Double free

Double free vulnerability in the vbareadprojectstrings function in vbaextract.c in libclamav in ClamAV before 0.97 might allow remote attackers to execute arbitrary code via crafted Visual Basic for Applications VBA data in a Microsoft Office document. NOTE: some of these details are obtained fro...

CVE-2011-1003

Double free vulnerability in the vbareadprojectstrings function in vbaextract.c in libclamav in ClamAV before 0.97 might allow remote attackers to execute arbitrary code via crafted Visual Basic for Applications VBA data in a Microsoft Office document. NOTE: some of these details are obtained fro...

CVE-2011-1003

CVE-2011-1003 describes a double-free vulnerability in libclamav (vba_read_project_strings in vba_extract.c) that could allow remote code execution via crafted VBA data in Microsoft Office documents. Affected software is ClamAV prior to version 0.97; the underlying issue is in the VBA data handli...

CVE-2011-1003

Double free vulnerability in the vbareadprojectstrings function in vbaextract.c in libclamav in ClamAV before 0.97 might allow remote attackers to execute arbitrary code via crafted Visual Basic for Applications VBA data in a Microsoft Office document. NOTE: some of these details are obtained fro...

CVE-2011-1003

Double free vulnerability in the vbareadprojectstrings function in vbaextract.c in libclamav in ClamAV before 0.97 might allow remote attackers to execute arbitrary code via crafted Visual Basic for Applications VBA data in a Microsoft Office document. NOTE: some of these details are obtained fro...

PT-2011-2807 · Cisco +1 · Clamav +1

Name of the Vulnerable Software and Affected Versions: ClamAV versions prior to 0.97 Description: A double free vulnerability exists in the vba read project strings function in vba extract.c in libclamav. This issue might allow remote attackers to execute arbitrary code via crafted Visual Basic f...

SuSE 10 Security Update : OpenOffice_org (ZYPP Patch Number 6883)

This update of OpenOfficeorg includes fixes for the following vulnerabilities : - XML signature weakness CVE-2009-2949: XPM Import Integer Overflow CVE-2009-2950: GIF Import Heap Overflow CVE-2009-3301: MS Word sprmTDefTable Memory Corruption CVE-2009-3302: MS Word sprmTDefTable Memory Corruption...

SuSE 10 Security Update : OpenOffice_org (ZYPP Patch Number 6884)

This update of OpenOfficeorg includes fixes for the following vulnerabilities : - XML signature weakness CVE-2009-2949: XPM Import Integer Overflow CVE-2009-2950: GIF Import Heap Overflow CVE-2009-3301: MS Word sprmTDefTable Memory Corruption CVE-2009-3302: MS Word sprmTDefTable Memory Corruption...

Microsoft Visual Basic Document Properties Buffer Overrun (MS06-047; CVE-2006-3649)

Microsoft Visual Basic for Applications VBA is an implementation of Microsoft's Visual Basic which is built into all Microsoft Office applications, as well as some other Microsoft applications, such as Microsoft Visio and Microsoft Works Suite. Visual Basic VB is an event driven programming and...

Memory corruption

VBE6.DLL in Microsoft Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Visual Basic for Applications VBA, and VBA SDK 6.3 through 6.5 does not properly search for ActiveX controls that are embedded in documents, which allows remote attackers to execute arbitrary code via ...

Visual Basic for Applications Single-Byte Stack Overwrite Vulnerability

CVE-2010-0815 在Microsoft Visual Basic的应用程序（VBA）的中，可以被恶意的人利用来可能危及用户的系统。 该漏洞是由于在一些分析代码时，在文件中搜索支持VBA中的ActiveX控件（如Office文档文本在 Vbe6.dll的错误）。这可以被利用来转换外的缓冲区的范围为0x00值0x2E通过一个特制的带有嵌入式的ActiveX文件一个字节的控制传递给VBA运行。 Microsoft Office 2003 Professional Edition Microsoft Office 2003 Small Business Edition Microsof...

CVE-2010-0815: Improper Control of Generation of Code

VBE6.DLL in Microsoft Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Visual Basic for Applications VBA, and VBA SDK 6.3 through 6.5 does not properly search for ActiveX controls that are embedded in documents, which allows remote attackers to execute arbitrary code via ...

Microsoft Patches Worm Holes in Mail Server, Visual Basic for Apps

Microsoft today issued patches for a pair of critical remote code execution vulnerabilities in Windows and Microsoft Office and urged affected users to apply the fixes as soon as possible. The most serious issue, addressed in the MS10-030 bulletin, affects Outlook Express, Windows Mail and Window...

Microsoft VBA buffer overflow

Buffer overflow on ActiveX elements search on Microsoft Office files parsing...

MS10-031: Description of the security update for Microsoft Visual Basic for Applications runtime: May 11, 2010

Resolves a security vulnerability that exists in Microsoft Visual Basic for Applications runtime that could allow remote code execution of a maliciously modified file.INTRODUCTIONMicrosoft has released security bulletin MS10-031. To view the complete security bulletin, visit one of the following...

MS10-031: Vulnerability in Microsoft Visual Basic for Applications Could Allow Remote Code Execution (978213)

A stack memory corruption vulnerability exists in the way that the installed version of Visual Basic for Applications VBA searches for ActiveX controls embedded in documents. If an attacker can trick a user on the affected system into opening a specially crafted document that supports VBA, this...

Microsoft to Patch Critical Windows, Office Flaws

Microsoft plans to ship two bulletins next Tuesday to fix multiple remote code execution vulnerabilities in Windows, Microsoft Office and Microsoft Visual Basic for Applications. Both bulletins are rated “critical,” Microsoft’s highest severity rating. The company describes a critical flaw as one...

SuSE Update for OpenOffice_org SUSE-SA:2010:017

Check for the Version of OpenOfficeorg OpenVAS Vulnerability Test SuSE Update for OpenOfficeorg SUSE-SA:2010:017 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

OpenOffice VBA Macro Restrictions Remote Security Bypass Vulnerability

Bugtraq ID:38245 CVE:CVE-2010-0136 OpenOffice is prone to a remote security-bypass vulnerability. An attacker can exploit this issue to bypass intended restrictions on macro code, which may allow the attacker to obtain sensitive information or launch further attacks. Details on this issue are not...

openSUSE Security Update : OpenOffice_org-base-drivers-postgresql (OpenOffice_org-base-drivers-postgresql-1980)

This update of OpenOfficeorg includes fixes for the following vulnerabilities : - CVE-2009-0217: XML signature weakness - CVE-2009-2949: XPM Import Integer Overflow - CVE-2009-2950: GIF Import Heap Overflow - CVE-2009-3301: MS Word sprmTDefTable Memory Corruption - CVE-2009-3302: MS Word...