FFDshow - Overflow (SEH) Exception Leading to Null Pointer on Read

FFDshow SEH Exception leading to NULL pointer on Read Author: Matthew Bergin Website: http://berginpentesting.com/ Email: [email protected] Date: 09/02/10 Filename: C:\Program Files\K-Lite Codec Pack\FFDshow\ffdshow.ax Version: v1.1.3530.0 License: GNU General Public License Description...

IBM DB2 SYSIBMADM Multiple Vulnerabilities (Sep10)

The host is running IBM DB2 and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmdb2sysibmadmmultvulnsep10.nasl 7585 2017-10-26 15:03:01Z cfischer $ IBM DB2 SYSIBMADM Multiple Vulnerabilities Sep10 Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone Networks GmbH,...

DSquare Exploit Pack: D2SEC_IPRINT4

Name| d2seciprint4 ---|--- CVE| CVE-2010-1527 Exploit Pack| D2ExploitPack Description| Novell iPrint Client ienipp.ocx ActiveX Stack Overflow Notes|...

CVE-2009-3737

The Oracle Siebel Option Pack for IE ActiveX control does not properly initialize memory that is used by the NewBusObj method, which allows remote attackers to execute arbitrary code via a crafted HTML document...

DSquare Exploit Pack: D2SEC_STRUTS

Name| d2secstruts ---|--- CVE| CVE-2010-1870 Exploit Pack| D2ExploitPack Description| d2secstruts Notes|...

Design/Logic Flaw

The Oracle Siebel Option Pack for IE ActiveX control does not properly initialize memory that is used by the NewBusObj method, which allows remote attackers to execute arbitrary code via a crafted HTML document...

CVE-2009-3737

CVE-2009-3737 concerns Oracle Siebel Option Pack for IE ActiveX control. The vulnerability stems from improper memory initialization in the NewBusObj method, enabling remote code execution via a crafted HTML document. CERT and Red Hat entries corroborate remote execution potential and provide mit...

CVE-2009-3737

The Oracle Siebel Option Pack for IE ActiveX control does not properly initialize memory that is used by the NewBusObj method, which allows remote attackers to execute arbitrary code via a crafted HTML document...

Immunity Canvas: MS10_048

Name| ms10048 ---|--- CVE| CVE-2010-1897 Exploit Pack| CANVAS Description| ms10048 Notes| CVE Name: CVE-2010-1897 VENDOR: Microsoft Notes: Reliably exploits Windows XP through Windows 7 32-bit. When executed, this will get a callback that runs as Local/SYSTEM. This also exploits Windows 7 x64...

Immunity Canvas: MS10_060

Name| ms10060 ---|--- CVE| CVE-2010-1898 Exploit Pack| CANVAS Description| ms10060 Notes| CVE Name: CVE-2010-1898 VENDOR: Microsoft URL: http://www.microsoft.com/technet/security/bulletin/ms10-060.mspx Notes: This exploit reliably targets .Net 2 through 3.5. DEP/ASLR are not effective at preventi...

Immunity Canvas: MS10_059

Name| ms10059 ---|--- CVE| CVE-2010-2554 Exploit Pack| CANVAS Description| ms10059 Notes| References: http://www.microsoft.com/technet/security/bulletin/MS10-059.mspx CVE Name: CVE-2010-2554 VENDOR: Microsoft Notes: This exploit gain SYSTEM from NETWORKSERVICE or DefaultAppPool user by duplicatin...

CVE-2010-1900

Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and Works 9 do not properly handle malformed records in a Wo...

PT-2010-3513 · Microsoft · Windows Vista +3

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through R2 Microsoft Windows 7 Description: A denial of service issue exists due to improper validation of access control lists on kernel objects. Th...

Microsoft Windows Kernel Privilege Elevation Vulnerabilities (981852)

This host is missing an important security update according to Microsoft Bulletin MS10-047. OpenVAS Vulnerability Test $Id: secpodms10-047.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Windows Kernel Privilege Elevation Vulnerabilities 981852 Authors: Madhuri D Updated By: Madhuri D on...

PT-2010-3512 · Microsoft · Windows Vista +3

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through SP2 Description: The issue is related to object initialization during error handling, allowing local users to gain privileges via a crafted...

Microsoft Window MPEG Layer-3 Remote Code Execution Vulnerability (2115168)

This host is missing a critical security update according to Microsoft Bulletin MS10-052. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office Word Remote Code Execution Vulnerabilities (2269638)

This host is missing a critical security update according to Microsoft Bulletin MS10-056. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Security Update for the 2007 Microsoft Office System (KB2277947)

A security vulnerability exists in the 2007 Microsoft Office System and the Microsoft Office Compatibility Pack that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Microsoft Word Record RTF Parsing Engine Remote Memory Corruption Vulnerability

Description Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...

Microsoft Word Record RTF Parsing Engine Remote Heap Buffer Overflow Vulnerability

Description Microsoft Word is prone to a remote heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary-checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed...