9865 matches found
Microsoft Internet Explorer CTable Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Microsoft Internet Explorer CMarkup Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Microsoft Internet Explorer CTableOMRowCache Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to how...
openSUSE Security Update : LibreOffice (openSUSE-SU-2014:1126-1)
This update fixes memory corruption vulnerability in DOCM import and data exposure using crafted OLE objects. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-540. The text...
LibreOffice: two security fixes (important)
This update fixes memory corruption vulnerability in DOCM import and data exposure using crafted OLE objects...
Fedora 20 : libreoffice-4.2.6.3-3.fc20 (2014-10732)
CVE-2014-3575 arbitrary file preview disclosure via ole2 objects The vulnerability allows an attacker to send a document which when opened will trigger the prompt to 'Update Links' but if the user cancels that prompt may still generate and insert into the document an OLE2 preview image of a file ...
PT-2014-1533
Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer affected versions not specified Description The issue is related to incorrect access to objects in memory, which can cause a memory error and allow an attacker to execute arbitrary code in the context of the current...
PT-2014-1592
Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 9 through 11 Description A remote code execution issue exists due to improper access to objects in memory, potentially causing memory corruption and allowing an attacker to execute arbitrary code in the...
PT-2014-1526
Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description A remote code execution issue exists due to improper access to objects in memory. This could corrupt memory, allowing an attacker to execute arbitrary code in the context of the...
Retrieving all tables and their columns at once MSSQL
In the Name of ALLAH the Most Beneficent and the Merciful Zenodermus, Ch3rn0by1 and Me was workinn on MSSQL.. when Zenodermus thought to make a DIOS for MSSQL.. previously at Код: http://websec.ca/kb/sqlinjection DIOS is under the heading Retrieving Multiple Tables and Columns Код: AND 1=0; BEGIN...
CVE-2014-5256
Node.js 0.8 before 0.8.28 and 0.10 before 0.10.30 does not consider the possibility of recursive processing that triggers V8 garbage collection in conjunction with a V8 interrupt, which allows remote attackers to cause a denial of service memory corruption and application crash via deep JSON...
DEBIAN-CVE-2014-5256
Node.js 0.8 before 0.8.28 and 0.10 before 0.10.30 does not consider the possibility of recursive processing that triggers V8 garbage collection in conjunction with a V8 interrupt, which allows remote attackers to cause a denial of service memory corruption and application crash via deep JSON...
CVE-2014-5256
Node.js 0.8 before 0.8.28 and 0.10 before 0.10.30 does not consider the possibility of recursive processing that triggers V8 garbage collection in conjunction with a V8 interrupt, which allows remote attackers to cause a denial of service memory corruption and application crash via deep JSON...
PT-2014-6370
Name of the Vulnerable Software and Affected Versions Node.js versions 0.8.0 through 0.8.27 Node.js versions 0.10.0 through 0.10.29 Description The issue allows remote attackers to cause a denial of service, resulting in memory corruption and application crash, via deep JSON objects. This occurs...
[SECURITY] Fedora 20 Update: zarafa-7.1.10-4.fc20
The Zarafa Collaboration Platform is a Microsoft Exchange replacement. The Open Source Collaboration provides an integration with your existing Linux mail server, native mobile phone support by ActiveSync compatibility and a webaccess with 'Look & Feel' similar to Outlook using Ajax. Including an...
CVE-2014-3575
The OLE preview generation in Apache OpenOffice before 4.1.1 and OpenOffice.org OOo might allow remote attackers to embed arbitrary data into documents via crafted OLE objects...
Design/Logic Flaw
The OLE preview generation in Apache OpenOffice before 4.1.1 and OpenOffice.org OOo might allow remote attackers to embed arbitrary data into documents via crafted OLE objects...
CVE-2014-3575
The OLE preview generation in Apache OpenOffice before 4.1.1 and OpenOffice.org OOo might allow remote attackers to embed arbitrary data into documents via crafted OLE objects...
PT-2014-5402
Name of the Vulnerable Software and Affected Versions Apache OpenOffice versions prior to 4.1.1 OpenOffice.org OOo versions prior to 4.1.1 Description The issue concerns the OLE preview generation, which might allow remote attackers to embed arbitrary data into documents via crafted OLE objects...
