Microsoft Internet Explorer Memory Corruption (MS14-012: CVE-2014-0297)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...

MSN Messenger UIAutomation ActiveX Control Information Disclosure (MS08-050) - Ver2 (CVE-2008-0082)

Windows Messenger, MSN Messenger, and Windows Live Messenger are popular instant messaging clients for Microsoft Windows. An information disclosure vulnerability exists in Windows Messenger, MSN Messenger, and Windows Live Messenger. The vulnerability is caused by an ActiveX control that is marke...

Microsoft IIS ASP Engine HTMLEncode Buffer Overflow - Ver2 (CVE-2008-0075)

A buffer overflow vulnerability has been reported in the Microsoft IIS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Novell NeaatIdentity RPC Pointer Dereference Code Execution - Ver2 (CVE-2009-1350)

A code execution vulnerability has been reported in Novell Client NetIdentity Agent. The vulnerability is due to insufficient sanity check when processing crafted RPC messages. A remote attacker could exploit this vulnerability by sending a specially crafted RPC message to the affected service...

WellinTech KingView ActiveX Control Heap Buffer Overflow Remote Code Execution (CVE-2011-3142)

A stack-based buffer overflow vulnerability has been reported in WellinTech KingView ActiveX control. The vulnerability is due to failure to perform adequate boundary checks on user-supplied input. A remote attacker can exploit this vulnerability by sending via a long second argument to the...

Oracle Outside In OS 2 Metafile Parser Stack Buffer Overflow (CVE-2013-5763)

A stack buffer overflow vulnerability exists in Oracle Outside-In, a set of libraries used to decode many file formats...

Microsoft DirectAccess ICMP Denial of Service (MS13-064; CVE-2013-3182)

A denial of service vulnerability has been reported in Windows 2012 server...

Siemens SIMATIC WinCC RegReader ActiveX Control Buffer Overflow (CVE-2013-0674)

A stack-based buffer overflow vulnerability has been reported in Siemens SIMATIC WinCC...

Schneider Electric Accutech Manager HTTP Request Processing Buffer Overflow (CVE-2013-0658)

A buffer overflow vulnerability has been reported in Schneider Electric Accutech Manager...

Microsoft HTML Sanitization Cross Site Scripting (MS13-035) - High Confidence (CVE-2013-1289)

A cross-site scripting vulnerability has been reported in multiple Microsoft products. The flaw is due to the way that the applications sanitize HTML. Remote attackers can exploit this vulnerability by submitting crafted HTML to the vulnerable server that uses the HTML Sanitization library, and...

Adobe Photoshop PNG Image Processing Buffer Overflow - Improved Performance (CVE-2012-4170)

A heap buffer overflow vulnerability has been reported in Adobe Photoshop CS6. The vulnerability is due to an error while handling certain chunks within a specially crafted PNG file. A remote attacker can exploit this vulnerability by enticing a user to open a malicious PNG file. Successful...

Internet Explorer PNG Image Rendering Memory Corruption - improved performance (MS05-025; CVE-2005-1211; CVE-2006-0025)

Portable Network Graphics PNG is a popular image file format. Specially crafted PNG files may be used to create a DoS condition and in some cases, arbitrary code execution...

Microsoft SharePoint Callback Function Elevation of Privilege (MS13-024; CVE-2013-0080)

An information disclosure and elevation of privilege vulnerability has been reported in Microsoft SharePoint. The vulnerability is due to an error in the way Microsoft SharePoint handles specially crafted URLs containing malicious JavaScript elements. A remote attacker may exploit this issue by...

Internet Explorer SLayoutRun Use After Free (MS13-009; CVE-2013-0025)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...

Symantec pcAnywhere Host Services Login Remote Code Execution (CVE-2011-3478)

A buffer overflow vulnerability has been reported in Symantec pcAnywhere Host Services...

Cisco WebEx Player Malformed .WRF File Code Execution (CVE-2010-3269)

A stack buffer overflow has been reported in Cisco WebEx Player...

HP OpenView Network Node Manager webappmon.exe Buffer Overflow (CVE-2011-3166)

A stack buffer overflow vulnerability has been reported in the HP OpenView Network Node Manager NNM. The vulnerability is due to a boundary error while handling certain parameters in a specially crafted HTTP request. A remote unauthenticated attacker can exploit this vulnerability by sending a...

CA Total Defense Suite UNCWS getDBConfigSettings Credential Information Disclosure (CVE-2011-1655)

An information disclosure vulnerability has been reported in CA Total Defense Suite. The vulnerability is due to insufficient access control when handling requests to the getDBConfigSettings web method. A remote attacker may exploit this vulnerability by sending a specially crafted SOAP xml to th...

Microsoft PowerPoint OfficeArt Shape Remote Code Execution (MS11-094; CVE-2011-3413)

A remote code execution vulnerability has been reported in Microsoft PowerPoint. The vulnerability is due to memory corruption in PowerPoint while reading an invalid record in a specially crafted PowerPoint file. A remote attacker may exploit this vulnerability by convincing a target user to open...

Sun Java Web Start BasicServiceImpl Remote Code Execution (CVE-2010-3563)

A remote code execution vulnerability has been reported in Oracle Java SE. The vulnerability is due to a flaw in the way Web Start retrieves security policies. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted web-page. Successful exploitation...

CA Internet Security Suite XMLSecDB ActiveX Insecure File Creation (CVE-2011-1036)

CA Internet Security Suite is a comprehensive home and office security system that protects against viruses, hackers, spam, and other online threats. An insecure file creation vulnerability exists in CA Internet Security Suite. The vulnerability is due to a design weakness in the XMLSecDB.DIParse...

Microsoft Office Excel MSO Large SPID Read AV Code Execution (MS10-087; CVE-2010-3336)

Microsoft Excel is a popular spreadsheet application. A memory corruption vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse specially crafted Excel files. A remote attacker could trigger this flaw by...

Microsoft OpenType Font Validation Elevation of Privilege (MS10-078; CVE-2010-2741)

OpenType is a font format developed jointly by Microsoft and Adobe as an extension of Apple's TrueType font format. An OpenType font file contains data, in table format, that comprises either a TrueType or a PostScript outline font. An elevation of privilege vulnerability has been reported in the...

Microsoft Internet Explorer MSHTML Uninitialized Memory Corruption (MS10-071; CVE-2010-3331)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been initialized or has been deleted when a document in an HTML format is opened in Microsoft Word. To trigger this issue, ...

Microsoft Office Excel String Variable Code Execution (MS10-038; CVE-2010-1252)

Microsoft Excel is a popular spreadsheet application that is usually released as part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formulae, and various data sources. The common extension used for Microsoft Excel documents is .xls or .xlw...

Apple QuickTime QTPlugin.ocx _Marshaled_pUnk Code Execution (CVE-2010-1818)

QuickTime is a media player application developed by Apple. It is capable of playing back numerous multimedia file formats from local file system or network servers. Upon installation, Apple QuickTime also installs a web browser plugin, QTPlugin.ocx. A remote code execution vulnerability has been...

Oracle Secure Backup observiced.exe Buffer Overflow (CVE-2010-0072)

Oracle Secure Backup is a backup solution allowing for centralized tape backup management. The server allowsfor single point of management of data present on network attached storage NAS devices and distributed hostswhich may have different operating systems. A stack buffer overflow vulnerability...

GoodTech SSH Server SFTP Processing Buffer Overflow (CVE-2008-4726)

There exists a buffer overflow vulnerability in GoodTech SSH Server. The vulnerability is due to a boundary error while handling SFTP commands. A remote attacker can exploit this vulnerability by sending crafted SFTP commands to the target server, potentially causing arbitrary code to be injected...

HP OpenView Client Configuration Manager Radia Notify Code Execution (CVE-2006-5782)

An authentication weakness vulnerability exists in the Radia Notify Daemon component of HP OpenView Client Configuration Manager. The flaw is created by improper handling of user supplied data passed to the affected Radia Notify Daemon on TCP port 3465. By sending a crafted message, the attacker...

Microsoft Excel Malformed Filter Records Handling Code Execution (MS07-023; CVE-2007-1214)

Microsoft Excel is a popular spreadsheet application that is usually released as part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formulae, and various data sources. The proprietary file format used for storing Microsoft Excel documents ...

RealNetworks RealPlayer rmoc3260.dll ActiveX Control Memory Corruption (CVE-2008-1309)

RealPlayer is a media player application developed by RealNetworks, Inc. The application is capable of playing back numerous multimedia file formats and various streaming protocols. A memory corruption vulnerability exists in RealNetworks RealPlayer ActiveX controls implemented in rmoc3260.dll. T...

Internet Explorer Drag and Drop Code Execution (CVE-2005-0053)

Microsoft Internet Explorer provides a number of ways to represent remote or local content. One of its more powerful features is the Web folder view. The Web folder provides easy access to files located on a web server. A vulnerability exists in the Microsoft Internet Explorer security restrictio...

CA eTrust Secure Content Manager Gateway FTP PASV Stack Overflow (CVE-2008-2541)

CA eTrust Secure Content Manager SCM is a gateway product for Windows platform that secures, monitors, filters and blocks potential threats from messaging and Web traffic. It provides protection against malware, spam, phishing, P2P file sharing and prevents access to known spyware sites. All CA S...

CA Message Queuing Buffer Overflow (CVE-2005-2668)

Computer Associates CA provides numerous product suites that provide network-monitoring functionality, manage network asset discovery, software deployment, and patch management. These capabilities are contained in the CA Unicenter product suites. The numerous components that are provided, contain...

Microsoft DirectShow AVI Parser Heap Overflow (MS10-013; CVE-2010-0250)

Microsoft DirectShow is used for streaming media on Microsoft Windows operating systems. It is used for high-quality capture and playback of multimedia streams. Audio Video Interleave AVI is a file type that is used with applications that capture, edit, and play back audio-video sequences.A remot...

Microsoft Distributed Transaction Controller Denial of Service (MS05-051; CVE-2005-1979)

The Microsoft Distributed Transaction Coordinator MSDTC is a transaction infrastructure for distributed systems. It is implemented on the Windows platform as a service. The MSDTC facilitates the interactions between independent programs in a distributed system. A denial of service vulnerability...

Microsoft Agent Crafted URL Stack Buffer Overflow (MS07-051; CVE-2007-3040)

The Microsoft Agent ActiveX control, exposes a set of methods and properties that can be used for scripting in HTML pages. There exists a buffer overflow vulnerability in Microsoft Windows Agent application. The flaw is due to wrongfully copying an overly large string to a fixed-size stack buffer...

TikiWiki jhot.php Script File Upload Security Bypass (CVE-2006-4602)

TikiWiki, also known as Tiki CMS/Groupware or simply Tiki, is a powerful wiki-based Content Management System CMS which allows users and/or groups of users to manage their data on-line via a web browser. TikiWiki provides numerous features, including Wiki-based Documentation, Groupware, Blogging...

Preemptive Protection against Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerabilities (MS10-002)

Multiple memory corruption vulnerabilities have been reported in Microsoft Internet Explorer. A remote attacker could exploit these issues by convincing a user to open a maliciously crafted HTML file with Internet Explorer, which will cause the browser to crash and may allow execution of arbitrar...

Citrix Program Neighborhood Agent Arbitrary Shortcut Creation (CVE-2004-1077)

Citrix Presentation Server, formally known as Citrix MetaFrame, is designed for central application deployment. This package allows applications to be deployed and managed by a farm of dedicated servers and allow client machines to access these applications remotely. There exists an arbitrary...

Update Protection against Microsoft Internet Explorer Request Header Information Disclosure Vulnerability (MS08-031)

An information disclosure vulnerability has been reported in the way that Internet Explorer handles certain request headers. A remote attacker could exploit this issue by convincing a user to open a maliciously crafted HTML file with Internet Explorer, which may allow the attacker to view data fr...

Internet Explorer Object Reference Counting Memory Corruption (MS07-069; CVE-2007-3902)

Microsoft Internet Explorer IE is a web browser application that is capable of rendering both static and dynamic web content. The application is primarily used for tasks related to web browsing, such as displaying HTML encoded pages, downloading files, etc. A memory corruption vulnerability exist...

Sun Java Plug-in Sandbox Security Bypass (CVE-2004-1029)

The Sun Java plug-in is a component of the Java 2 Runtime Environment. Sun's Java plug-in technology creates a connection between a Web browser and the Java platform. This connection enables Java applets, served from a Web site, to be run within a Web browser in a restricted environment, known as...

Fujitsu SystemcastWizard Lite PXEService UDP Handling Buffer Overflow (CVE-2009-0270)

Fujitsu SystemcastWizard software is one of the management tools included in the Systemwalker Resource Coordinator, which is a provisioning software by Fujitsu to efficiently and reliably operate blade servers. SystemcastWizard can install operating system images remotely and clone them on other...

Trend Micro OfficeScan CGI Password Decryption Buffer Overflow (CVE-2008-1365)

Trend Micro OfficeScan is a centralized virus and security scan management system. It is meant to consolidate the coordination of security scan actions and the management of Trend Micro virus scanner products installed on the nodes of an enterprise network. The product is a central command centre...

IIS RSA Authentication Agent for Web Redirect Buffer Overflow (CVE-2005-4734)

The RSA Authentication Agent for Web for Internet Information Services IIS provides protection for selected web pages by securing them with the RSA SecurID authentication mechanism. When a user attempts to access a resource that is secured with the RSA SecurID, the RSA Agent authenticates the use...

CA BrightStor ARCServe Backup LGServer Authentication Username Overflow (CVE-2007-5003)

Computer Associates BrightStor ARCserve Backup for Laptops and Desktops provides backup and data recovery for remote, mobile and desktop computers. In general, a backup system is comprised of a server and multiple clients, also known as agents. The server establishes, organizes, and controls all ...

MySQL yaSSL SSL Hello Message Buffer Overflow (CVE-2008-0226)

MySQL is an open-source implementation of a relational database management system. MySQL supports the SQL Structured Query Language database query language. The database product allows remote network connections from client applications over the proprietary MySQL network protocol. MySQL Server...

Serv-U FTP Server Timezone MDTM Buffer Overflow (CVE-2004-0330)

Serv-U FTP Server is a widely-used FTP server that includes enterprise-grade features such as SSL support, ODBC and Windows NT/SAM user account management, virtual directories, compression etc. By default configuration, Serv-U FTP Server listens on 21/TCP for incoming FTP request. There exists a...

Oracle Application Server Reports desname Arbitrary File Overwriting (CVE-2005-2371)

Oracle Application Server is a multi-platform solution for developing and deploying enterprise applications and web sites. The server ships with several additional components that extend its functionality. One of such component is the Oracle Reports Services. The Reports Services component allows...