CVE-2008-0116

CVE-2008-0116 is a remote-code-execution vulnerability in Microsoft Excel’s handling of rich text values during memory loading. The issue affects Excel 2000 SP3–2003 SP2, Excel Viewer 2003, the Compatibility Pack, and Excel for Mac (2004/2008). A malformed rich-text tag in a crafted Excel file co...

iDefense Security Advisory 02.12.08: Microsoft Office Works Converter Heap Overflow Vulnerability

iDefense Security Advisory 02.12.08 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 12, 2008 I. BACKGROUND Microsoft Works is a word processor created by Microsoft in the 1980s. Microsoft Office, a widely use productivity suite, is distributed with converters for various versions of th...

Microsoft Rich Textbox Control Arbitrary File Overwrite (CVE-2008-0237)

Microsoft Rich Textbox is an ActiveX control that comes with Visual Basic. It allows programs to create formatted text in Rich Text Format. Microsoft Rich Textbox control ActiveX control Richtx32.ocx is used for displaying, entering, and manipulating text with formatting. It can also display font...

CVE-2008-0481

Directory traversal vulnerability in RTEfilebrowser.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\ in the sub parameter in a save action...

Design/Logic Flaw

RTEpopupsavefile.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to upload 1 .html and 2 .htm files via unspecified vectors...

CVE-2008-0473

Affected software: Web Wiz Rich Text Editor 4.0. Vulnerable component: RTE_popup_save_file.asp. Vulnerability summary: Remote attackers can upload (1) .html and (2) .htm files via unspecified vectors. Root cause (as stated): likely insufficient validation in the file-upload handling. Impact (as s...

CVE-2008-0481

Directory traversal vulnerability in RTEfilebrowser.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\ in the sub parameter in a save action...

CVE-2008-0481

The CVE-2008-0481 entry concerns Web Wiz Rich Text Editor 4.0, where a directory-traversal flaw in RTE_file_browser.asp allows remote listing of arbitrary directories and .txt/.zip files via a malformed path in the sub parameter of a save action. The root cause is a traversal vulnerability in the...

wwrte-traverse.txt

WwW.BugReport.ir AmnPardaz Security Research Team Title: Web Wiz Rich Text EditorTM Vendor: http://www.webwizguide.com/ Bug: Directory traversal + HTM/HTML file creation on the server Vulnerable Version: 4.0 Exploit: Available Fix Available: No! Fast Solution is available. - Description: Web Wiz...

Web Wiz Rich Text Editor 4.0 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ Web Wiz Rich Text Editor 4.0 Multiple Remote Vulnerabilities ============================================================ AmnPardaz Security Research Team Title: Web Wiz Rich Tex...

Web Wiz (Multiple Products) - Remote Information Disclosure

source: https://www.securityfocus.com/bid/27419/info Web Wiz Forums, NewsPad, and Rich Text Editor are prone to a remote information-disclosure vulnerability because they fail to properly sanitize user-supplied input. An attacker can exploit this issue to retrieve arbitrary files in the context o...

Design/Logic Flaw

The Microsoft Rich Textbox ActiveX Control RICHTX32.OCX 6.1.97.82 allows remote attackers to execute arbitrary commands by invoking the insecure SaveFile method...

CVE-2008-0237

The CVE-2008-0237 entry involves the Microsoft Rich Textbox ActiveX control (Richtx32.ocx, v6.1.97.82). The vulnerability lies in the SaveFile method, which can be abused to create or overwrite arbitrary files via a web page, enabling remote access to write files on the target system. Exploitatio...

msrtc-insecure.txt

----------------------------------------------------------------------------- Microsoft Rich Textbox Control 6.0 SP6 "SaveFile" Insecure Method url: http://www.microsoft.com Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose...

Microsoft Rich Textbox Control 6.0 (SP6) SaveFile() Insecure Method

No description provided by source. precodespan style="font: 10pt Courier New;"span class="general1-symbol"body bgcolor="E0E0E0"----------------------------------------------------------------------------- bMicrosoft Rich Textbox Control 6.0 SP6 "SaveFile" Insecure Method/b...

Microsoft Rich Textbox Control 6.0-SP6 - SaveFile() Insecure Method

Microsoft Rich Textbox Control 6.0-SP6 - SaveFile Insecure Method ----------------------------------------------------------------------------- Microsoft Rich Textbox Control 6.0 SP6 "SaveFile" Insecure Method url: http://www.microsoft.com Author: shinnai mail: shinnaiatautisticidotorg site:...

Microsoft Rich Textbox Control 6.0 (SP6) SaveFile() Insecure Method

Exploit for unknown platform in category remote exploits =================================================================== Microsoft Rich Textbox Control 6.0 SP6 SaveFile Insecure Method ===================================================================...

Microsoft Rich Textbox Control 6.0-SP6 - 'SaveFile()' Insecure Method

----------------------------------------------------------------------------- Microsoft Rich Textbox Control 6.0 SP6 "SaveFile" Insecure Method url: http://www.microsoft.com Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose...

openSUSE 10 Security Update : opera (opera-4858)

Opera released version 9.25 of their browser to fix various security problems. CVE-2007-6520: Fixed an issue where plug-ins could be used to allow cross domain scripting, as reported by David Bloom. Details will be disclosed at a later date. CVE-2007-6521: Fixed an issue with TLS certificates tha...

GLSA-200712-22 : Opera: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200712-22 Opera: Multiple vulnerabilities David Bloom reported two vulnerabilities where plug-ins CVE-2007-6520 and Rich text editing CVE-2007-6522 could be used to allow cross domain scripting. Alexander Klink Cynops GmbH...