Microsoft Visio多个远程代码执行漏洞（MS08-019）

BUGTRAQ ID: 28555,28556 CVECAN ID: CVE-2008-1089,CVE-2008-1090 Visio是微软Office套件中的图形编辑工具。 Microsoft Visio在打开Visio文件时没有正确地验证对象头数据，在从磁盘将特制的.DXF文件加载到内存时没有正确地验证内存分配。如果用户受骗打开了畸形文档，就可能触发这些漏洞，导致执行任意指令。 Microsoft Visio 2007 SP1 Microsoft Visio 2007 Microsoft Visio 2003 SP3 Microsoft Visio 2003 SP2 Microso...

Microsoft Office Drawing Shapes memory corruption vulnerability

Added: 04/04/2008 CVE: CVE-2008-0118 BID: 28146 OSVDB: 42709 Background Microsoft Office is a package which provides word processing, spreadsheet, presentation, e-mail, and calendaring capabilities for Microsoft Windows workstations. Problem A memory corruption vulnerability allows command...

Microsoft Office Drawing Shapes memory corruption vulnerability

Added: 04/04/2008 CVE: CVE-2008-0118 BID: 28146 OSVDB: 42709 Background Microsoft Office is a package which provides word processing, spreadsheet, presentation, e-mail, and calendaring capabilities for Microsoft Windows workstations. Problem A memory corruption vulnerability allows command...

Microsoft Office XP SP3 PPT File Buffer Overflow Exploit (ms08-0 1 6)-vulnerability warning-the black bar safety net

Runs calc.exe on the Office XP SP3 with updates 03/11/08. Just for fun... [email protected] milw0rm.com 2008-03-30...

Microsoft Office XP SP3 PPT File Buffer Overflow Exploit (ms08-016)

No description provided by source. Runs calc.exe on Office XP SP3 with updates 03/11/08. Just for fun... http://sebug.net/paper/poc/2008-ms08-016.tgz [email protected]...

Microsoft Office XP SP3 - .PPT File Buffer Overflow (MS08-016)

Microsoft Office XP SP3 - .PPT File Buffer Overflow MS08-016 Runs calc.exe on Office XP SP3 with updates 03/11/08. Just for fun... https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/5320.tgz 2008-ms08-016.tgz [email protected] milw0rm.com 2008-03-30...

Microsoft Excel conditional formatting vulnerability

Added: 03/14/2008 CVE: CVE-2008-0117 BID: 28170 OSVDB: 42731 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem A vulnerability in Microsoft Excel allows command execution when a user opens a file...

Memory corruption

Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via crafted Style records that trigger memory corruption...

CVE-2008-0114

Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via crafted Style records that trigger memory corruption...

CVE-2008-0113

CVE-2008-0113 refers to a remote code execution vulnerability in Microsoft Office Excel Viewer 2003 up to SP3, caused by an allocation error when parsing specially crafted Excel files with malformed cell comments. Patches exist (MS08-016) that modify how Office allocates memory during file openin...

CVE-2008-0117: Undefined Security Weakness

Unspecified vulnerability in Microsoft Excel 2000 SP3 and 2002 SP2, and Office 2004 and 2008 for Mac, allows user-assisted remote attackers to execute arbitrary code via crafted conditional formatting values, aka "Excel Conditional Formatting Vulnerability."...

CVE-2008-0110: Improper Control of Generation of Code

Unspecified vulnerability in Microsoft Outlook in Office 2000 SP3, XP SP3, 2003 SP2 and Sp3, and Office System allows user-assisted remote attackers to execute arbitrary code via a crafted mailto URI...

CVE-2008-0115: Improper Control of Generation of Code

Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via malformed formulas, aka "Excel Formula Parsing Vulnerability."...

CVE-2008-0118: Improper Control of Generation of Code

Unspecified vulnerability in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, Excel Viewer 2003 up to SP3, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption from an "allocation error," aka "Microsoft...

CVE-2008-0112: Improper Control of Generation of Code

Unspecified vulnerability in Microsoft Excel 2000 SP3, and Office for Mac 2004 and 2008 allows user-assisted remote attackers to execute arbitrary code via a crafted .SLK file that is not properly handled when importing the file, aka "Excel File Import Vulnerability."...

CVE-2008-1222

Cross-site scripting XSS vulnerability in Dokeos 1.8.4 before SP3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2003-1551: Undefined Security Weakness

Unspecified vulnerability in Novell GroupWise 6 SP3 WebAccess before Revision F has unknown impact and attack vectors related to "malicious script."...

Dokeos远程命令执行漏洞

Dokeos是一款开源在线教育解决方案。 Dokeos不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意命令。 目前没有详细漏洞细节提供。 Dokeos Open Source Learning & Knowledge Management Tool 1.8.4 SP2 Dokeos Open Source Learning & Knowledge Management Tool 1.8.4 Dokeos Open Source Learning & Knowledge Management Tool 1.8.4 SP1 升级程序： Dokeos Open...

Microsoft Works File Converter field length buffer overflow

Added: 02/19/2008 CVE: CVE-2008-0108 BID: 27659 OSVDB: 41459 Background The Microsoft Works File Converter allows Microsoft Office to open Microsoft Works files. Problem A buffer overflow vulnerability in the Microsoft Works File Converter allows arbitrary command execution when a user opens a .w...

CVE-2008-0108: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted field lengths, aka "Microsoft Works File Converter Field Length...