Cross site scripting

Cross-site scripting XSS vulnerability in RTEpopuplink.asp in Web Wiz Rich Text Editor RTE 3.x and 4.x before 4.03 allows remote attackers to inject arbitrary web script or HTML via the email parameter...

CVE-2008-3367

CVE-2008-3367 describes a cross-site scripting (XSS) vulnerability in Web Wiz Rich Text Editor (RTE) 3.x and 4.x before 4.03, where attacker-supplied input in the email parameter to RTE_popup_link.asp can inject arbitrary script or HTML. Affected software is the Web Wiz RTE web component; root ca...

Multiple Cross-Site Scripting Vulnerabilities in Web Wiz Rich Text Editor version 4.02

Saved - 27-07-2008/13:10:02 .: Multiple Cross-Site Scripting Vulnerabilities in Web Wiz Rich Text Editor version 4.02 .: Author CSDT .: Affected versions http://www.webwizguide.com/ - Web Wiz Rich Text Editor RTE 4.02 .: Credit The disclosure of these issues has been credited to autehoker of CSDT...

webwiz-xss.txt

Saved - 27-07-2008/13:10:02 .: Multiple Cross-Site Scripting Vulnerabilities in Web Wiz Rich Text Editor version 4.02 .: Author CSDT .: Affected versions http://www.webwizguide.com/ - Web Wiz Rich Text Editor RTE 4.02 .: Credit The disclosure of these issues has been credited to autehoker of CSDT...

Adobe AIR Detection

Adobe AIR is installed on the remote host. It is a browser- independent runtime environment that supports HTML, JavaScript, and Flash code and provides for Rich Internet Applications RIAs. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid32504; scriptversion"1.20";...

CVE-2008-1091

Unspecified vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via a Rich Text Format .rtf file with a malformed string that triggers a "memory calculation error" and a heap-based...

CVE-2008-1091

Microsoft Word Object Parsing Vulnerability (CVE-2008-1091) is a remote code execution flaw in parsing malformed Rich Text Format (.rtf) files. The underlying issue is a memory calculation error that can trigger a heap-based buffer overflow when Word processes a malformed string, enabling arbitra...

Microsoft Office fails to properly handle specially crafted Rich Text Format files

Overview A vulnerability in the way Microsoft Office handles Rich Text Format files may lead to execution of arbitrary code. Description Microsoft Office contains a vulnerability that could be exploited when parsing malformed strings contained in specially crafted Rich Text Format .rtf files...

Microsoft Word RTF File Handling Memory Corruption (MS08-026; CVE-2008-1091)

A remote code execution vulnerability has been identified in Microsoft Word. The vulnerability is due to a memory calculation error in Microsoft Word that fails to properly handle specially crafted Rich Text Format .rtf files. A remote attacker could trigger this flaw by convincing a victim to op...

Cross site scripting

Cross-site scripting XSS vulnerability in Microsoft Windows SharePoint Services 2.0 allows remote attackers to inject arbitrary web script or HTML via the Picture Source aka picture object source field in the Rich Text Editor...

CVE-2008-1888

Cross-site scripting XSS vulnerability in Microsoft Windows SharePoint Services 2.0 allows remote attackers to inject arbitrary web script or HTML via the Picture Source aka picture object source field in the Rich Text Editor...

Microsoft SharePoint服务器图片源码HTML注入漏洞

BUGTRAQ ID: 28706 SharePoint Server是一个服务器功能集成套件，提供全面的内容管理和企业搜索，加速共享业务流程并简化跨界限信息共享。 SharePoint Services 2.0中存在跨站脚本漏洞，在使用文本编辑器添加图片后保存网页时，没有正确地过滤某些字符串。如果用户的浏览器中启用了JavaScript的话，则在用户查看该网页时就会执行图片源码中所嵌入的脚本。 Microsoft Windows SharePoint Services 2.0 Microsoft ---------...

Microsoft Excel Rich Text Handling Code Execution (MS08-014; CVE-2008-0116; CVE-2009-0238)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in Microsoft Excel. A remote attacker could exploit this issue via a malformed Excel file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a targe...

Microsoft Excel Rich Text Handling Code Execution (MS08-014; CVE-2008-0116; CVE-2009-0238)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in Microsoft Excel. A remote attacker could exploit this issue via a malformed Excel file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a targe...

Design/Logic Flaw

Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, Compatibility Pack, and Office 2004 and 2008 for Mac allows user-assisted remote attackers to execute arbitrary code via malformed tags in rich text, aka "Excel Rich Text Validation Vulnerability."...

CVE-2008-0116

Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, Compatibility Pack, and Office 2004 and 2008 for Mac allows user-assisted remote attackers to execute arbitrary code via malformed tags in rich text, aka "Excel Rich Text Validation Vulnerability."...

CVE-2008-0116

Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, Compatibility Pack, and Office 2004 and 2008 for Mac allows user-assisted remote attackers to execute arbitrary code via malformed tags in rich text, aka "Excel Rich Text Validation Vulnerability."...

CVE-2008-0116

CVE-2008-0116 is a remote-code-execution vulnerability in Microsoft Excel’s handling of rich text values during memory loading. The issue affects Excel 2000 SP3–2003 SP2, Excel Viewer 2003, the Compatibility Pack, and Excel for Mac (2004/2008). A malformed rich-text tag in a crafted Excel file co...

iDefense Security Advisory 02.12.08: Microsoft Office Works Converter Heap Overflow Vulnerability

iDefense Security Advisory 02.12.08 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 12, 2008 I. BACKGROUND Microsoft Works is a word processor created by Microsoft in the 1980s. Microsoft Office, a widely use productivity suite, is distributed with converters for various versions of th...

Microsoft Rich Textbox Control Arbitrary File Overwrite (CVE-2008-0237)

Microsoft Rich Textbox is an ActiveX control that comes with Visual Basic. It allows programs to create formatted text in Rich Text Format. Microsoft Rich Textbox control ActiveX control Richtx32.ocx is used for displaying, entering, and manipulating text with formatting. It can also display font...