13258 matches found
Microsoft Excel Ghost记录类型解析堆溢出漏洞（MS10-080）
BUGTRAQ ID: 43657 CVE ID: CVE-2010-3242 Excel是微软Office套件中的电子表格工具。 Excel在解析文档的Ghost记录中的某些字段时存在堆溢出漏洞，用户受骗打开了畸形的.XSL文件就会导致执行任意代码。 Microsoft Excel 2000 SP3 Microsoft Office 2008 for Mac Microsoft Office 2004 for Mac 临时解决方法： 不要打开从不可信任来源接收到或从可信任来源意外接收到的Microsoft Office文件。 厂商补丁： Microsoft ---------...
Microsoft Windows Media Player网络共享服务RTSP释放后使用漏洞（MS10-075）
BUGTRAQ ID: 43776 CVE ID: CVE-2010-3225 Windows Media Player是微软操作系统中默认捆绑的媒体播放器。 Windows Media Player对同一网络中其他设备的流媒体支持方式存在释放后使用漏洞。如果向播放器的流媒体服务例程发送了特制的RTSP请求，播放器就会释放一个对象之后再重新使用，这可能导致执行任意代码。 Microsoft Windows Media Player 11 临时解决方法： 在受影响的系统上禁用Windows媒体播放器网络共享服务。 交互方法 1...
Microsoft Windows嵌入式OpenType字体引擎整数溢出漏洞（MS10-076）
BUGTRAQ ID: 43775 CVE ID: CVE-2010-1883 Microsoft Windows是微软发布的非常流行的操作系统。 Windows的t2embed.dll库中在将嵌入式OpenType文件转换为TrueType格式时存在整数溢出漏洞。在解析hdmx记录时，盲目的信任了记录大小和记录计数变量，并将所生成的值在拷贝循环中使用，这可能导致执行任意代码。 Microsoft Windows XP SP3 Microsoft Windows XP Pro x64版SP2 Microsoft Windows Vista SP2 Microsoft Windows...
MySQL Community Server 5.1 < 5.1.51 Multiple Denial of Service Vulnerabilities
Binary data 5677.prm...
MySQL Community Server < 5.1.49 Multiple Vulnerabilities
The version of MySQL Community Server installed on the remote host is earlier than 5.1.49 and thus potentially affected by multiple vulnerabilities: - DDL statements could cause the server to crash. 55039 - Joins involving a table with a unique SET column could cause the server to crash. 54575 -...
Confluence should not allow configuration of Office Connector temporary storage location
Earlier versions of Confluence allow the administrator to set the temporary storage location for the View File macro, part of the Office Connector. Provided an attacker has gained administrative access to the system in some way, they could then exploit this vulnerability to save malicious files...
Confluence should not allow configuration of Office Connector temporary storage location
Earlier versions of Confluence allow the administrator to set the temporary storage location for the View File macro, part of the Office Connector. Provided an attacker has gained administrative access to the system in some way, they could then exploit this vulnerability to save malicious files...
Confluence should not allow configuration of Office Connector temporary storage location
Earlier versions of Confluence allow the administrator to set the temporary storage location for the View File macro, part of the Office Connector. Provided an attacker has gained administrative access to the system in some way, they could then exploit this vulnerability to save malicious files...
GNU gv symbolic links vulnerabilities
Symbolic links vulnerability on temporary files creation...
Oracle MySQL TEMPORARY InnoDB表格拒绝服务漏洞
BUGTRAQ ID: 42598 MySQL是一款使用非常广泛的开放源代码关系数据库系统，拥有各种平台的运行版本。 如果用户使用CREATE TEMPORARY TABLE命令创建了临时表格并使用了innodb引擎就会导致数据库崩溃。 Oracle MySQL 5.1.48-bzr Oracle MySQL 5.1.47 Oracle MySQL 5.1.41 厂商补丁： Oracle ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://dev.mysql.com/doc/refman/5.1/en/news-5-1-49.html mysq...
MySQL Community Server 5.1 < 5.1.49 Multiple Denial of Service Vulnerabilities
Binary data 5646.prm...
Mandriva Update for mysql MDVSA-2010:155 (mysql)
Check for the Version of mysql OpenVAS Vulnerability Test Mandriva Update for mysql MDVSA-2010:155 mysql Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
MySQL Community Server 5.1 < 5.1.49 Multiple Denial of Service Vulnerabilities
Binary data 801140.prm...
MySQL 5.1.48 - Temporary InnoDB Tables Denial of Service
MySQL 5.1.48 - Temporary InnoDB Tables Denial of Service source: https://www.securityfocus.com/bid/42598/info MySQL is prone to a denial-of-service vulnerability. An attacker can exploit these issues to crash the database, denying access to legitimate users. This issues affect versions prior to...
Microsoft Word RTF解析引擎堆溢出漏洞（MS10-056）
BUGTRAQ ID: 42133 CVE ID: CVE-2010-1902 Word是微软Office套件中的文字处理工具。 在处理RTF文档中的某些绘图对象控制字时，Word未经长度检查便将属性值拷贝到了堆缓冲区上，触发堆溢出。成功利用此漏洞的攻击者可以获得与本地用户相同的权限。 Microsoft Office 2008 for Mac Microsoft Office 2004 for Mac Microsoft Word 2007 SP2 Microsoft Word 2003 SP3 Microsoft Word 2002 SP3 临时解决方法： 以纯文本格式阅读电子邮件。...
Akamai Download Manager arbitrary file download & execution
------------------------------------------------------------------------ Akamai Download Manager arbitrary file download & execution ------------------------------------------------------------------------ Yorick Koster, April 2009...
Akamai Download Manager Arbitrary Download / Execution
------------------------------------------------------------------------ Akamai Download Manager arbitrary file download & execution ------------------------------------------------------------------------ Yorick Koster, April 2009...
CVE-2010-2539
Buffer overflow in the msTmpFile function in maputil.c in mapserv in MapServer before 4.10.6 and 5.x before 5.6.4 allows local users to cause a denial of service via vectors involving names of temporary files...
DEBIAN-CVE-2010-2539
Buffer overflow in the msTmpFile function in maputil.c in mapserv in MapServer before 4.10.6 and 5.x before 5.6.4 allows local users to cause a denial of service via vectors involving names of temporary files...
Buffer overflow
Buffer overflow in the msTmpFile function in maputil.c in mapserv in MapServer before 4.10.6 and 5.x before 5.6.4 allows local users to cause a denial of service via vectors involving names of temporary files...