Nmap 5.61TEST1 Released

Nmap 5.61TEST1 Released This Nmap 5.61TEST1 is an informal test release with all of the latest features from the SVN. Nmap "Network Mapper" is a free and open source utility for network exploration or security auditing. Many systems and network administrators also find it useful for tasks such as...

Design/Logic Flaw

Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold and SP1; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats...

Heap overflow

Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly parse records in Excel spreadsheets, which...

Out-of-bounds

Microsoft Excel 2007 SP2; Excel in Office 2007 SP2; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and Excel Services on Office SharePoint Server 2007 SP2 do not properly validate the sign of an unspecified array index, which allows remote...

CVE-2011-1988

Microsoft Excel heap memory corruption vulnerability (MS11-072) tied to parsing BIFF2 records in Excel files can allow remote code execution. Affected products include Excel 2003 SP3, 2007 SP2, Office 2007 SP2, Office for Mac variants, Open XML Converter for Mac, Excel Viewer SP2, and related Mac...

CVE-2011-1987

Array index error in Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold and SP1; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and...

Microsoft Office Excel Remote Code Execution Vulnerabilities (2587505)

This host is missing an important security update according to Microsoft Bulletin MS11-072. OpenVAS Vulnerability Test $Id: secpodms11-072.nasl 6523 2017-07-04 15:46:12Z cfischer $ Microsoft Office Excel Remote Code Execution Vulnerabilities 2587505 Authors: Madhuri D Copyright: Copyright c 2011...

Microsoft Excel Array Index CVE-2011-1990 Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers could exploit this issue by enticing victims to open a maliciously crafted Excel file. Successful exploits will allow attackers to execute arbitrary code with the privileges of the user running the applicatio...

Microsoft Report Viewer crossite scripting

ActiveX crossite scripting...

Microsoft Report Viewer Cross Site Scripting

================================================== Cross-Site Scripting XSS in Microsoft ReportViewer Controls Adam Bixby - Gotham Digital Science [email protected] Public Release Date: 8/9/2011 Confirmed Affected Software: Microsoft Report Viewer Redistributable 2005 SP1 and Microsoft Visual...

Microsoft Report Viewer Information Disclosure Vulnerability (2578230)

This host is missing an important security update according to Microsoft Bulletin MS11-067. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Report Viewer Information Disclosure Vulnerability (2578230)

This host is missing an important security update according to Microsoft Bulletin MS11-067. OpenVAS Vulnerability Test $Id: secpodms11-067.nasl 6532 2017-07-05 07:42:05Z cfischer $ Microsoft Report Viewer Information Disclosure Vulnerability 2578230 Authors: Veerendra GG Copyright: Copyright c 20...

CVE-2011-1976

Cross-site scripting XSS vulnerability in the Report Viewer Control in Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1 allows remote attackers to inject arbitrary web script or HTML via a parameter in a data source, aka "Report Viewer Controls XSS Vulnerability."...

Cross site scripting

Cross-site scripting XSS vulnerability in the Report Viewer Control in Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1 allows remote attackers to inject arbitrary web script or HTML via a parameter in a data source, aka "Report Viewer Controls XSS Vulnerability."...

CVE-2011-1976

Cross-site scripting XSS vulnerability in the Report Viewer Control in Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1 allows remote attackers to inject arbitrary web script or HTML via a parameter in a data source, aka "Report Viewer Controls XSS Vulnerability."...

CVE-2011-1976

CVE-2011-1976 is a cross-site scripting (XSS) vulnerability in the Report Viewer Controls for Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1. Affected component is Microsoft.ReportViewer.WebForms.dll; attacker-controlled input via the TimerMethod URL parameter is incorporated into a ...

Microsoft Visual Studio报告查看器控件跨站脚本漏洞

Bugtraq ID: 49033 Microsoft Visual Studio是一款微软公司的开发工具套件系列产品。 传递给Microsoft Visual Studio报告查看器控件的输入在返回用户之前缺少过滤，攻击者可以利用漏洞进行跨站脚本攻击，可在目标用户浏览器上执行任意HTML和脚本代码，可获得敏感信息或劫持用户会话。 Microsoft Visual Studio 2005 Team Edition Microsoft Visual Studio 2005 Standard Edition Microsoft Visual Studio 2005 Professional...

Microsoft Visual Studio Report Viewer 2005 Control - Multiple Cross-Site Scripting Vulnerabilities

Microsoft Visual Studio Report Viewer 2005 Control - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/49033/info Microsoft Visual Studio is prone to multiple cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An...

MS11-067: Vulnerability in Microsoft Report Viewer could allow information disclosure: August 9, 2011

Resolves security vulnerabilities that exist in Microsoft Report Viewer that could allow arbitrary code to run when a maliciously modified file is opened.IntroductionMicrosoft has released security bulletin MS11-067. To view the complete security bulletin, visit one of the following Microsoft...

MS11-067: Vulnerability in Microsoft Report Viewer Could Allow Information Disclosure (2578230)

The installed version of the Microsoft Report Viewer control fails to properly validate parameters within a data source, which results in a reflected or non-persistent cross-site scripting vulnerability. If an attacker can trick a user into clicking on a link to a malicious server, he could injec...