CVE-2010-1901

CVE-2010-1901 affects Microsoft Word and related Office components (Word 2002 SP3, 2003 SP3, 2007 SP2; Mac: Office 2004/2008, Open XML Converter for Mac, Word Viewer, Compatibility Pack SP2) where the RTF parsing engine mishandles unspecified properties in rich text data, causing a memory corrupt...

CVE-2010-1901: Improper Control of Generation of Code

Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly handle unspecified properties in rich tex...

Microsoft Security Bulletin MS10-056 - Critical Vulnerabilities in Microsoft Office Word Could Allow Remote Code Execution (2269638)

Microsoft Security Bulletin MS10-056 - Critical Vulnerabilities in Microsoft Office Word Could Allow Remote Code Execution 2269638 Published: August 10, 2010 Version: 1.0 General Information Executive Summary This security update resolves four privately reported vulnerabilities in Microsoft Offic...

iDefense Security Advisory 08.10.10: Microsoft Word RTF File Parsing Heap Buffer Overflow Vulnerability

iDefense Security Advisory 08.10.10 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 10, 2010 I. BACKGROUND Microsoft Word is a word processing application from Microsoft Office. For more information about Microsoft Word, see the following website:...

CVE-2010-1902: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute...

Microsoft Word RTF Parsing Engine Memory Corruption (MS10-056; CVE-2010-1901)

Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in Microsoft Word. The vulnerability is due to insufficient data validation by Microsoft Office Word when handling rich text data. A remote attacker could trigger this flaw by convincin...

Microsoft Word RTF Data Parsing Buffer Overflow (MS10-056; CVE-2010-1902)

Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in Microsoft Word. The vulnerability is due to insufficient data validation by Microsoft Office Word when handling rich text data. A remote attacker could trigger this flaw by convincin...

openoffice.org -- Multiple vulnerabilities

OpenOffice.org Security Team reports: Fixed in OpenOffice.org 3.3 CVE-2010-2935 / CVE-2010-2936: Security Vulnerability in OpenOffice.org related to PowerPoint document processing CVE-2010-3450: Security Vulnerability in OpenOffice.org related to Extensions and filter package files CVE-2010-3451 ...

OpenOffice RTF File Parsing Heap Buffer Overflow (CVE-2007-0245)

A buffer overflow vulnerability exists in the OpenOffice software suite. The vulnerability is due to the way OpenOffice parses specially crafted Rich Text Format RTF documents. A remote attacker could exploit this vulnerability by persuading a user to open a specially crafted RTF file, potentiall...

Secunia Research: Autonomy KeyView rtfsr.dll RTF Parsing Signedness Error

====================================================================== Secunia Research 28/07/2010 - Autonomy KeyView rtfsr.dll RTF Parsing Signedness Error - ====================================================================== Table of Contents Affected...

JustSystems Ichitaro Products 'RTF' Buffer Overflow Vulnerability

This host is installed with JustSystems Ichitaro products and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodjustsystemsichitaroprdtsbofvuln.nasl 6515 2017-07-04 11:54:15Z cfischer $ JustSystems Ichitaro Products 'RTF' Buffer Overflow Vulnerability Authors: Madhu...

JustSystems Ichitaro Products 'RTF' Buffer Overflow Vulnerability

JustSystems Ichitaro products is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cross-Site Scripting vulnerabilities in Invision Power Board

Hello 3APA3A! I want to warn you about new vulnerabilities in Invision Power Board. These are Cross-Site Scripting vulnerabilities. Attack is going via attachment at click on the attachment in the post at forum or on the link to this attachment. These are persistent XSS vulnerabilities. I know fo...

Design/Logic Flaw

Sophos PureMessage Scanner service PMScanner.exe in PureMessage for Microsoft Exchange 3.0 before 3.0.2 allows remote attackers to cause a denial of service message queue delay and incomplete spam rule update via a crafted 1 RTF or 2 PDF file...

CVE-2008-7104

Sophos PureMessage Scanner service PMScanner.exe in PureMessage for Microsoft Exchange 3.0 before 3.0.2 allows remote attackers to cause a denial of service message queue delay and incomplete spam rule update via a crafted 1 RTF or 2 PDF file...

CVE-2008-7104: Undefined Security Weakness

Sophos PureMessage Scanner service PMScanner.exe in PureMessage for Microsoft Exchange 3.0 before 3.0.2 allows remote attackers to cause a denial of service message queue delay and incomplete spam rule update via a crafted 1 RTF or 2 PDF file...

Mandriva Update for openoffice.org MDKSA-2007:144 (openoffice.org)

Check for the Version of openoffice.org OpenVAS Vulnerability Test Mandriva Update for openoffice.org MDKSA-2007:144 openoffice.org Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Mandriva Update for openoffice.org MDKSA-2007:144 (openoffice.org)

Check for the Version of openoffice.org OpenVAS Vulnerability Test Mandriva Update for openoffice.org MDKSA-2007:144 openoffice.org Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Ubuntu Update for openoffice.org(2)/-amd64 vulnerability USN-482-1

Ubuntu Update for Linux kernel vulnerabilities USN-482-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4821.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for openoffice.org2/-amd64 vulnerability USN-482-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-482-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...