Remote code execution

Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, and Office Online Server allow remote code execution when the software fails to properly...

CVE-2017-11826

Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, and Office Online Server allow remote code execution when the software fails to properly...

CVE-2017-11826

Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, and Office Online Server allow remote code execution when the software fails to properly...

WEM Administration Console Agent list does not contain WEM Agents

Some or all WEM Agents do not appear in the Agent list within the WEM Administration Console. The Norskale Agent Service Event Viewer Logs on affected machines contain the following error: Level: Error Source: Norskale Agent service Event ID: 0 The creator of this fault did not specify a reason...

CVE-2017-11826: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, and Office Online Server allow remote code execution when the software fails to properly...

CVE-2017-10864

Untrusted search path vulnerability in Installer of HIBUN Confidential File Viewer prior to 11.20.0001 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in Installer of HIBUN Confidential File Viewer prior to 11.20.0001 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10864

The CVE-2017-10864 issue affects Hitachi HIBUN Confidential File Viewer installer prior to version 11.20.0001. According to the connected documents, an untrusted search path vulnerability in the installer can allow privilege escalation via a Trojan horse DLL placed in an unspecified directory (CW...

CVE-2017-10864

Untrusted search path vulnerability in Installer of HIBUN Confidential File Viewer prior to 11.20.0001 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10864: Untrusted Search Path

Untrusted search path vulnerability in Installer of HIBUN Confidential File Viewer prior to 11.20.0001 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

PT-2017-11568

Name of the Vulnerable Software and Affected Versions HIBUN Confidential File Viewer versions prior to 11.20.0001 Description The issue is related to an untrusted search path vulnerability in the Installer of HIBUN Confidential File Viewer. This vulnerability allows an attacker to gain privileges...

KLA11064 Multiple vulnerabilities in IrfanView

Multiple serious vulnerabilities have been found in IrfanView 4.44. Malicious users can exploit these vulnerabilities to cause a denial of service or execute arbitrary code. Below is a complete list of vulnerabilities: 1. An integer overflow vulnerability in the JPEG 2000 parser can be exploited...

JVN#94056834: Installer of HIBUN Confidential File Viewer may insecurely load Dynamic Link Libraries and invoke executable files

Installer of HIBUN Confidential File Viewer provided by Hitachi Solutions, Ltd. contains an issue with the search path for DLL/executable files, which may lead to insecurely loading Dynamic Link Libraries and invoking executable files CWE-427. Impact Arbitrary code may be executed with the...

Microsoft Office Word Viewer Remote Code Execution Vulnerability (KB4011236)

This host is missing an important security update according to Microsoft KB4011236 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Description of the security update for Word Viewer: October 10, 2017

None None...

PT-2017-2949 · Microsoft · Sharepoint Server +6

Name of the Vulnerable Software and Affected Versions: Microsoft Office versions 2007 through 2016 Microsoft Office Web Apps Server versions 2010 through 2013 Office Online Server SharePoint Enterprise Server 2010 SharePoint Server 2010 Word Viewer Word Automation Services Description: A remote...

WEM agent is not able to connect/synchronize with the WEM Broker Server

ISSUE: WEM Agent is not able to connect and synchronize with the WEM Broker servers ERRORS PRESENT: The WEM Agent session & Debug logs show the following error: Exception - AgentLocalCacheSync. : The communication object, System.ServiceModel.Channels.ServiceChannel, cannot be used for communicati...

SAP NetWeaver Log Viewer Code Execution

The vulnerability of the Log Viewer component in the SAP NetWeaver software integration platform exists due to an incorrect restriction on the path name to the restricted access directory. The web application recognizes “.” and “/” as part of a valid file path. Exploiting this vulnerability allow...

STDU Viewer Buffer Overflow Vulnerability (CNVD-2017-30446)

STDU Viewer is a free file viewer that supports multiple formats. The program supports TIFF, PDF, DjVu, XPS and WWF formats. A security vulnerability exists in STDU Viewer version 1.6.375. An attacker can exploit this vulnerability to cause a denial of service with the help of a specially crafted...

STDU Viewer Buffer Overflow Vulnerability (CNVD-2017-30445)

STDU Viewer is a free file viewer that supports multiple formats. The program supports TIFF, PDF, DjVu, XPS and WWF formats. A security vulnerability exists in STDU Viewer version 1.6.375. The vulnerability can be exploited to execute arbitrary code or cause a denial of service with the help of a...