ASP database plug horse also is not what fresh stuff, believe you played this. Oh, and that you have not met insert the asp code is spaces apart case? i.e. insertion of each of the characters between the There are spaces for? Now...

Microsoft Jet Database Engine buffer overflow

Added: 03/24/2006 CVE: CVE-2005-0944 BID: 12960 OSVDB: 15187 Background The Microsoft Jet Database Engine provides data access functionality for a number of applications. Problem An input validation vulnerability in the Microsoft Jet Database Engine could lead to command execution when a user ope...

Microsoft Jet Database Engine buffer overflow

Added: 03/24/2006 CVE: CVE-2005-0944 BID: 12960 OSVDB: 15187 Background The Microsoft Jet Database Engine provides data access functionality for a number of applications. Problem An input validation vulnerability in the Microsoft Jet Database Engine could lead to command execution when a user ope...

Microsoft Jet Database Engine buffer overflow

Added: 03/24/2006 CVE: CVE-2005-0944 BID: 12960 OSVDB: 15187 Background The Microsoft Jet Database Engine provides data access functionality for a number of applications. Problem An input validation vulnerability in the Microsoft Jet Database Engine could lead to command execution when a user ope...