CVE-2010-5194

Stack-based buffer overflow in the Image2PDF function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control ImageViewer2.ocx in Viscom Image Viewer CP Pro 8.0, Gold 5.5, Gold 6.0, and earlier allows remote attackers to execute arbitrary code via a long strPDFFile parameter...

DSA-2536-1 otrs2 - cross-site scripting

Bulletin has no description...

EMC ApplicationXtender Desktop Viewer AEXView ActiveX AnnoSave Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC ApplicationXtender. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Wiki Web Help 0.3.9 Cross Site Scripting

Exploit Title: Multiple Stored XSS Vulnerabilities in Wiki Web Help. Date: 23/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://wikiwebhelp.org Software Link: http://sourceforge.net/projects/wwh/files/wwh-0.3.9.7z/download Version: 0.3.9 Gr33Tz: @aviadgolan , @benhayak,...

Foxit Foxit Reader 5.x 不明细节内存破坏漏洞

BUGTRAQ ID: 55150 CVE ID: CVE-2012-4337 Foxit Reader是一款小型的PDF文档查看器和打印程序。 Foxit Reader 5.1.4.0104及更早版本解析PDF文件的实现上存在安全漏洞，可被利用破坏内存，执行任意代码并控制用户系统。 0 Foxit Foxit Reader 5.x 厂商补丁： Foxit ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.foxitsoft.com/wac/serverintro.php...

Microsoft Office multiple security vulnerabilities

Memory corruption on RTF parsing, multiple Excel memory corruptions, memory corruption in Visio Viewer...

CVE-2012-1888

Buffer overflow in Microsoft Visio 2010 SP1 and Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio file, aka "Visio DXF File Format Buffer Overflow Vulnerability."...

CVE-2012-1888

CVE-2012-1888 concerns a buffer overflow in Microsoft Visio 2010 SP1 and Visio Viewer 2010 SP1 during DXF parsing. The root cause is a memory corruption flaw in the DWGDP.DLL while processing MTEXT strings in DXF files, potentially copying data beyond the stack. This allows remote code execution ...

Microsoft Office Visio/Viewer Remote Code Execution Vulnerability (2733918)

This host is missing an important security update according to Microsoft Bulletin MS12-059. OpenVAS Vulnerability Test $Id: secpodms12-059.nasl 5963 2017-04-18 09:02:14Z teissa $ Microsoft Office Visio/Viewer Remote Code Execution Vulnerability 2733918 Authors: Antu Sanadi Copyright: Copyright c...

Microsoft Office Visio/Viewer Remote Code Execution Vulnerability (2733918)

This host is missing an important security update according to Microsoft Bulletin MS12-059. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS Exchange Server WebReady Document Viewing Remote Code Execution Vulnerabilities (2740358)

This host is missing a critical security update according to Microsoft Bulletin MS12-058. OpenVAS Vulnerability Test $Id: secpodms12-058.nasl 5346 2017-02-19 08:43:11Z cfi $ MS Exchange Server WebReady Document Viewing Remote Code Execution Vulnerabilities 2740358 Authors: Madhuri D Copyright:...

MS12-059: Buffer Overflow in Microsoft Visio and Visio Viewer Could Allow Remote Code Execution (2733918)

The remote host contains a version of Microsoft Visio or Visio Viewer that is affected by a buffer overflow vulnerability. A memory handling error exists when parsing specially crafted DFX files. A remote attacker could exploit these issues by tricking a user into opening a specially crafted...

CVE-2012-4335

Samsung NET-i viewer 1.37.120316 allows remote attackers to cause a denial of service infinite loop via a negative size value in a TCP request to 1 NiwMasterService or 2 NiwStorageService. NOTE: some of these details are obtained from third party information...

CVE-2012-4334

The ConnectDDNS method in the 1 STWConfigNVR 1.1.13.15 and 2 STWConfig 1.1.14.13 ActiveX controls in Samsung NET-i viewer 1.37.120316 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: some of these details are obtained from third party information...

Stack overflow

Multiple stack-based buffer overflows in the BackupToAvi method in the 1 UMSCtrl 1.5.1.1 and 2 UMSCtrlSTW 2.0.1.0 ActiveX controls in Samsung NET-i viewer 1.37.120316 allow remote attackers to execute arbitrary code via a long string in the fname parameter. NOTE: some of these details are obtaine...

Information disclosure

Samsung NET-i viewer 1.37.120316 allows remote attackers to cause a denial of service infinite loop via a negative size value in a TCP request to 1 NiwMasterService or 2 NiwStorageService. NOTE: some of these details are obtained from third party information...

Information disclosure

The ConnectDDNS method in the 1 STWConfigNVR 1.1.13.15 and 2 STWConfig 1.1.14.13 ActiveX controls in Samsung NET-i viewer 1.37.120316 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: some of these details are obtained from third party information...

CVE-2012-4334

The CVE-2012-4334 issue affects Samsung NET-i Viewer 1.37.120316, specifically the ConnectDDNS method in the STWConfigNVR 1.1.13.15 and STWConfig 1.1.14.13 ActiveX controls. A remote attacker can trigger arbitrary code execution via unspecified vectors. Details are drawn from multiple sources; th...

CVE-2012-4335

Samsung NET-i viewer 1.37.120316 allows remote attackers to cause a denial of service infinite loop via a negative size value in a TCP request to 1 NiwMasterService or 2 NiwStorageService. NOTE: some of these details are obtained from third party information...

CVE-2012-4335

CVE-2012-4335 affects Samsung NET-i viewer 1.37.120316. A flaw in TCP handling allows remote attackers to trigger a denial of service (infinite loop) by sending a negative size value to NiwMasterService or NiwStorageService. Root cause is malformed input in TCP requests that produce looping behav...