Microsoft Office XML Converter for Mac Local Privilege Escalation Vulnerability

Description Microsoft Office XML Converter for Mac is prone to a local privilege-escalation vulnerability that affects filesystem Access Control Lists ACLs. A local attacker can exploit this issue to execute arbitrary code with superuser privileges. Successful exploits may result in the complete...

Microsoft Excel 'ExternName' Record Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Excel '.xls' file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running...

Password Manager Daemon二进制密钥文件不安全加密漏洞

BUGTRAQ ID: 39882 Password Manager Daemon是通过套接字向应用提供数据的守护程序。数据存储在加密的XML文件中，客户端在打开和保持文件时必须提供密钥。 应用以ASCII形式从指定的keyfile配置参数中读取数据，而用户可能使用文件中的二进制数据。如果二进制数据中包含有空字节或换行符的话，就会导致使用较弱的密钥。 Ben Kibbey Password Manager Daemon 2.13 厂商补丁： Ben Kibbey ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Remote code execution

Microsoft Office Excel 2007 SP1 and SP2; Office 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2; and Office SharePoint Server 2007 SP1 and SP2 do not validate ZIP headers...

Microsoft Excel XLSX File Parsing Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing victims to open a specially crafted 'XLXS' Excel file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the...

[SECURITY] Fedora 12 Update: fwbuilder-3.0.7-1.fc12

Firewall Builder consists of a GUI and set of policy compilers for various firewall platforms. It helps users maintain a database of objects and allows policy editing using simple drag-and-drop operations. GUI generates firewall description in the form of XML file, which compilers then interpret...

RedHat Update for PyXML RHSA-2010:0002-01

Check for the Version of PyXML OpenVAS Vulnerability Test RedHat Update for PyXML RHSA-2010:0002-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

Fedora Core 12 FEDORA-2009-12737 (expat)

The remote host is missing an update to expat announced via advisory FEDORA-2009-12737. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Clever use of voyagers to find out the fckeditor upload secure path-vulnerability warning-the black bar safety net

Recently a friend asked me to use the Fckeditor upload vulnerability and combined 2 0 0 3 the server parses the vulnerability to get the site webshell time is always not found after upload the path to the file, what should I do? Believe this problem should be a lot of friends encountered. First w...

Unrestricted file upload

HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which allows remote attackers to conduct unrestricted file upload attacks, and thereby execute arbitrary code, by using the org.apache.catalina.manager.HTMLManagerServlet class to make...

CVE-2009-3843

HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which allows remote attackers to conduct unrestricted file upload attacks, and thereby execute arbitrary code, by using the org.apache.catalina.manager.HTMLManagerServlet class to make...

Autodesk SoftImage Scene TOC文件处理远程代码执行漏洞

BUGTRAQ ID: 36637 CVE ID: CVE-2009-3576 Autodesk Softimage是用于生成3D图形、3D模型和动画的图形应用程序。 Softimage默认会保持带有场景内容树的场景目录（.scntoc）文件。场景目录文件是包含有场景信息的XML文件，Softimage会查找相关的场景目录文件并应用其中的信息。用户可以编辑特制的.scntoc文件，加载了该文件后无需用户干涉就可以自动执行脚本。 Autodesk SoftImage XSI 6.x Autodesk SoftImage 7.x 临时解决方法： 通过以下步骤禁止自动读取SCTOC脚本：...

CVE-2009-3843

HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which allows remote attackers to conduct unrestricted file upload attacks, and thereby execute arbitrary code, by using the org.apache.catalina.manager.HTMLManagerServlet class to make...

CVE-2009-3946

Joomla! before 1.5.15 allows remote attackers to read an extension's XML file, and thereby obtain the extension's version number, via a direct request...

Server side request forgery (ssrf)

Joomla! before 1.5.15 allows remote attackers to read an extension's XML file, and thereby obtain the extension's version number, via a direct request...

CVE-2009-3946

Joomla! before 1.5.15 allows remote attackers to read an extension's XML file, and thereby obtain the extension's version number, via a direct request...

CVE-2009-3946

CVE-2009-3946 affects Joomla! prior to 1.5.15. The issue allows remote attackers to read an extension’s XML file via a direct request, exposing the extension’s version number. The vulnerability arises from a direct access path to the extension metadata. Public exploit details are not provided in ...

Format string

Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 do not...

Heap overflow

Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via a spreadsheet containing a malformed Binary File Format aka BIFF record that triggers memory corruption, ak...

Memory corruption

Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows...