The vulnerabilities of Microsoft Excel editors, Microsoft Excel Viewer for electronic spreadsheet viewing, and the Microsoft Office Compatibility Pack are caused by an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Excel editors, Microsoft Excel Viewer, and the Microsoft Office Compatibility Pack is related to improper handling of objects in memory. Exploitation of this vulnerability may allow a malicious actor to execute arbitrary code in the context of the current user...

comm.sba.seoul.kr XSS vulnerability

Open Bug Bounty ID: OBB-527964 Description| Value ---|--- Affected Website:| comm.sba.seoul.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

[SECURITY] Fedora 26 Update: mupdf-1.12.0-1.fc26

MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...

CVE-2017-18014

An NC-25986 issue was discovered in the Logging subsystem of Sophos XG Firewall with SFOS before 17.0.3 MR3. An unauthenticated user can trigger a persistent XSS vulnerability found in the WAF log page Control Center - Log Viewer - in the filter option "Web Server Protection" in the webadmin...

Cross site scripting

An NC-25986 issue was discovered in the Logging subsystem of Sophos XG Firewall with SFOS before 17.0.3 MR3. An unauthenticated user can trigger a persistent XSS vulnerability found in the WAF log page Control Center - Log Viewer - in the filter option "Web Server Protection" in the webadmin...

Blender Directory Browsing Thumbnail Viewer Integer Overflow Vulnerability

Blender is an open source cross-platform all-in-one 3D animation software, providing a series of animated short film production solutions from modeling, animation, materials, rendering, to audio processing, video editing and so on. An integer overflow vulnerability exists in Blender Directory...

Samsung SRN-1670D Web Viewer 1.0.0.193 Arbitrary File Read / Upload

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'digest' class MetasploitModule 'Samsung SRN-1670D Web Viewer Version 1.0.0.193 Arbitrary File Read and Upload', 'Description' = %q This module exploits an...

[SECURITY] Fedora 27 Update: mupdf-1.12.0-1.fc27

MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...

Memory Corruption Vulnerability in 2345 Viewer V9.0

2345 Viewer is one of the fastest and most format-compatible high-definition image viewing software. A memory corruption vulnerability exists in 2345 Viewer V9.0 when parsing the BMP file format, which allows an attacker to construct a malicious BMP image file to trigger a memory corruption,...

Microsoft Excel Viewer 2007 Service Pack 3 Remote Code Execution Vulnerability (KB4011606)

This host is missing an important security update according to Microsoft KB4011606 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Office Word Viewer Memory Corruption Vulnerability (KB4011641)

This host is missing an important security update according to Microsoft KB4011641 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Description of the security update for Word Viewer: January 9, 2018

None None...

Microsoft Word CVE-2018-0797 Memory Corruption Vulnerability

Description Microsoft Word is prone to a memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft Offic...

PDF-XChange Viewer 'launchURL' Function Arbitrary Code Execution Vulnerability

PDF-XChange Viewer is a free multifunctional PDF reader. An arbitrary code execution vulnerability exists in the 'launchURL' function in PDF-XChange Viewer version 2.5 Build 314.0. A remote attacker can exploit this vulnerability to execute arbitrary code with the help of a specially crafted PDF...

Code injection

The launchURL function in PDF-XChange Viewer 2.5 Build 314.0 might allow remote attackers to execute arbitrary code via a crafted PDF file...

CVE-2017-13056

The launchURL function in PDF-XChange Viewer 2.5 Build 314.0 might allow remote attackers to execute arbitrary code via a crafted PDF file...

CVE-2017-13056

The launchURL function in PDF-XChange Viewer 2.5 Build 314.0 might allow remote attackers to execute arbitrary code via a crafted PDF file...

CVE-2017-13056

The CVE-2017-13056 entry concerns PDF-XChange Viewer 2.5 (Build 314.0) and its launchURL function. Multiple connected sources (CNVD-2018-01636, NVD, CVE records, and PacketStorm) confirm a remote code execution vulnerability caused by a flaw in the app.launchURL path that accepts a crafted PDF fi...

CVE-2017-13056

The launchURL function in PDF-XChange Viewer 2.5 Build 314.0 might allow remote attackers to execute arbitrary code via a crafted PDF file...

[SECURITY] Fedora 26 Update: evince-3.24.2-2.fc26

Evince is simple multi-page document viewer. It can display and print Portable Document Format PDF, PostScript PS and Encapsulated PostScript EPS files. When supported by the document format, evince allows searching for text, copying text to the clipboard, hypertext navigation, table-of-contents...