MP3Info 0.8.5a - Buffer Overflow

MP3Info 0.8.5a - Buffer Overflow Waste of CPU clock N2 Exploit for: mp3info! Latest version Author: jsacco - [email protected] Vendor: http://ibiblio.org/mp3info/ No-one-cares-about programs! junk = "\x90\x90\x90\x90"8 shellcode =...

IBM WebSphere Application Server 7.0 < Fix Pack 31 Multiple Vulnerabilities

IBM WebSphere Application Server 7.0 before Fix Pack 31 appears to be running on the remote host. It is, therefore, potentially affected by the following vulnerabilities : - A flaw in the modrewrite module of Apache HTTP Server potentially allows a remote attacker to execute arbitrary code via...

IBM WebSphere Application Server 8.0 < Fix Pack 8 Multiple Vulnerabilities

IBM WebSphere Application Server 8.0 before Fix Pack 8 appears to be running on the remote host. It is, therefore, potentially affected by the following vulnerabilities : - A CSRF vulnerability exists in IBM WebSphere Application Server due to improper validation of portlets in the Administrative...

CVE-2014-0259

Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document, aka "Word Memory Corruption Vulnerability."...

Memory corruption

Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office Compatibility Pack SP3; Word Viewer; SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and Office Web Apps Server 2013 allow remote attackers to execute arbitrary code or cause a denial of...

Memory corruption

Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document, aka "Word Memory Corruption Vulnerability."...

DSquare Exploit Pack: D2SEC_LOREX

Name| d2seclorex ---|--- CVE| CVE-2014-1201 Exploit Pack| D2ExploitPack Description| Lorex Edge INetViewX ActiveX Buffer Overflow Vulnerability Notes|...

CVE-2014-0260

CVE-2014-0260 affects Microsoft Word and related Office components (Word Viewer, Office Web Apps, SharePoint, etc.). The issue arises from memory corruption while parsing crafted Office documents, enabling remote code execution or, per source, possible denial of service. The vulnerability is mapp...

CVE-2014-0259

CVE-2014-0259 : Word Memory Corruption Vulnerability affecting Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 via crafted Office documents. Root cause is memory corruption when parsing crafted files, enabling remote code execution and potential DoS. Affected products/themes align with ...

CVE-2014-0259

Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document, aka "Word Memory Corruption Vulnerability."...

CVE-2014-0259: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document, aka "Word Memory Corruption Vulnerability."...

Microsoft Office Word Remote Code Execution Vulnerabilities (2916605)

This host is missing an important security update according to Microsoft Bulletin MS14-001. OpenVAS Vulnerability Test $Id: secpodmswinwordms14-001.nasl 6715 2017-07-13 09:57:40Z teissa $ Microsoft Office Word Remote Code Execution Vulnerabilities 2916605 Authors: Antu Sanadi Copyright: Copyright...

CVE-2014-0258: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Word 2003 SP3 and 2007 SP3, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document, aka "Word Memory Corruption Vulnerability."...

PT-2014-1209

Name of the Vulnerable Software and Affected Versions Microsoft Word versions 2007 SP3 Office Compatibility Pack version SP3 Description The issue is related to errors that occur when processing specially crafted files, allowing a remote attacker to execute arbitrary code and gain full control of...

PT-2014-1210

Name of the Vulnerable Software and Affected Versions Microsoft Word versions 2003 SP3 through 2007 SP3 Office Compatibility Pack version SP3 Word Viewer affected versions not specified Description The issue is related to errors that occur when processing specially crafted files, allowing a remot...

Microsoft Office Word File Processing CVE-2014-0258 Remote Code Execution Vulnerability

Description Microsoft Office is prone to a remote code-execution vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in...

PT-2014-1207

Name of the Vulnerable Software and Affected Versions Microsoft Word versions 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT Office Compatibility Pack version SP3 Word Viewer affected versions not specified SharePoint Server versions 2010 SP1 and SP2 and 2013 Office Web Apps versions 201...

IBM DB2 9.7 < Fix Pack 9 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 9.7 running on the remote host is prior to Fix Pack 9. It is, therefore, affected by one or more of the following vulnerabilities : - The included software, GSKit, contains several errors related to SSL and TLS that can result in denial of...

Fedora Update for xdialog FEDORA-2013-22697

Check for the Version of xdialog OpenVAS Vulnerability Test Fedora Update for xdialog FEDORA-2013-22697 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

IBM WebSphere Service Registry and Repository 7.5 < 7.5.0 FP4 Script Injection

The version of IBM WebSphere Service Registry and Repository is 7.5 earlier than Fix Pack 4. Such versions are potentially vulnerable to a script injection attack in the WebSphere Service Registry and Repository Widgets. By tricking an authenticated user into opening a specially crafted link, a...