239 matches found
CVE-2014-9831
coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via a corrupted wpg file...
UBUNTU-CVE-2014-9831
coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via a corrupted wpg file...
CVE-2014-9814
ImageMagick allows remote attackers to cause a denial of service NULL pointer dereference via a crafted wpg file...
CVE-2014-9815
ImageMagick allows remote attackers to cause a denial of service application crash via a crafted wpg file...
PT-2014-9045 · Imagemagick +2 · Imagemagick +2
Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: The issue allows remote attackers to have an unspecified impact via a corrupted wpg file, specifically affecting the coders/wpg.c component in ImageMagick. Recommendations: At the momen...
CVE-2009-2093
SQL injection vulnerability in the console in IBM WebSphere Partner Gateway WPG Enterprise 6.0 before FP8, 6.1 before FP3, 6.1.1 before FP2, and 6.2 before FP1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
CVE-2009-0897
The CVE-2009-0897 pertains to IBM WebSphere Partner Gateway (WPG) versions 6.1.0 prior to 6.1.0.1 and 6.1.1 prior to 6.1.1.1. It enables remote authenticated users to disclose sensitive information via vectors related to the schema DB2 instance id and the bcgarchive (archiver script). Affected co...
CVE-2009-0897: Undefined Security Weakness
IBM WebSphere Partner Gateway WPG 6.1.0 before 6.1.0.1 and 6.1.1 before 6.1.1.1 allows remote authenticated users to obtain sensitive information via vectors related to the "schema DB2 instance id" and the bcgarchive aka the archiver script...
Design/Logic Flaw
IBM WebSphere Partner Gateway WPG 6.0.0 through 6.0.0.7 does not properly handle failures of signature verification, which might allow remote authenticated users to submit a crafted RosettaNet aka RNIF document to a backend application, related to 1 "altered service content" and 2 "digital...
CVE-2009-0440
IBM WebSphere Partner Gateway (WPG) 6.0.0–6.0.0.7 is affected by a flaw where failures in signature verification are not handled properly. This could allow remote authenticated users to submit a crafted RosettaNet (RNIF) document to a backend application,涉及 (1) altered service content and (2) dig...
CVE-2009-0440: Improper Authentication
IBM WebSphere Partner Gateway WPG 6.0.0 through 6.0.0.7 does not properly handle failures of signature verification, which might allow remote authenticated users to submit a crafted RosettaNet aka RNIF document to a backend application, related to 1 "altered service content" and 2 "digital...
iDefense Security Advisory 08.12.08: Microsoft Office WPG Image File Heap Buffer Overflow Vulnerability
iDefense Security Advisory 08.12.08 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 12, 2008 I. BACKGROUND Microsoft Office contains a number of input filters. These input filters allow transparent conversion from external types into a form that the Office applications can use. More...
Design/Logic Flaw
WPGIMP32.FLT in Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 does not properly parse the length of a WordPerfect Graphics WPG file, which allows remote attackers to execute arbitrary code via a crafted WPG file, aka the "WPG Image File Heap Corruption...
CVE-2008-3460
WPGIMP32.FLT in Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 does not properly parse the length of a WordPerfect Graphics WPG file, which allows remote attackers to execute arbitrary code via a crafted WPG file, aka the "WPG Image File Heap Corruption...
CVE-2008-3460
Summary of CVE-2008-3460 from provided documents : This vulnerability concerns Microsoft Office’s handling of WordPerfect Graphics (WPG) files. Affected components include WPGIMP32.FLT in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, the Office Converter Pack, and Works 8. The flaw is a heap/buffe...
CVE-2008-3460
WPGIMP32.FLT in Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 does not properly parse the length of a WordPerfect Graphics WPG file, which allows remote attackers to execute arbitrary code via a crafted WPG file, aka the "WPG Image File Heap Corruption...
Microsoft Office WPG Image File Remote Code Execution Vulnerability
Description Microsoft Office is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious WPG WordPerfect Graphics file. Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of the...
CVE-2008-3460: Undefined Security Weakness
WPGIMP32.FLT in Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 does not properly parse the length of a WordPerfect Graphics WPG file, which allows remote attackers to execute arbitrary code via a crafted WPG file, aka the "WPG Image File Heap Corruption...
