1718 matches found
KB4493470: Windows 10 Version 1607 and Windows Server 2016 April 2019 Security Update
The remote Windows host is missing security update 4493470. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Windows improperly handles calls to the LUAFV driver luafv.sys...
DEBIAN-CVE-2019-1788
A vulnerability in the Object Linking & Embedding OLE2 file scanning functionality of Clam AntiVirus ClamAV Software versions 0.101.1 and prior could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a lack of prope...
The vulnerability of the processmetadata function in the GNU Libextractor library is related to the pointer manipulation during the processing of OLE files. This allows an attacker to trigger a service failure or disclose protected information using a specially created OLE file.
The vulnerability of the processmetadata function in the GNU Libextractor library is related to the assignment of a null pointer during the processing of OLE files. Exploiting this vulnerability could allow an attacker to cause service failures or reveal memory contents using a specially crafted...
March 12, 2019—KB4489891 (Monthly Rollup)
None None...
March 12, 2019—KB4489881 (Monthly Rollup)
None None...
March 12, 2019—KB4489880 (Monthly Rollup)
None None...
March 12, 2019—KB4489883 (Security-only update)
None None...
RSAC 2019: Microsoft Zero-Day Allows Exploits to Sneak Past Sandboxes
SAN FRANCISCO – A previously unknown bug in Microsoft Office has been spotted being actively exploited in the wild; it can be used to bypass security solutions and sandboxes, according to findings released at the RSA Conference 2019. The bug exists in the OLE file format and the way it’s handled ...
Antenna House Rainbow PDF Office server document converter getSummaryInformation NumProperties code execution vulnerability
Summary A heap overflow vulnerability exists in the PowerPoint document conversion function of Rainbow PDF Office Server Document Converter V7.0 Pro R1 7,0,2018,1113. While parsing Document Summary Property Set stream, the getSummaryInformation function is incorrectly checking the correlation...
Microsoft Windows OLE Obfuscated Automation Array Remote Code Execution (CVE-2014-6332)
A new obfuscation technique of remote code execution vulnerability has been reported in Microsoft Windows Object Linking and Embedding OLE. The vulnerability is due to an improper access to memory objects by Internet Explorer. A remote attacker can exploit this issue by enticing target users to...
February 12, 2019—KB4486993 (Security-only update)
None None...
February 12, 2019—KB4487028 (Security-only update)
None None...
DEBIAN-CVE-2019-7156
In libdoc through 2019-01-28, calcFileBlockOffset in ole.c allows division by zero...
Updated libextractor packages fix security vulnerabilities
Several vulnerabilities were discovered in libextractor which may lead to denial of service or memory disclosure if a malformed OLE file is processed CVE-2018-20430, CVE-2018-20431...
MGASA-2019-0013 Updated libextractor packages fix security vulnerabilities
Several vulnerabilities were discovered in libextractor which may lead to denial of service or memory disclosure if a malformed OLE file is processed CVE-2018-20430, CVE-2018-20431...
[SECURITY] [DSA 4361-1] libextractor security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4361-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 28, 2018 https://www.debian.org/security/faq -...
Debian: Security Advisory (DSA-4361-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
libxls Denial of Service Vulnerability
libxls is a C library for reading Exce xls files. A denial of service vulnerability exists in the 'readMSATbody' function of the ole.c file in libxls version 1.4.0, which can be exploited by an attacker to cause a denial of service application crash with the help of a specially crafted file...
UBUNTU-CVE-2018-20452
The readMSATbody function in ole.c in libxls 1.4.0 has an invalid free that allows attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, because of inconsistent memory management new versus free in ole2readheader in ole.c...