Microsoft OLE buffer overflow

Overview A vulnerability in a way that various programs handle OLE objects could allow a remote attacker to execute arbitrary code on a vulnerable system. Description Microsoft OLE is a technology that allows applications to create and edit compound documents. Compound documents are those...

MS05-012: Vulnerability in OLE and COM Could Allow Code Execution (873333)

The remote host is running a version of Windows that is affected by two vulnerabilities when dealing with OLE and/or COM. These vulnerabilities could allow a local user to escalate his privileges and allow a remote user to execute arbitrary code on the remote host. To exploit these flaws, an...

Microsoft OLE Remote Buffer Overflow Vulnerability

Description Microsoft OLE is reported prone to a remote buffer overflow vulnerability. This issue arises because the application fails to perform boundary checks before copying user-supplied data to sensitive process buffers. A remote attacker may leverage this vulnerability to execute arbitrary...

CVE-2004-0503

Microsoft Outlook 2003 allows remote attackers to bypass the default zone restrictions and execute script within media files via a Rich Text Format RTF message containing an OLE object for the Windows Media Player, which bypasses Media Player's setting to disallow scripting and may lead to...

CVE-2004-0503

Microsoft Outlook 2003 is affected by CVE-2004-0503 due to a security bypass in RTF handling: lack of validation for certain OLE objects attached to RTF messages may bypass Media Player scripting restrictions and could lead to unprompted executable installation when combined with predictable-file...

Microsoft SQL Server 7.02000 JET Database Engine 4.0 - Buffer Overrun

Microsoft SQL Server 7.02000 JET Database Engine 4.0 - Buffer Overrun source: https://www.securityfocus.com/bid/7541/info Microsoft SQL Server is prone to an exploitable buffer overrun vulnerability via the Jet Database Engine. This can occur while the JET 4.0 OLE DB data provider is querying dat...

Microsoft SQL Server 7.0/2000 JET Database Engine 4.0 - Buffer Overrun

source: https://www.securityfocus.com/bid/7541/info Microsoft SQL Server is prone to an exploitable buffer overrun vulnerability via the Jet Database Engine. This can occur while the JET 4.0 OLE DB data provider is querying data supplied via a remote source and is due to insufficient bounds...

CVE-2002-0056

Buffer overflow in SQL Server 7.0 and 2000 allows remote attackers to execute arbitrary code via a long OLE DB provider name to 1 OpenDataSource or 2 OpenRowset in an ad hoc connection...

CVE-2002-0056

Buffer overflow in SQL Server 7.0 and 2000 allows remote attackers to execute arbitrary code via a long OLE DB provider name to 1 OpenDataSource or 2 OpenRowset in an ad hoc connection...

CVE-2002-0056

CVE-2002-0056 concerns Microsoft SQL Server 7.0 and 2000, where a buffer overflow is triggered by a long OLE DB provider name used with OpenDataSource or OpenRowset in an ad hoc connection. The resulting issue can allow an attacker to execute arbitrary code with the SQL Server service account’s p...

Microsoft Internet Explorer 5.04.0.1 - hhopen OLE Control Buffer Overflow

Microsoft Internet Explorer 5.04.0.1 - hhopen OLE Control Buffer Overflow Microsoft Internet Explorer 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4/Internet Explorer 4.0.1 for Windows 98/Windows NT 4.0 hhopen OLE Control Buffer Overflow Vulnerability source:...

Microsoft Internet Explorer 5.0/4.0.1 - hhopen OLE Control Buffer Overflow

Microsoft Internet Explorer 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4/Internet Explorer 4.0.1 for Windows 98/Windows NT 4.0 hhopen OLE Control Buffer Overflow Vulnerability source: https://www.securityfocus.com/bid/669/info There is a buffer overflow in the 1.0.0.1 version of the...

nt4-ole-clipboard-password.txt

Date: Fri, 29 Jan 1999 10:21:51 -0600 From: "Reed, David" To: [email protected] Subject: ole objects in a "secured" environment? fellow 'noids, background: since all of the major security flaws in windows nt 4.0 have been discovered who am i kidding? ;-, i'd like to point out a min...

Security Update for Microsoft OLE DB Driver 19 for SQL Server (KB5040712)

A security issue has been identified in the Microsoft OLE DB Driver 19 for SQL Server that could allow an attacker to compromise your system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart...

Security Update for Microsoft OLE DB Driver for SQL Server (KB5040711)

A security issue has been identified in the Microsoft OLE DB Driver for SQL Server that could allow an attacker to compromise your system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart you...

Microsoft OLE DB Driver 19 for SQL Server

Microsoft OLE DB Driver 19 for SQL Server...

Security Update for Microsoft OLE DB Driver 19 for SQL Server (KB5037573)

A security issue has been identified in the Microsoft OLE DB Driver 19 for SQL Server that could allow an attacker to compromise your system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart...

Security Update for Microsoft OLE DB Driver for SQL Server (KB5037572)

A security issue has been identified in the Microsoft OLE DB Driver for SQL Server that could allow an attacker to compromise your system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart you...

Microsoft OLE DB Driver 18 for SQL Server

Microsoft OLE DB Driver 18 for SQL Server...

Security Update for Windows Server 2003 (KB943055)

A security issue has been identified that could allow an attacker to remotely compromise your Windows-based system using Object Linking and Embedding OLE Automation and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item,...