793 matches found
CVE-2007-0025
The MFC component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 and Visual Studio .NET 2000, 2002 SP1, 2003, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code via an RTF file with a malformed OLE object that triggers memory corruption. NOTE: this might be due to a...
Microsoft Windows OLE Dialog Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability that occurs when the application attempts to parse malformed Rich Text Files RTF. An attacker could exploit this issue by enticing a victim to load a malicious RTF file. If the vulnerability is successfully exploited,...
Microsoft Windows OLE dialog memory corruption
Memory corruption on RTF-embedded OLE object. Can be used for hideen malware installation...
MS07-012: Vulnerability in Microsoft MFC Could Allow Remote Code Execution (924667)
The remote host contains a version of Microsoft Windows that has a vulnerability in the MFC component that could be abused by an attacker to execute arbitrary code on the remote host. To exploit this vulnerability, an attacker would need to spend a specially crafted RTF file to a user on the remo...
Microsoft Office .rtf File Detection
Binary data 3826.prm...
Re: Secunia Research: Microsoft Windows Object Packager Dialog Spoofing
I knew about this particular flaw for some time . honestly I found it by accident, like I think the the security researcher from secunia did...or maybe it leaked from where I posted it?!?!?!!! :P. This could be a bit more critical if : 1 a '' not a '/' was placed at the end of the command line...
Microsoft Windows Object Packager dialog spoofing
Code execution with .RTF or .WRI file embedded object...
Debian DSA-872-1 : koffice - buffer overflow
Chris Evans discovered a buffer overflow in the RTF importer of kword, a word processor for the KDE Office Suite that can lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...
Debian DSA-894-1 : abiword - buffer overflows
Chris Evans discovered several buffer overflows in the RTF import mechanism of AbiWord, a WYSIWYG word processor based on GTK 2. Opening a specially crafted RTF file could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packag...
linux/x86 execve(/bin/sh) + RTF Header 30 bytes
No description provided by source. / linux/x86 - execve"/bin/sh", "/bin/sh", NULL + RTF header - 30 bytes root@magicbox: file linux-sh-rtfhdr.bin linux-sh-rtfhdr.bin: Rich Text Format data, version 1, - izik [email protected] / char shellcode = // // RTF Header 7 bytes // - Be careful not to trigger...
linux/x86 - execve/bin/sh + RTF Header 30 bytes
linux/x86 execve/bin/sh + RTF Header 30 bytes. Shellcode exploit for linx86 platform / linux/x86 - execve"/bin/sh", "/bin/sh", NULL + RTF header - 30 bytes root@magicbox: file linux-sh-rtfhdr.bin linux-sh-rtfhdr.bin: Rich Text Format data, version 1, - izik / char shellcode = // // RTF Header 7...
linux/x86 execve(/bin/sh) + RTF Header 30 bytes
Exploit for linux/x86 platform in category shellcode =============================================== linux/x86 execve/bin/sh + RTF Header 30 bytes =============================================== / linux/x86 - execve"/bin/sh", "/bin/sh", NULL + RTF header - 30 bytes email protected: file...
CVE-2006-0543
Cerulean Trillian 3.1.0.120 allows remote attackers to cause a denial of service client crash via an AIM message containing the Mac encoded Rich Text Format RTF escape sequences 1 'd1, 2 'd2, 3 'd3, 4 'd4, and 5 'd5. NOTE: the provenance of this information is unknown; the details are obtained...
Design/Logic Flaw
Cerulean Trillian 3.1.0.120 allows remote attackers to cause a denial of service client crash via an AIM message containing the Mac encoded Rich Text Format RTF escape sequences 1 'd1, 2 'd2, 3 'd3, 4 'd4, and 5 'd5. NOTE: the provenance of this information is unknown; the details are obtained...
Mandrake Linux Security Advisory : koffice (MDKSA-2005:185)
Chris Evans reported a heap based buffer overflow in the RTF importer of KWord. An attacker could provide a specially crafted RTF file, which when opened in KWord can cause execution of arbitrary code. The updated packages are patched to deal with these issues. %NASLMINLEVEL 70300 C Tenable Netwo...
Ubuntu 5.04 : koffice vulnerability (USN-202-1)
Chris Evans discovered a buffer overflow in the RTF import module of KOffice. By tricking a user into opening a specially crafted RTF file, an attacker could exploit this to execute arbitrary code with the privileges of the AbiWord user. Note that Tenable Network Security has extracted the...
Ubuntu 4.10 / 5.04 : abiword vulnerabilities (USN-203-1)
Chris Evans discovered several buffer overflows in the RTF import module of AbiWord. By tricking a user into opening an RTF file with specially crafted long identifiers, an attacker could exploit this to execute arbitrary code with the privileges of the AbiWord user. Note that Tenable Network...
[SECURITY] [DSA 894-1] New AbiWord packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 894-1 [email protected] http://www.debian.org/security/ Martin Schulze November 14th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 894-1] New AbiWord packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 894-1 [email protected] http://www.debian.org/security/ Martin Schulze November 14th, 2005 http://www.debian.org/security/faq -...
