Cisco Windows Jabber Client Multiple Vulnerabilities in OpenSSL (cisco-sa-20140605-openssl)

The remote Windows host has a version of Cisco Jabber installed that is known to be affected by multiple OpenSSL related vulnerabilities : - An error exists related to the implementation of the Elliptic Curve Digital Signature Algorithm ECDSA that could allow nonce disclosure via the 'FLUSH+RELOA...

Design/Logic Flaw

Untrusted search path vulnerability in Microsoft Office 2007 SP3, 2010 SP1 and SP2, and 2013 Gold, SP1, RT, and RT SP1, when the Simplified Chinese Proofing Tool is enabled, allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directo...

CVE-2014-1756: Undefined Security Weakness

Untrusted search path vulnerability in Microsoft Office 2007 SP3, 2010 SP1 and SP2, and 2013 Gold, SP1, RT, and RT SP1, when the Simplified Chinese Proofing Tool is enabled, allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directo...

PT-2014-1203

Name of the Vulnerable Software and Affected Versions Microsoft Office versions 2007 SP3, 2010 SP1 and SP2, and 2013 Gold, SP1, RT, and RT SP1 Description The issue is related to errors in checking the path of loaded dynamic libraries in Microsoft Office. This allows a remote attacker to execute...

Microsoft Office Remote Code Execution Vulnerabilities (2961037)

This host is missing an important security update according to Microsoft Bulletin MS14-023. OpenVAS Vulnerability Test $Id: gbms14-023.nasl 6735 2017-07-17 09:56:49Z teissa $ Microsoft Office Remote Code Execution Vulnerabilities 2961037 Authors: Antu Sanadi Copyright: Copyright C 2014 Greenbone...

Microsoft Office IME (Chinese) Privilege Elevation Vulnerability (2652016)

This host is missing an important security update according to Microsoft Bulletin MS11-088. OpenVAS Vulnerability Test $Id: secpodms11-088.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Office IME Chinese Privilege Elevation Vulnerability 2652016 Authors: Antu Sanadi Copyright: Copyright c 2011...

Microsoft Office IME (Chinese) Privilege Elevation Vulnerability (2652016)

This host is missing an important security update according to Microsoft Bulletin MS11-088. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PT-2011-3548

Name of the Vulnerable Software and Affected Versions Microsoft Office Input Method Editor IME for Simplified Chinese versions affected versions not specified Description The issue concerns the Microsoft Office Input Method Editor IME for Simplified Chinese, which does not properly restrict acces...

CVE-2011-2010

The Microsoft Office Input Method Editor IME for Simplified Chinese in Microsoft Pinyin IME 2010, Office Pinyin SimpleFast Style 2010, and Office Pinyin New Experience Style 2010 does not properly restrict access to configuration options, which allows local users to gain privileges via the...

CVE-2011-2010

The CVE-2011-2010 issue affects the Microsoft Office IME (Chinese) for Simplified Chinese in Pinyin IME 2010 family (MSPY), including Office Pinyin SimpleFast Style 2010 and Office Pinyin New Experience Style 2010. The root cause is improper restriction of configuration options in the IME toolbar...

Rising - RSNTGDI.sys Local Denial of Service

Rising - RSNTGDI.sys Local Denial of Service / On the net.We can found these file has published a BUG.In that.The BUG has found in CONTROL CODE:0x83003C0B.So.I check these file in othere CONTROL CODE.Just for fun..... Exploit Title: Rising RSNTGDI.sys Local Denial of ServiceCONTROL CODE:83003C13...

Rising - 'RSNTGDI.sys' Local Denial of Service

/ On the net.We can found these file has published a BUG.In that.The BUG has found in CONTROL CODE:0x83003C0B.So.I check these file in othere CONTROL CODE.Just for fun..... Exploit Title: Rising RSNTGDI.sys Local Denial of ServiceCONTROL CODE:83003C13 Date: 2010.11.1 Author: ze0r Version: Rising...

金山毒霸KAVFM.sys驱动IOCTL处理内核缓冲区溢出漏洞

BUGTRAQ ID: 43173 金山毒霸是一种个人电脑安全防护软件，集合了查毒、杀毒、实时监控、垃圾邮件过滤、防网页挂马和隐私数据保护等实用性强的功能于一身。 本地用户可以通过向金山毒霸所安装的KAVFM.sys驱动提交恶意IOCTL请求触发缓冲区溢出，导致执行任意内核态代码。 Kingsoft Antivirus 2010.04.26.648 厂商补丁： Kingsoft Corp ------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.kingsoft.com/ !/usr/bin/pyth...

Kingsoft AntiVirus 2010.04.26.648 - Kernel Buffer Overflow

Kingsoft AntiVirus 2010.04.26.648 - Kernel Buffer Overflow !/usr/bin/python Title: Kingsoft Antivirus Kernel Buffer Overflow Exploit Author: Lufeng Li of Neusoft Corporation Vendor: www.duba.net Platform: Windows XPSP3 Chinese Simplified Tested: Kingsoft Antivirus v2010.04.26.648 Vulnerable:...

QQ Computer Manager TSKsp.sys Driver Local Denial of Service Vulnerability

QQ Computer Manager TSKsp.sys Driver Local Denial of Service Vulnerability By Lufeng Li of Neusoft Corporation Vulnerable: QQpcmgr=v4.0Beta1 Vendor: Tencent Inc 1 Software Description: QQ doctors more than three years after the development and operation, and finally ushered in the fourth generati...

QQ Computer Manager - 'TSKsp.sys' Local Denial of Service

!/usr/bin/python Title: QQ Computer Manager TSKsp.sys Local Denial of Service Exploit Author: Lufeng Li of Neusoft Corporation Vendor: http://pcmgr.qq.com Vulnerable App: http://dldir2.qq.com/invc/qqmaster/setup/QQPCMgrSetup.exe Platform: Windows XPSP3 Chinese Simplified Tested: QQpcmgr v4.0Beta1...

QQPlayer smi File Buffer Overflow Exploit

No description provided by source. !/usr/bin/env python Title: QQPlayer smi File Buffer Overflow Exploit Author: Lufeng Li of Neusoft Corporation Vendor: www.qq.com Platform: Windows XPSP3 Chinese Simplified Tested: QQPlayer 2.3.696.400p1 Vulnerable: QQPlayer=2.3.696.400p1 Code : head ='''smil he...

QQPlayer 2.3.696.400p1 - '.smi' File Buffer Overflow

!/usr/bin/env python Title: QQPlayer smi File Buffer Overflow Exploit Author: Lufeng Li of Neusoft Corporation Vendor: www.qq.com Platform: Windows XPSP3 Chinese Simplified Tested: QQPlayer 2.3.696.400p1 Vulnerable: QQPlayer !-- Genera...

QQPlayer asx file processing buffer overflow vulnerability-vulnerability warning-the black bar safety net

Title: QQPlayer asx File Processing Buffer Overflow Exploit Author: Li Qingshan of Information Security Engineering Center,School of Software and Microelectronics,Peking University Vendor: www.qq.com Platform: Windows XPSP3 Chinese Simplified Test: QQPlayer 2.3.696.400 Vulnerable: QQPlayer=2.3.69...

QQPlayer CUE file buffer overflow vulnerability-vulnerability warning-the black bar safety net

!/ usr/bin/env python Title: QQPlayer cue File Buffer Overflow Exploit Author: Lufeng Li of Neusoft Corporation Vendor: www.qq.com Platform: Windows XPSP3 Chinese Simplified Tested: QQPlayer 2.3.696.400 Vulnerable: QQPlayer=2.3.696. 400p1 Code : head = """FILE"""" junk = "A" 7 8 0 nseh...