EUVD-2007-4732

Malware in sbrugna...

SYMSA-2007-009: RemoteDocs R-Viewer Code Execution and Sensitive Information Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2007-009 Advisory Title: RemoteDocs R-Viewer Code Execution and Sensitive Information Disclosure Author: Adam Baldiwn / [email protected]...

RemoteDocs R-Viewer multiple security vulnerabilities

Code execution with RDZ files. Information leak...

CVE-2007-4751

RemoteDocs R-Viewer before 1.6.3768 stores encrypted RDZ file data in unencrypted temporary files, which allows local users to obtain sensitive information by reading the temporary files...

CVE-2007-4750

Unspecified vulnerability in RemoteDocs R-Viewer before 1.6.3768 allows user-assisted remote attackers to execute arbitrary code via a crafted RDZ archive in which the first file has an executable extension...

Code injection

Unspecified vulnerability in RemoteDocs R-Viewer before 1.6.3768 allows user-assisted remote attackers to execute arbitrary code via a crafted RDZ archive in which the first file has an executable extension...

Information disclosure

RemoteDocs R-Viewer before 1.6.3768 stores encrypted RDZ file data in unencrypted temporary files, which allows local users to obtain sensitive information by reading the temporary files...

CVE-2007-4751

RemoteDocs R-Viewer before 1.6.3768 stores encrypted RDZ file data in unencrypted temporary files, which allows local users to obtain sensitive information by reading the temporary files...

CVE-2007-4750

Unspecified vulnerability in RemoteDocs R-Viewer before 1.6.3768 allows user-assisted remote attackers to execute arbitrary code via a crafted RDZ archive in which the first file has an executable extension...

CVE-2007-4751

CVE-2007-4751 affects RemoteDocs R-Viewer prior to 1.6.3768. The vulnerability arises from storing encrypted RDZ data in unencrypted temporary files, enabling local users to read sensitive information from leftover copies. The associated Symantec advisory also indicates a design flaw that can all...

CVE-2007-4750

Affected product: RemoteDocs R-Viewer (Windows) prior to 1.6.3768. Issue: design flaw in RDZ handling can execute code when opening a crafted RDZ archive, with the first file’s extension triggering execution; also exists potential leakage of unencrypted document copies from temporary directories....

R-Viewer < 1.6.3768 Multiple Vulnerabilities

R-Viewer, a secure document viewer from remotedocs.com, is installed on the remote host. According to the registry, the installation of R-Viewer on the remote Windows host allows arbitrary code to be executed without a user's knowledge and stores unencrypted copies of previously-opened documents ...