12432 matches found
CVE-2013-3847: Improper Restriction of Operations within the Bounds of a Memory Buffer
Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service memory...
CVE-2013-3850: Improper Restriction of Operations within the Bounds of a Memory Buffer
Microsoft Word 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document, aka "Word Memory Corruption Vulnerability."...
CVE-2013-3857: Improper Restriction of Operations within the Bounds of a Memory Buffer
Microsoft Word Automation Services in SharePoint Server 2010 SP1 and SP2, Word Web App 2010 SP1 and SP2 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1 and SP2, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial o...
Microsoft Office Compatibility Pack Remote Code Execution Vulnerabilities (2858300)
This host is missing an important security update according to Microsoft Bulletin MS13-073. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
DSquare Exploit Pack: D2SEC_SWA
Name| d2secswa ---|--- CVE| CVE-2013-4983 Exploit Pack| D2ExploitPack Description| Sophos Web Protection Appliance 3.8.1 Remote Code Execution Vulnerability Notes|...
Microsoft Word CVE-2013-3857 Remote Memory Corruption Vulnerability
Description Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...
Microsoft Word CVE-2013-3858 Remote Memory Corruption Vulnerability
Description Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...
Microsoft Word CVE-2013-3848 Remote Memory Corruption Vulnerability
Description Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...
Microsoft Word CVE-2013-3855 Remote Memory Corruption Vulnerability
Description Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...
Microsoft Word CVE-2013-3851 Remote Memory Corruption Vulnerability
Description Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...
MS13-072: Description of the security update for Office 2003: September 10, 2013
MS13-072: Description of the security update for Office 2003: September 10, 2013 Applies To Microsoft Office Basic Edition 2003 Microsoft Office Professional Edition 2003 Microsoft Office Professional Enterprise Edition 2003 Microsoft Office Small Business Edition 2003 Microsoft Office Standard...
Microsoft Word CVE-2013-3849 Remote Memory Corruption Vulnerability
Description Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...
Microsoft Word CVE-2013-3852 Remote Memory Corruption Vulnerability
Description Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...
Microsoft Excel CVE-2013-3159 XML Files Handling Information Disclosure Vulnerability
Description Microsoft Excel is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Excel 2003 SP3 Microsoft Excel 2007 SP3 Microsoft Excel 2010 SP1 32-bit editions...
Hand of Thief Linux Banking Trojan Not Ready For Primetime
Upon further examination, a new banking Trojan variant may not be as commercially viable as it was thought to be. Researchers at RSA Security have peeled back the layers this week on the Hand of Thief banking Trojan, a piece of malware that made headlines over the summer after it was thought to b...
Immunity Canvas: ACROBAT_TOOLBUTTON
Name| acrobattoolbutton ---|--- CVE| CVE-2013-3346 Exploit Pack| CANVAS Description| acrobattoolbutton Notes| CVE Name: CVE-2013-3346 VENDOR: Adobe NOTES: This exploit has been tested on: - Windows XP SP3 EN Acrobat Reader 11.0.2/11.0.1/10.1.4/10.1.2/10.1.1/10.1.0 Vulnerable versions include: =...
MS13-062: Vulnerability in Remote Procedure Call Could Allow Elevation of Privilege (2849470)
The remote host contains a flaw in the way that Windows handles asynchronous RPC requests, which can lead to elevation of privileges. An attacker could exploit this issue to run arbitrary code and take complete control of an affected system. C Tenable Network Security, Inc. include"compat.inc"; i...
MS Exchange Server Remote Code Execution Vulnerabilities (2876063)
This host is missing a critical security update according to Microsoft Bulletin MS13-061. OpenVAS Vulnerability Test $Id: secpodms13-061.nasl 5339 2017-02-18 16:28:22Z cfi $ MS Exchange Server Remote Code Execution Vulnerabilities 2876063 Authors: Antu Sanadi Copyright: Copyright c 2013 SecPod,...
Microsoft Exchange Server Remote Code Execution Vulnerabilities (2876063)
This host is missing a critical security update according to Microsoft Bulletin MS13-061. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Immunity Canvas: NOVELL_NICM
Name| novellnicm ---|--- CVE| CVE-2013-3956 Exploit Pack| CANVAS Description| nicm.sys Privilege Escalation Notes| CVE Name: CVE-2013-3956 Notes: The IOCTL handler for the nicm.sys driver in Novell Client IR5 does not validate pointers from usermode buffers. When passing in the IOCTL 0x143B6B an...