MS12-031: Vulnerability in Microsoft Visio Viewer 2010 Could Allow Remote Code Execution (2597981)

The version of Microsoft Visio Viewer installed on the remote Windows host is reportedly affected by a memory corruption vulnerability due to the way the application handles memory when parsing specially crafted Visio files. An attacker who tricked a user on the affected host into opening a...

CVE-2012-0141

CVE-2012-0141 affects Microsoft Excel and related Office components across Windows and Mac platforms (Excel 2003 SP3, 2007 SP2/SP3, 2010 SP1/Gold, Office 2011 for Mac, Excel Viewer, Office Compatibility Pack). The root cause is memory corruption during parsing/opening specially crafted Excel/RTF ...

Microsoft Office Visio Viewer Remote Code Execution Vulnerability (2597981)

This host is missing an important security update according to Microsoft Bulletin MS12-031. OpenVAS Vulnerability Test $Id: secpodms12-031.nasl 6538 2017-07-05 11:38:27Z cfischer $ Microsoft Office Visio Viewer Remote Code Execution Vulnerability 2597981 Authors: Antu Sanadi Copyright: Copyright ...

CVE-2012-0185

CVE-2012-0185 is a heap-based buffer overflow affecting Microsoft Excel 2007 SP2/SP3, Excel 2010 Gold/SP1, Excel Viewer, and Office Compatibility Pack SP2/SP3 . The vulnerability arises from inefficient/incorrect memory handling during opening of crafted spreadsheets , specifically related to the...

CVE-2012-0185

Heap-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 Gold and SP1, Excel Viewer, and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet that triggers incorrect handling of memory during opening, aka "Excel MergeCell...

Microsoft Visio Viewer VSD文件格式远程代码执行漏洞(MS12-031)

BUGTRAQ ID: 53328 CVE ID: CVE-2012-0018 Microsoft Visio是Windows操作系统下运行的流程图软件，它现在是Microsoft Office软件的一个部分。 MMicrosoft Visio在验证Visio文件格式的某些属性的实现上存在远程代码执行漏洞，攻击者可通过特制的Visio文件利用此漏洞破坏内存，以当前用户权限执行任意代码。 0 Microsoft Visio Viewer 2010 SP1 Microsoft Visio Viewer 2010 0 厂商补丁： Microsoft ---------...

Microsoft Visio Viewer VSD File Format CVE-2012-0018 Remote Code Execution Vulnerability

Description Microsoft Visio Viewer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected...

Samsung NET-i Viewer Active-X SEH Overwrite

' Exploit Title: SAMSUNG NET-i viewer ActiveX SEH Overwrite ' Date: April 30 2012 ' Author: Blake ' Software Link: http://www.samsungsecurity.com/product/productview.asp?idx=5828 ' Version: 1.37 ' Tested on: Windows XP SP3 with IE6 running on Virtualbox ' RequestScreenOptimization in...

SAMSUNG NET-i Viewer 1.37 SEH Overwrite

Exploit for windows platform in category local exploits ' Exploit Title: SAMSUNG NET-i viewer ActiveX SEH Overwrite ' Date: April 30 2012 ' Author: Blake ' Software Link: http://www.samsungsecurity.com/product/productview.asp?idx=5828 ' Version: 1.37 ' Tested on: Windows XP SP3 with IE6 running o...

SAMSUNG NET-i Viewer 1.37 - Overwrite (SEH)

' Exploit Title: SAMSUNG NET-i viewer ActiveX SEH Overwrite ' Date: April 30 2012 ' Author: Blake ' Software Link: http://www.samsungsecurity.com/product/productview.asp?idx=5828 ' Version: 1.37 ' Tested on: Windows XP SP3 with IE6 running on Virtualbox ' RequestScreenOptimization in...

Novell GroupWise 8 Document Viewer File Disclosure

File disclosure vulnerability in Novell GroupWise Document Viewer Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Fedora 17 : python-django-horizon-2012.1-2.fc17 (2012-6108)

Update to Essex final Fix a XSS vulnerability in Horizon log viewer Update to final essex release Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Samsung NET-i Viewer Multiple ActiveX BackupToAvi() Remote Overflow

This module exploits a vulnerability in the CNCCtrl.dll ActiveX control installed with the Samsung NET-i viewer 1.37. Specifically, when supplying a long string for the fname parameter to the BackupToAvi method, an integer overflow occurs, which leads to a posterior buffer overflow due to the use...

Fedora Update for gwenview FEDORA-2011-13417

Check for the Version of gwenview OpenVAS Vulnerability Test Fedora Update for gwenview FEDORA-2011-13417 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for okular FEDORA-2011-13417

Check for the Version of okular OpenVAS Vulnerability Test Fedora Update for okular FEDORA-2011-13417 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

UltraVNC 1.0.2 Client (vncviewer.exe) Buffer Overflow

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ class Metasploit3...

Viscom Software Image Viewer ActiveX Buffer Overflow

A buffer overflow vulnerability has been reported in Viscom Software Image Viewer. The vulnerability is due to a boundary error when handling a certain function call with an overly long parameter. A remote attacker may exploit this vulnerability by enticing an affected user to open a specially...

ManageEngine Device Expert 5.6 Directory Traversal

ManageEngine DeviceExpert 5.6 Java Server ScheduleResultViewer servlet Unauthenticated Remote Directory Traversal Database Backup / auth-conf.xml Disclosure Exploit product homepage: http://www.manageengine.com/products/device-expert/ file tested: ManageEngineDeviceExpert.exe tested against:...

DarkComet-RAT v5.1 Released - Remote Administration Tool

DarkComet-RAT v5.1 Released - Remote Administration Tool This new version of the famous darkcomet RAT , a remote management tool created by DarkCoderSc . DarkComet is also considered as the most stable RAT around and it is even regarded more stable than some professional ones. Change Log: - GUI...

XnView FlashPix Image Processing - Heap Overflow

Application: XnView FlashPix Image Processing Heap Overflow Platforms: Windows Secunia: SA47388 PRL: 2012-06 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timeline 3 Technical details 4 The Code...