1183 matches found
CVE-2008-4264
Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allow remote...
CVE-2008-4264: Undefined Security Weakness
Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allow remote...
Microsoft Excel File OBJ Record Memory Corruption (MS08-074; CVE-2008-4264)
Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the Microsoft Excel. The vulnerability is due to an error in Microsoft Excel as a result of pointer corruption when loading Excel formulas. An attacker can exploit this flaw to execu...
Microsoft Excel FORMAT record array index memory corruption
Added: 09/24/2008 CVE: CVE-2008-3005 BID: 30639 OSVDB: 47408 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem A memory corruption vulnerability allows command execution when a user opens a spreadsheet...
Microsoft Excel FORMAT record array index memory corruption
Added: 09/24/2008 CVE: CVE-2008-3005 BID: 30639 OSVDB: 47408 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem A memory corruption vulnerability allows command execution when a user opens a spreadsheet...
Microsoft Excel FORMAT record array index memory corruption
Added: 09/24/2008 CVE: CVE-2008-3005 BID: 30639 OSVDB: 47408 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem A memory corruption vulnerability allows command execution when a user opens a spreadsheet...
iDefense Security Advisory 08.12.08: Microsoft Excel FORMAT Record Invalid Array Index Vulnerability
iDefense Security Advisory 08.12.08 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 12, 2008 I. BACKGROUND Microsoft Excel is the spreadsheet application that is included with Microsoft Corp.'s Office productivity software suite. More information is available at the following website...
CentOS 4 : openoffice.org2 (CESA-2008:0537)
Updated openoffice.org packages to correct a security issue are now available for Red Hat Enterprise Linux 4 and Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity suite that...
[SECURITY] Fedora 7 Update: openoffice.org-2.3.0-6.9.fc7
OpenOffice.org is an Open Source, community-developed, multi-platform office productivity suite. It includes the key desktop applications, such as a word processor, spreadsheet, presentation manager, formula editor and drawing program, with a user interface and feature set similar to other office...
[SECURITY] Fedora 9 Update: openoffice.org-2.4.1-17.3.fc9
OpenOffice.org is an Open Source, community-developed, multi-platform office productivity suite. It includes the key desktop applications, such as a word processor, spreadsheet, presentation manager, formula editor and drawing program, with a user interface and feature set similar to other office...
WordPress wpSS插件ss_id参数SQL注入漏洞
BUGTRAQ ID: 28894 wpSS是WordPress中所使用的电子表格插件，允许在WordPress博客中嵌入交互式的电子表格。 wpSS插件的wpSS/ssload.php文件中没有正确地过滤对ssid参数的数便用在了SQL查询中： ssload.php $id = $GET'ssid'; .... ssfunctions.php: function ssload $id, $plain=FALSE .... if $wpdb-query"SELECT FROM $tablename WHERE id='$id'" == 0...
CVE-2008-1982
SQL injection vulnerability in ssload.php in the Spreadsheet wpSS 0.6 and earlier plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the ssid parameter...
Sql injection
SQL injection vulnerability in ssload.php in the Spreadsheet wpSS 0.6 and earlier plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the ssid parameter...
CVE-2008-1982
SQL injection vulnerability in ssload.php in the Spreadsheet wpSS 0.6 and earlier plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the ssid parameter...
CVE-2008-1982
CVE-2008-1982 affects the Spreadsheet (wpSS) WordPress plugin, version
CVE-2008-1982: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in ssload.php in the Spreadsheet wpSS 0.6 and earlier plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the ssid parameter...
WordPress Spreadsheet Plugin <= 0.6 - SQL Injection
Because of this vulnerability in ssload.php, the attackers can execute arbitrary SQL commands via the "ssid"parameter. Solution Update the plugin...
wpspreadsheet-sql.txt
=========================================== There's standart sql-injection in Spreadsheet query"SELECT FROM $tablename WHERE id='$id'" == 0 .... == Visit us @ forum.antichat.ru...
Wordpress Plugin Spreadsheet <= 0.6 SQL Injection Vulnerability
No description provided by source. =========================================== There's standart sql-injection in Spreadsheet = 0.6 Plugin Author : 1ten0.0net1 Script : Wordpress Plugin Spreadsheet = 0.6 v. Download : http://timrohrer.com/blog/?pageid=71 BUG : Remote SQL-Injection Vulnerability Do...
USN-604-1: Gnumeric vulnerability
Thilo Pfennig and Morten Welinder discovered that the XLS spreadsheet handling code in Gnumeric did not correctly calculate needed memory sizes. If a user or automated system were tricked into loading a specially crafted XLS document, a remote attacker could execute arbitrary code with user...