SAP 3D Visual Enterprise Viewer Memory Error References Remote Code Execution Vulnerability

SAP 3D Visual Enterprise Viewer VEV is a suite of software from SAP for viewing, zooming, panning and rotating interactive 3D data and playing step-by-step animations. A security vulnerability exists in SAP 3D Visual Enterprise Viewer. The vulnerability could be exploited by an attacker to execut...

SAP 3D Visual Enterprise Viewern Memory Error Reference Remote Code Execution Vulnerability

SAP 3D Visual Enterprise Viewer VEV is a suite of software from SAP for viewing, zooming, panning and rotating interactive 3D data and playing step-by-step animations. A security vulnerability exists in SAP 3D Visual Enterprise Viewern. The vulnerability could be exploited by an attacker to execu...

SAP 3D Visual Enterprise Viewer SketchUp Document Memory Error References Remote Code Execution Vulnerability

SAP 3D Visual Enterprise Viewer is the 3D visualization viewer. A vulnerability exists in SAP 3D Visual Enterprise Viewer's handling of SketchUp documents. An attacker can reuse a freed hanging pointer to execute arbitrary code in the current process context...

SAP Memory Misreference Vulnerability

Founded in 1972 and headquartered in Waldorf, Germany, SAP is the world's largest provider of enterprise management and collaborative e-business solutions and the world's third largest independent software vendor. A memory misreference vulnerability exists in SAP 3D Visual Enterprise Viewer,...

Microsoft Visual Studio Cross-Site Request Forgery Vulnerability

Microsoft Visual Studio is a family of development toolkits from Microsoft Corporation, USA. A cross-site request forgery vulnerability exists in Microsoft Visual Studio that allows remote attackers to construct malicious URIs, trick users into parsing them, which can be targeted to perform...

Design/Logic Flaw

Multiple use-after-free vulnerabilities in SAP 3D Visual Enterprise Viewer allow remote attackers to execute arbitrary code via a crafted SketchUp document. NOTE: the primary affected product may be SketchUp...

CVE-2016-2536

CVE-2016-2536 concerns multiple use-after-free vulnerabilities in SAP 3D Visual Enterprise Viewer, exploitable via crafted SketchUp documents. The primary affected product is likely SketchUp. The ZDI advisories describe a remote code execution flaw that requires user interaction (target must open...

(0Day) SAP 3D Visual Enterprise Viewer SketchUp document Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

(0Day) SAP 3D Visual Enterprise Viewer SketchUp document Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Microsoft Visual Studio Installed

Binary data microsoftvisualstudioinstalled.nbin...

KB 3137909: Vulnerabilities in ASP.NET Templates Could Allow Tampering

The remote Windows host has a version of Visual Studio installed that has ASP.NET MVC5 or ASP.NET MVC6 project templates that are affected by a cross-site request forgery XSRF vulnerability. ASP.NET projects built from these templates will be affected by the XSRF vulnerability. C Tenable Network...

Microsoft ASP.NET Templates Cross Site Request Forgery Vulnerability

Description Microsoft ASP.NET is prone to a cross-site request-forgery vulnerability. An attacker can exploit this issue to perform unauthorized actions in the context of a logged-in user of the affected application. This may aid in other attacks. Technologies Affected Microsoft ASP.NET MVC 5.0...

HARMAN AMX Deliberate Backdoor SEC Consult

AMX, a provider of audio-visual conferencing gear used in sensitive government and military locations, has removed a “deliberate” backdoor in one of its central controller system products. New firmware for the AMX NX-1200 was made available Thursday, removing an administrative account that was...

Vulnerability of Microsoft Visio graphic editors, Microsoft Excel spreadsheet editors, Microsoft PowerPoint presentation preparation software, Microsoft Word word processors, Microsoft Visual Basic software development environment, Microsoft Office software suite – tools that allow attackers to bypass ASLR protection mechanisms.

The vulnerabilities of Microsoft Visio, a graphic editor; Microsoft Excel, an electronic spreadsheet editor; Microsoft PowerPoint, a presentation software; Microsoft Word, a text editor; the Microsoft Visual Basic development environment; and the Microsoft Office suite are related to the lack of...

The vulnerability of the Internet Explorer browser, which allows a hacker to execute arbitrary code

The vulnerability of the VBScript component in Internet Explorer relates to the handling of objects in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft VBScript Arbitrary Code Execution Vulnerability

Microsoft VBScript is the United States Microsoft Microsoft company developed a scripting language, can be seen as a simplified version of the VB language. A memory corruption vulnerability exists in Microsoft Internet Explorer's VBScript and JScript, which could be exploited by a remote attacker...

CVE-2016-0012

Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Visio 2010 SP2, Word 2010 SP2, Office 2013 SP1, Excel 2013 SP1, PowerPoint 2013 SP1, Visio 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 20...

CVE-2016-0002

The Microsoft 1 VBScript 5.7 and 5.8 and 2 JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."...

Microsoft Visual Basic ASLR Bypass Vulnerability (3124585)

This host is missing an important security update according to Microsoft Bulletin MS16-004. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Patches Six Critical Flaws with January 2016 Updates

Microsoft released a scant nine bulletins today for Patch Tuesday, but six of them are marked critical and seven can lead to remote code execution. The updates, which address 25 vulnerabilities will be the last many who run Internet Explorer 8, 9, and 10 will receive unless they elect to update t...