Microsoft XML Editor Information Disclosure Vulnerability (2543893)

This host is missing an important security update according to Microsoft Bulletin MS11-049. OpenVAS Vulnerability Test $Id: secpodms11-049.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft XML Editor Information Disclosure Vulnerability 2543893 Authors: Antu Sanadi Copyright: Copyright c 2011 SecPod...

CVE-2011-1280

The XML Editor in Microsoft InfoPath 2007 SP2 and 2010; SQL Server 2005 SP3 and SP4 and 2008 SP1, SP2, and R2; SQL Server Management Studio Express SSMSE 2005; and Visual Studio 2005 SP1, 2008 SP1, and 2010 does not properly handle external entities, which allows remote attackers to read arbitrar...

Xxe

The XML Editor in Microsoft InfoPath 2007 SP2 and 2010; SQL Server 2005 SP3 and SP4 and 2008 SP1, SP2, and R2; SQL Server Management Studio Express SSMSE 2005; and Visual Studio 2005 SP1, 2008 SP1, and 2010 does not properly handle external entities, which allows remote attackers to read arbitrar...

CVE-2011-1280

The XML Editor in Microsoft InfoPath 2007 SP2 and 2010; SQL Server 2005 SP3 and SP4 and 2008 SP1, SP2, and R2; SQL Server Management Studio Express SSMSE 2005; and Visual Studio 2005 SP1, 2008 SP1, and 2010 does not properly handle external entities, which allows remote attackers to read arbitrar...

Microsoft ATL/MFC跟踪工具'dwmapi.dll' DLL装载任意代码执行漏洞

Bugtraq ID: 42811 CVE ID：CVE-2010-3190 Microsoft Visual Studio是微软公司的开发工具套件系列产品，是一个基本完整的开发工具集，包括了软件整个生命周期中所需要的大部分工具。 Microsoft Visual Studio中使用的ATL MFC Trace Tool AtlTraceTool8.exe工具不安全装载'dwmapi.dll'库，攻击者可以诱使用户在远程WebDAV或SMB共享上打开 TRC，cu，rs，rc或res文件，可以以用户安全上下文装载任意库。 Microsoft Visual Studio 2010 0...

Microsoft XML外部实体分解CVE-2011-1280信息泄露漏洞

Bugtraq ID: 48196 CVE ID：CVE-2011-1280 Microsoft XML Editor是一款”基于Microsoft Visual Studio"文本编辑器，并增加了对XML语言的支持。 在解析Web服务发现文件".disco"中的XML外部实体时存在错误，攻击者可以利用漏洞获得任意文件的敏感内容。 Microsoft Visual Studio 2010 0 Microsoft Visual Studio 2008 SP1 Microsoft Visual Studio 2005 SP1 Microsoft SQL Server Management...

KB2543893 - MS11-049: Vulnerability in the Microsoft XML Editor could allow information disclosure: June 14, 2011

Resolves a vulnerability in Microsoft XML Editor that could allow information disclosure if a user opened a specially crafted Web Service Discovery .disco file within one of the applications listed in the "Applies to" section.IntroductionMicrosoft has released security bulletin MS11-049. To view...

Microsoft XML External Entities Resolution CVE-2011-1280 Information Disclosure Vulnerability

Description Microsoft XML editor is prone to a remote information-disclosure vulnerability. Attackers can exploit this issue to gain access to sensitive information that may aid in further attacks. Attackers can exploit this issue by enticing an unsuspecting user to visit a specially crafted...

Microsoft Foundation Class (MFC) Library Remote Code Execution Vulnerability (2500212)

This host is missing a critical security update according to Microsoft Bulletin MS11-025. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Foundation Class (MFC) Library Remote Code Execution Vulnerability (2500212)

This host is missing a critical security update according to Microsoft Bulletin MS11-025. OpenVAS Vulnerability Test $Id: secpodms11-025.nasl 6517 2017-07-04 13:34:20Z cfischer $ Microsoft Foundation Class MFC Library Remote Code Execution Vulnerability 2500212 Authors: Veerendra GG Updated by:...

MS Visual Studio 9.0 .vbproj Buffer Overflow

!/usr/bin/ruby Title : MS Visual Studio 9.0 .vbproj Stack Buffer Overflow Author : KedAns-Dz E-mail : [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans Tested on : windows XP SP3 Français & Arabic Target : Microsoft Visual Studio v 9.0 / Basic...

MS Visual Studio 9.0 .csproj Buffer Overflow

!/usr/bin/ruby Title : MS Visual Studio 9.0 .csproj Stack Buffer Overflow Author : KedAns-Dz E-mail : [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans Tested on : windows XP SP3 Français & Arabic Target : Microsoft Visual Studio v 9.0 / CShar...

Microsoft Ships 12 Bulletins in February's Patch Tuesday

Microsoft addressed 22 flaws with 12 separate bulletins in February’s edition of Patch Tuesday, including three bulletins that were rated critical with the remaining nine rated as important. Among the programs affected are Microsoft Windows, Internet Explorer, Office, Visual Studio, and IIS. The...

Microsoft Readies 'Critical' Windows, IE Patches

As part of this month’s Patch Tuesday schedule, Microsoft plans to ship a dozen bulletins with fixes for 22 vulnerabilities, some serious enough to allow hackers complete access to a vulnerable Windows machine. According to Microsoft’s advance notice, three of the 12 bulletins will carry be rated...

Microsoft Products GDI Plus Remote Code Execution Vulnerabilities (954593)

This host is missing a critical security update according to Microsoft Bulletin MS08-052. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Visual Studio - Msmask32.ocx ActiveX Buffer Overflow (MS08-070) (Metasploit)

$Id: ms08070visualstudiomsmask.rb 11127 2010-11-24 19:35:38Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

How Visual Studio Makes Your Applications Vulnerable to Binary Planting

Microsoft Visual Studio can automatically make an application binary planting-positive i.e., vulnerable even when the developer makes no programming errors. Every MFC application seems to be automatically made vulnerable, with those statically linking MFC libraries actually having the vulnerable...

Microsoft Visual Studio Insecure Library Loading Vulnerability

Microsoft Visual Studio is prone to an insecure library loading vulnerability. This VT has been deprecated and replaced by the VT with the OID: 1.3.6.1.4.1.25623.1.0.900285. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Microsoft Visual Studio Insecure Library Loading Vulnerability

This host is installed with Microsoft Visual Studio and is prone to insecure library loading vulnerability. This NVT has been replaced by NVT secpodms11-025.nasl OID:1.3.6.1.4.1.25623.1.0.900285. OpenVAS Vulnerability Test $Id: secpodmsvisualstudioinsecurelibloadvuln.nasl 5394 2017-02-22 09:22:42...

CVE-2010-3190

Untrusted search path vulnerability in the Microsoft Foundation Class MFC Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1, 2008 SP1, and 2010; Visual C++ 2005 SP1, 2008 SP1, and 2010; and Exchange Server 2010 Service Pack 3, 2013, and 2013 allows local users to gain...