SoftMaker Office TextMaker Document Record 0x002a integer overflow vulnerability

Summary An exploitable integer overflow vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to miscalculate a length used to allocate a buffer, later upon usage of this...

Softmaker Office Buffer Error Vulnerability

Softmaker Office is a multi-platform supported office software from the German company Softmaker. The software is used for word processing, spreadsheets, presentation design, and can also be scripted, and supports a wide range of common Office file formats, as well as a variety of internal format...

SoftMaker Office TextMaker Document Record 0x003f integer conversion vulnerability

Summary An exploitable signed conversion vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to miscalculate a length used to allocate a buffer, later upon usage of this...

SoftMaker Office TextMaker Document Record 0x001f sign-extension vulnerability

Summary An exploitable sign extension vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to sign-extend a length used to terminate a loop, which can later result in the...

Softmaker Office Buffer Error Vulnerability

Softmaker Office is a multi-platform supported office software from the German company Softmaker. The software is used for word processing, spreadsheets, presentation design, and can also be scripted, and supports a variety of common Office file formats, as well as a variety of internal formats...

SoftMaker Office 201x Privilege Escalation Vulnerability

SoftMaker Office 201x suffers from a local privilege escalation vulnerability due to an unprotected directory. Hi @ll, the service pack installers for SoftMaker Office 201x, available from , are surprise.- vulnerable. The executable installer OUCH ofw16763.exe, a 7z SFX OUCH, creates an UNPROTECT...

SoftMaker Office 201x Privilege Escalation

Hi @ll, the service pack installers for SoftMaker Office 201x, available from , are surprise.- vulnerable. The executable installer OUCH ofw16763.exe, a 7z SFX OUCH, creates an UNPROTECTED directory "%TEMP%\7zSxxxxxxxx" to extract its payload, then executes "%TEMP%\7zSxxxxxxxx\spsetup.exe"...

Softmaker Office 2012 - TextMaker Memory Corruption Vulnerability

No description provided by source. / Title : Softmaker Office 2012 TextMaker Memory Corruption Vulnerability 0day Version : 2012.12.20.654 Author : Arash Allebrahim Contact : [email protected] Date : 2013-10-30 Vendor : http://www.softmaker.com/english/ofen.htm tested : Win XP SP3 ENG &...

SoftMaker Office 2012 - TextMaker Memory Corruption

SoftMaker Office 2012 - TextMaker Memory Corruption / Title : Softmaker Office 2012 TextMaker Memory Corruption Vulnerability 0day Version : 2012.12.20.654 Author : Arash Allebrahim Contact : [email protected] Date : 2013-10-30 Vendor : http://www.softmaker.com/english/ofen.htm tested :...

SoftMaker Office 2012 - TextMaker Memory Corruption

/ Title : Softmaker Office 2012 TextMaker Memory Corruption Vulnerability 0day Version : 2012.12.20.654 Author : Arash Allebrahim Contact : [email protected] Date : 2013-10-30 Vendor : http://www.softmaker.com/english/ofen.htm tested : Win XP SP3 ENG & Win 7 sp 1 x64 Ultimate Descriptio...

Cross site scripting

Cross-site scripting XSS vulnerability in resultat.asp in SoftMaker Shop allows remote attackers to inject arbitrary web script or HTML via a strSok parameter containing a javascript: URI in an IMG SRC attribute...

CVE-2006-0532

Cross-site scripting XSS vulnerability in resultat.asp in SoftMaker Shop allows remote attackers to inject arbitrary web script or HTML via a strSok parameter containing a javascript: URI in an IMG SRC attribute...

CVE-2006-0532

CVE-2006-0532 describes an XSS vulnerability in resultat.asp of SoftMaker Shop. The attack vector is a crafted strSok parameter containing a javascript: URI in an IMG SRC, enabling remote script injection. Impact is partial integrity compromise with no confidentiality or availability impact per C...

CVE-2006-0532

Cross-site scripting XSS vulnerability in resultat.asp in SoftMaker Shop allows remote attackers to inject arbitrary web script or HTML via a strSok parameter containing a javascript: URI in an IMG SRC attribute...

CVE-2006-0532: Undefined Security Weakness

Cross-site scripting XSS vulnerability in resultat.asp in SoftMaker Shop allows remote attackers to inject arbitrary web script or HTML via a strSok parameter containing a javascript: URI in an IMG SRC attribute...

SoftMaker Shop is vulnerable to XSS

Inputs in the SoftMaker Shop is not properly sanitized, and XSS is possible in a lot of the systems input fields and url parameters. Some fields have been filtered in a basic form, so that simple scripting like "scriptalert'XSS'/script" is not possible. However, since the filtering is not based o...

[SA18683] SoftMaker Shop resultat.asp Cross-Site Scripting

TITLE: SoftMaker Shop resultat.asp Cross-Site Scripting SECUNIA ADVISORY ID: SA18683 VERIFY ADVISORY: http://secunia.com/advisories/18683/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: SoftMaker Shop http://secunia.com/product/7406/ DESCRIPTION: Preben Nylkken...

SoftMaker Shop - Multiple Cross-Site Scripting Vulnerabilities

SoftMaker Shop - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/16471/info SoftMaker Shop is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker may leverage thes...

SoftMaker Shop - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/16471/info SoftMaker Shop is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in the browser ...