VulnCheck KEV: CVE-2008-1898

A certain ActiveX control in WkImgSrv.dll 7.03.0616.0, as distributed in Microsoft Works 7 and Microsoft Office 2003 and 2007, allows remote attackers to execute arbitrary code or cause a denial of service browser crash via an invalid WksPictureInterface property value, which triggers an...

U.S. Needs Cybersecurity Skunk Works, Expert Says

ARLINGTON, VA–In order to address the fundamental questions surrounding the concept of cyberwar and what it might mean for both the government and the enterprise, the United States should develop a skunk works-type think tank comprising highly skilled private-sector security experts as well as...

IBM Developer Works Defaced by Hmei7 !

IBM Developer Works Defaced by Hmei7 ! Website Link : https://www.ibm.com/developerworks/linux/ Zone-H mirror: News Source : Hmei7 Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post...

Memory corruption

The TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and Works 9 does not properly convert data, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted TIFF image in an Office document, ak...

Heap overflow

Heap-based buffer overflow in the TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and Works 9 allows remote attackers to execute arbitrary code via a crafted TIFF image in an Office document, aka "TIFF Image Converter Heap Overflow Vulnerability."...

Alleged Mega-D Botnet Controller Pleads Not Guilty

The man accused of running the Mega-D spam-spewing botnet has pleaded not guilty to charges that he was using the botnet to send millions of spam messages a day, some of them laden with malware. Oleg Nikolaenko was arraigned in U.S. District Court in Wisconsin on Friday on charges that he violate...

Microsoft Works 7 - 'WkImgSrv.dll' WKsPictureInterface() ActiveX (Metasploit)

$Id: msworkswkspictureinterface.rb 10477 2010-09-25 11:59:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft Word sprmCMajority记录解析栈溢出漏洞（MS10-056）

BUGTRAQ ID: 42136 CVE ID: CVE-2010-1900 Word是微软Office套件中的文字处理工具。 在解析Word文档中的sprmCMajority记录时，由于处理sprmCMajority sprm组没有对参数执行检查，攻击者可以控制写入到栈缓冲区中的数据数量，触发栈溢出。成功利用此漏洞的攻击者可完全控制受影响的系统。 Microsoft Office 2008 for Mac Microsoft Office 2004 for Mac Microsoft Word 2007 SP2 Microsoft Word 2003 SP3 Microsoft Wo...

CVE-2010-1900

Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and Works 9 do not properly handle malformed records in a Wo...

DoubleTake/HP StorageWorks Storage Mirroring Service - Authentication Overflow (Metasploit)

$Id: doubletake.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

vBulletin 0-day Denial Of Service Exploit

========================================= vBulletin 0-day Denial Of Service Exploit ========================================= The largest Exploit Database in the world ! 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,/ / 1 1 // /' / // /' / /'...

NUs Newssystem v1.02 (id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================== NUs Newssystem v1.02 id SQL Injection Vulnerability ===================================================== .-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-. + Autor:...

Microsoft Works File Converter WPS File Section Header Index Table Stack Overflow (MS08-011; CVE-2008-0105)

Microsoft Works is a home/office productivity software suite. Its core functionality includes a word processor, a spreadsheet, and a database. A Microsoft Works Document, normally denoted by the extension .wps, has numerous properties which define the appearance of the document, as well as some...

Integer overflow

Integer overflow in the text converters in Microsoft Office Word 2002 SP3 and 2003 SP3; Works 8.5; Office Converter Pack; and WordPad in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a DOC file with an invalid number of property names ...

CVE-2009-2506

The CVE-2009-2506 issue is a memory corruption/heap overflow vulnerability in WordPad and Office text converters when parsing the DocumentSummaryInformation stream of a specially crafted Word 97 DOC file. A remote attacker could execute arbitrary code with the privileges of the logged-on user by ...

WordPad and Office Text Converters Remote Code Execution Vulnerability (975539)

This host is missing a critical security update according to Microsoft Bulletin MS09-073. OpenVAS Vulnerability Test $Id: secpodms09-073.nasl 5363 2017-02-20 13:07:22Z cfi $ WordPad and Office Text Converters Remote Code Execution Vulnerability 975539 Authors: Antu Sanadi Updated By: Antu Sanadi ...

WordPad and Office Text Converters Remote Code Execution Vulnerability (975539)

This host is missing a critical security update according to Microsoft Bulletin MS09-073. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Security Bulletin MS09-073 - Important Vulnerability in WordPad and Office Text Converters Could Allow Remote Code Execution (975539)

Microsoft Security Bulletin MS09-073 - Important Vulnerability in WordPad and Office Text Converters Could Allow Remote Code Execution 975539 Published: December 08, 2009 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Microso...

MS09-073: Vulnerability in WordPad and Office Text Converters Could Allow Remote Code Execution (975539)

The remote host contains a vulnerable version of Microsoft WordPad, Office, or Office Converter Pack. Opening a specially crafted Word 97 file can result in the execution of arbitrary code. A remote attacker could exploit this by tricking a user into opening a malicious Word file. C Tenable Netwo...

DoubleTake/HP StorageWorks Storage Mirroring Service Authentication Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'DoubleTake/H...