Microsoft Internet Explorer Memory Corruption (MS14-012: CVE-2014-0311)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...

Microsoft Internet Explorer Memory Corruption (MS14-012: CVE-2014-0302)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...

Microsoft Internet Explorer Memory Corruption (MS14-012; CVE-2014-0299)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...

MS11-049: Vulnerability in the Microsoft XML Editor Could Allow Information Disclosure (2543893) (uncredentialed check)

An application on the remote host has an information disclosure vulnerability. When parsing a specially crafted Web Service Discovery .disco file, external XML entities are allowed for untrusted user input. A remote attacker could exploit this by tricking a user into opening a specially crafted...

Microsoft Excel RealTime Date Record Parsing Buffer Overflow - Ver2 (CVE-2011-0101)

A buffer overflow vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to a memory handling error in Microsoft Office Excel during validation of record information while parsing a specially crafted Excel file. A remote attacker could exploit this vulnerability by...

Microsoft Office Word Legacy File Remote Code Execution (MS09-068) - Ver2 (CVE-2009-3135)

Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in Microsoft Word.The vulnerability is due to an error in Microsoft Word that fails to properly parse specially crafted Word files. A remote attacker could trigger this flaw by convinci...

Microsoft Office RTF Mismatch Memory Corruption (MS12-029) - Ver2 (CVE-2012-0183)

A remote code execution vulnerability has been reported in Microsoft Office. The vulnerability is due to a memory corruption while parsing specially crafted RTF-formatted data. A remote attacker can exploit this issue by enticing a target user to open a specially crafted RTF file. Successful...

Microsoft Word PlfLfo Structure Memory Corruption (MS08-072) - Ver2 (CVE-2008-4024)

Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in Microsoft Word. The vulnerability is due to a memory corruption error in Microsoft Word that fails to properly handle specially crafted Word files. A remote attacker could trigger th...

Google Chrome and Apple Safari Floating Styles Use-After-Free Code Execution - Ver2 (CVE-2011-2790)

A remote code execution vulnerability has been reported in Apple Safari and Google Chrome. The vulnerability is due to an error while handling floating style information. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted web page. Successful...

GLSA-201402-29 : ArgyllCMS: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201402-29 ArgyllCMS: User-assisted execution of arbitrary code Multiple integer overflow vulnerabilities have been discovered in the ICC Format Library in ArgyllCMS. Impact : A remote attacker could entice a user to open a special...

ISC BIND NSEC3-Signed Zones Queries Processing Denial of Service (CVE-2014-0591)

A denial of service vulnerability exists in ISC BIND. The vulnerability is due to a failure to handle queries for NSEC3-signed zones. A remote attacker may exploit this vulnerability by sending a specially crafted query...

libXfont: Multiple vulnerabilities

Background libXfont is an X11 font rasterisation library. Description Multiple vulnerabilities have been discovered in libXfont. Please review the CVE identifiers referenced below for details. Impact A local attacker could use a specially crafted file to gain privileges or cause a Denial of Servi...

PHP Filter Wrapper Information Disclosure

An information disclosure vulnerability has been reported in the PHP filter wrapper function. A remote attacker can exploit this vulnerability by sending a specially crafted URL to an affected PHP page...

Microsoft Internet Explorer Memory Corruption (MS14-010: CVE-2014-0283)

A Remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...

Microsoft Internet Explorer Memory Corruption (MS14-010; CVE-2014-0284)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...

GLSA-201402-05 : Banshee: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201402-05 Banshee: Arbitrary code execution Banshee places a zero-length directory name in PATH, which allows libraries to be loaded from the working directory. Impact : A local attacker could put specially crafted library into...

Banshee: Arbitrary code execution

Background Banshee is a multimedia management and playback application for GNOME. Description Banshee places a zero-length directory name in PATH, which allows libraries to be loaded from the working directory. Impact A local attacker could put specially crafted library into working directory of...

Microsoft Internet Explorer Null Byte Information Disclosure - Ver2 (CVE-2012-0012)

An information disclosure vulnerability has been reported in Microsoft Internet Explorer. A remote attacker could exploit this vulnerability by enticing target users to open a specially crafted webpage. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitiv...

LiveZilla 5.1.1.0 Stored XSS in operator clients

Author: Jakub Zoczek [email protected] CVE Reference: CVE-2013-7003 Product: LiveZilla Vendor: LiveZilla GmbH http://livezilla.net Affected version: 5.1.1.0 Severity: Medium CVSSv2 Score: 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N Status: Fixed 0x01 Background LiveZilla, the widely-used and trusted Live Help...

Adobe Acrobat and Reader Memory Corruption (APSB14-28: CVE-2014-8445)

A memory corruption vulnerability has been reported in Adobe Acrobat and Reader. The vulnerability is due to the way Adobe Acrobat and Reader parses a malformed PDF file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...