TPTI-10-02: Microsoft Office PowerPoint Viewer TextCharsAtom Record Code Execution Vulnerability

TPTI-10-02: Microsoft Office PowerPoint Viewer TextCharsAtom Record Code Execution Vulnerability http://dvlabs.tippingpoint.com/advisory/TPTI-10-02 February 9, 2010 -- CVE ID: CVE-2010-0034 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Office PowerPoint Viewer -- TippingPointTM I...

Microsoft Office PowerPoint Viewer TextBytesAtom Record Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office PowerPoint Viewer. User interaction is required to exploit this vulnerability in that the target must open a malicious presentation. The specific flaw exists in the handling of...

Microsoft PowerPoint Viewer TextBytesAtom Record Stack Overflow (MS10-004; CVE-2010-0033)

PowerPoint is a popular graphics software for preparing slides and presentations. A remote code execution vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a stack overflow in Microsoft PowerPoint TextBytesAtom record when processing malicious PowerPoint...

ACD Systems ACDSee Products XPM File Handling Buffer Overflow (CVE-2007-2193)

ACDSee is an image viewer software for Windows developed by ACD Systems. Besides the usual thumbnail viewing of folders and file type conversion, key features of ACDSee include slideshow presentations, CD/DVD burning, HTML gallery creation, image folder syncing and editing/indexing of image...

PDF-XChange Viewer/PDF-XChange PDF File Handling Memory Corruption

A version of PDF-XChange Viewer, PDF-XChange PDF Viewer SDK or PDF-XChange installed on the remote host fails to validate input while opening certain specially crafted PDF files. By tricking users into opening a malicious PDF file, a remote attacker could exploit this flaw to execute arbitrary co...

PDF-XChange Detection

PDF-XChange or PDF-XChange Viewer a software to create or view PDF files is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid44047; scriptversion"1.12"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06";...

CVE-2009-4588

CVE-2009-4588 describes a heap-based buffer overflow in the WindsPlayerIE.View.1 ActiveX control (WindsPly.ocx) used by AwingSoft Awakening Web3D Player and Winds3D Viewer. The vulnerability allows remote attackers to crash the application or execute arbitrary code by supplying a long SceneUrl va...

Secunia Research: PDF-XChange Viewer Content Parsing Memory Corruption Vulnerability

====================================================================== Secunia Research 04/01/2010 - PDF-XChange Viewer Content Parsing Memory Corruption Vulnerability - ====================================================================== Table of Contents Affected...

Microsoft Windows Kodak Image Viewer Code Execution (MS07-055; CVE-2007-2217)

Kodak Image Viewer is the picture viewer shipped with Microsoft Windows. It is capable of handling several types of popular graphic document format such as BMP, JPEG, PCX, GIF, TIFF. There exists a buffer overflow vulnerability in Microsoft Windows Kodak Image Viewer. The vulnerability is due to ...

KLA10287 ACE vulnerability in PDF-XChange Viewer

An unspecified vulnerability was found in PDF-XChange Viewer. By exploiting this vulnerability malicious users can execute arbitrary code or cause denial of service. This vulnerability can be exploited remotely via a specially designed PDF file. Original advisories securityfocus Related products...

Orbitals.com Orbital Viewer .orb Stack Buffer Overflow (CVE-2010-0688)

Orbital Viewer is a picture viewer and a drawing tool. A stack buffer overflow vulnerability has been reported in Orbital Viewer. The vulnerability is due to a boundary error when processing malformed .orb files. A remote attacker can exploit this vulnerability by enticing a target user to open a...

[SECURITY] Fedora 11 Update: phpldapadmin-1.2.0.4-1.fc11

PhpLDAPadmin is a web-based LDAP client. It provides easy, anywhere-accessible, multi-language administration for your LDAP server. Its hierarchical tree-viewer and advanced search functionality make it intuitive to browse and administer your LDAP director y. Since it is a web application, this...

Joomla! Component com_mediaslide - Directory Traversal

Joomla! Component commediaslide - Directory Traversal Joomla Component commediaslide Directory Traversal Vuln author : Mr.tro0oqy from Yemen mail : [email protected] fuck 2 community college sanaa exp : http://server/components/commediaslide/viewer.php?path=/../.. dork :...

Joomla! Component com_mediaslide - Directory Traversal

Joomla Component commediaslide Directory Traversal Vuln author : Mr.tro0oqy from Yemen mail : [email protected] fuck 2 community college sanaa exp : http://server/components/commediaslide/viewer.php?path=/../.. dork : inurl:index.php?option=commediaslide...

xpdf: buffer overflow in FoFiType1::parse

The FoFiType1::parse function in fofi/FoFiType1.cc in Xpdf 3.0.0, gpdf 2.8.2, kpdf in kdegraphics 3.3.1, and possibly other libraries and versions, does not check the return value of the getNextLine function, which allows context-dependent attackers to execute arbitrary code via a PDF file with a...

Xpdf Splash DrawImage Integer Overflow (CVE-2009-3604)

Xpdf is an open source PDF viewer for the Unix-like operating systems and works under the X Window graphical user interface system. An integer overflow vulnerability has been reported in Xpdf. The vulnerability is caused by an error in the Xpdf due to lack of input validation when handling images...

PT-2009-6399 · Testlink Team · Testlink

Name of the Vulnerable Software and Affected Versions: TestLink versions prior to 1.8.5 Description: The issue allows remote attackers to inject arbitrary web script or HTML via several parameters, including the req parameter to "login.php", and allows remote authenticated users to inject arbitra...

MS to Patch Critical IE Zero-Day Flaw

Just two weeks after the release of exploit code for a critical remotely exploitable security hole in its Internet Explorer browser, Microsoft says a fix will be included in this month’s batch of Patch Tuesday updates. Microsoft has already issued an advisory to confirm the severity of the issue,...

MuPDF pdf_shade4.c Multiple Stack-Based Buffer Overflows

No description provided by source. "MuPDF is a lightweight PDF viewer and toolkit written in portable C". It is used in particular by SumatraPDF which is a small open-source PDF viewer for Windows. MuPDF before commit 20091125231942 did not properly handle /Decode arrays in a shading of type 4 to...

MuPDF 20091125231942 - pdf_shade4.c Multiple Stack Buffer Overflows

MuPDF 20091125231942 - pdfshade4.c Multiple Stack Buffer Overflows "MuPDF is a lightweight PDF viewer and toolkit written in portable C". It is used in particular by SumatraPDF which is a small open-source PDF viewer for Windows. MuPDF before commit 20091125231942 did not properly handle /Decode...