Real-DRAW PRO 5.2.4 - Import File Crash

Real-DRAW PRO 5.2.4 - Import File Crash Real-DRAW PRO 5.2.4 Import File Crash =================================================================================== Exploit Title:Real-DRAW PRO 5.2.4 Malicious PNG File Denial of service Vendor : http://www.mediachance.com/ Author: Ahmed Elhady Mohame...

Real-DRAW PRO 5.2.4 - Import File Crash

Real-DRAW PRO 5.2.4 Import File Crash =================================================================================== Exploit Title:Real-DRAW PRO 5.2.4 Malicious PNG File Denial of service Vendor : http://www.mediachance.com/ Author: Ahmed Elhady Mohamed Email : [email protected]...

Real-DRAW PRO 5.2.4 Denial Of Service

Real-DRAW PRO 5.2.4 Import File Crash =================================================================================== Exploit Title:Real-DRAW PRO 5.2.4 Malicious PNG File Denial of service Vendor : http://www.mediachance.com/ Author: Ahmed Elhady Mohamed Email : [email protected]...

CVE-2011-0658

Integer underflow in the OLE Automation protocol implementation in VBScript.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via ...

Integer overflow

Integer underflow in the OLE Automation protocol implementation in VBScript.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via ...

CVE-2011-0658

Integer underflow in the OLE Automation protocol implementation in VBScript.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via ...

CVE-2011-0658

CVE-2011-0658 corresponds to Microsoft Windows OLE Automation Remote Code Execution via a malformed WMF in oleaut32.dll. Public sources (MS11-038) and multiple security analyses describe an integer underflow in the WMF parsing path, leading to arbitrary code execution when a user opens a crafted ...

Microsoft对象链接和嵌入(OLE)自动化WMF文件远程代码执行漏洞

Bugtraq ID: 48174 CVE ID：CVE-2011-0658 Microsoft Object Linking and EmbeddingOLE是许多Windows产品所具有的对象技术，它包含网络连接功能，以便用户能共享对象。 在解析Windows Metafile WMF图像时对象链接和嵌入OLE自动化oleaut32.dll存在一个错误，构建恶意WEB页，诱使用户解析，可导致任意代码执行 Microsoft Windows XP Tablet PC Edition SP3 Microsoft Windows XP Tablet PC Edition SP2...

Microsoft Windows OLE Automation Remote Code Execution Vulnerability (2476490)

This host is missing a critical security update according to Microsoft Bulletin MS11-038. OpenVAS Vulnerability Test $Id: secpodms11-038.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Windows OLE Automation Remote Code Execution Vulnerability 2476490 Authors: Madhuri D Copyright: Copyright c 2011...

MS11-038: Vulnerability in OLE Automation Could Allow Remote Code Execution (2476490)

The remote host is running a version of Windows that is affected by a remote code execution vulnerability. An attacker can exploit this by causing a user to visit a website containing a specially crafted Windows Metafile WMF image. Exploitation could allow an attacker to execute arbitrary code wi...

Microsoft Object Linking and Embedding (OLE) Automation WMF File Remote Code Execution Vulnerability

Description Microsoft Object Linking and Embedding OLE Automation is prone to a remote code-execution vulnerability because of an underflow error. An attacker can exploit this issue by enticing an unsuspecting user to view a malicious webpage or a specially crafted file. Successful exploits will...

Microsoft Windows OLEAUT32.DLL WMF File Remote Code Excution (MS11-038; CVE-2011-0658)

The vulnerability is caused by the way that OLE Automation parses a specially crafted WMF file. An attacker could host a specially crafted Web site that is designed to exploit this vulnerability through Internet Explorer and then persuade a user to view the Web site. An attacker who successfully...

Microsoft Windows Graphics Engine EMF and WMF Rendering (CVE-2005-2123; CVE-2005-2124)

A vulnerability exists in the way the graphics engine of Microsoft Windows processes of EMF and WMF image files. The flaw is a buffer overflow resulting from an unchecked user supplied size field value contained in an image file. This vulnerability, when exploited may allow a malicious user to ta...

Microsoft Windows WMF Handling Arbitrary Code Execution (CVE-2005-4560)

There exists a code execution vulnerability in Microsoft Windows. The vulnerability is created by unrestricted access to GDI functions through WMF files. An attacker can exploit this vulnerability to supply and execute arbitrary code through calling a specific GDI function via a crafted WMF file...

Microsoft Windows Graphics Rendering Engine Buffer Overflow (MS04-032; CVE-2004-0209)

The Microsoft Windows Metafile Format WMF is used to store pictures and other graphical renderings as either vector or bitmap-format graphical data. The vector data stored in WMF files is described as Microsoft Windows Graphics Device Interface GDI commands. The WMF format is the original 16-bit...

Microsoft WMF File Polypolygon Function Buffer Overflow (MS06-026; CVE-2006-2376)

Microsoft Windows Metafile Format WMF is a proprietary standard for representing graphical objects, mainly vector based graphic. WMF is capable of representing drawing lines, polygons, curves, and fonts. A vulnerability has been discovered in the Graphics Rendering Engine GRE component of Microso...

Mandriva Security Advisory MDVSA-2009:106-1 (libwmf)

The remote host is missing an update to libwmf announced via advisory MDVSA-2009:106-1. OpenVAS Vulnerability Test $Id: mdksa20091061.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:106-1 libwmf Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Mandriva Security Advisory MDVSA-2009:106-1 (libwmf)

The remote host is missing an update to libwmf announced via advisory MDVSA-2009:106-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Microsoft Windows Graphics Rendering Engine Code Execution (MS07-046; CVE-2007-3034)

The Windows Metafile WMF is a standard Windows image file format. It consists of a set of graphics functions and parameters that describe the steps required to render an image. WMF is a 16-bit format that can contain both vector and bitmap information. A WMF file contains a main header, followed ...

Microsoft GDI+库图形文件处理多个缓冲区溢出和内存破坏漏洞(MS09-062)

BUGTRAQ ID: 36619,36645,36646,36648,36649,36650,36651,36647 CVE ID: CVE-2009-2500,CVE-2009-2501,CVE-2009-2502,CVE-2009-2503,CVE-2009-2504,CVE-2009-3126,CVE-2009-2528,CVE-2009-2518 Microsoft产品中所使用的GDI+库（GdiPlus.dll）通过基于类的API提供对各种图形方式的访问。...