Microsoft System Center Operations Manager Cross-Site Scripting (MS13-003; CVE-2013-0009)

A cross-site scripting vulnerability has been reported in Microsoft System Center Operations Manager...

HP Operations Agent Opcode 0x34 Stack Buffer Overflow (CVE-2012-2019)

A stack-based buffer overflow vulnerability has been reported in HP Operations Agent...

WellinTech Kingview SCADA Heap Buffer Overflow (CVE-2011-4536)

A buffer overflow vulnerability has been reported in WellinTech KingView...

HP Intelligent Management Center img Buffer Overflow (CVE-2011-1848)

HP Intelligent Management Center IMC is a stand-alone, comprehensive management platform developed by HP that delivers integrated and modular network management capabilities. IMC Enterprise Edition is designed on a service-oriented architecture SOA using a business application flow model as the...

Preemptive Protection against Freefloat FTP Server Invalid Command Buffer Overflow (CVE-2005-0696; CVE-2005-3683)

A buffer overflow vulnerability has been reported in Freefloat FTP Server...

libsndfile PAF File Integer Overflow (CVE-2011-2696)

A heap buffer overflow vulnerability has been reported in libsndfile C library. The vulnerability is due to an error in the Paris Audio Format PAF processing code of the libsndfile library. A remote attacker could exploit this vulnerability by enticing a target user to download and open a special...

Microsoft Windows TrueType Font File Parsing Code Execution (CVE-2011-3402)

A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to improper bounds checking when parsing specially crafted TrueType Font TTF files. A remote attacker may exploit this vulnerability by enticing an affected user to open a specially crafted TTF...

Microsoft WINS Local Elevation of Privilege (MS11-070; CVE-2011-1984)

An elevation of privilege vulnerability has been reported in Microsoft WINS. A local attacker could exploit this vulnerability to execute arbitrary code in an affected local system. The vulnerability is due to an error in the way WINS server processes a sequence of specially crafted packets...

Microsoft Host Integration Server snabase.exe Denial of Service (CVE-2011-2007)

A denial of service DoS vulnerability has been reported in Microsoft Host Integration Server HIS. HIS is a gateway application that provides host access and integration, extending Microsoft Windows to other systems by integrating mission-critical host applications, data sources, messaging and...

7T Interactive Graphical SCADA System (IGSS) Directory Traversal (CVE-2011-1565)

A directory traversal vulnerability has been reported in 7T Interactive Graphical SCADA System IGSS. 7-Technologies' IGSS is a Supervisory Control and Data Acquisition SCADA system used for monitoring and controlling industrial processes. A remote attacker may exploit this vulnerability to read a...

Preemptive Protection against Internet Explorer XSLT Object Memory Corruption (MS11-057; CVE-2011-1963)

A memory corruption vulnerability has been reported in an XSLT object within Microsoft Internet Explorer. A remote attacker can leverage this vulnerability to execute arbitrary code on an affected system, within the security context of the logged in user...

Microsoft Office Excel Uninitialized Value Buffer Overflow (MS11-021; CVE-2011-0105)

Microsoft Excel is a popular spreadsheet application. A remote attacker could exploit this issue via a malformed Excel file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system. A memory corruption vulnerability has been identified in Microsoft...

IBM Informix Dynamic Server SET ENVIRONMENT Stack Buffer Overflow (CVE-2011-1033)

IBM Informix Dynamic Server is an online transaction processing data server. IBM Informix Dynamic Server functionalities include an implementation of SQL including SQL statements, data types, and system catalog tables that provide information regarding database structures. A stack-based buffer...

Microsoft Office Visio ORMELEMS.DLL Object Memory Corruption (MS11-008; CVE-2011-0092)

Microsoft Visio is a diagram creation software for Microsoft Windows. A remote code execution vulnerability has been identified in Microsoft Visio. The vulnerability is due to an error in Microsoft Visio while validating objects in memory. A remote attacker may exploit this issue by enticing a us...

Microsoft PowerPoint DLL Planting Code Execution (MS10-087; CVE-2010-3337)

Microsoft Office is an office suite of inter-related desktop applications, servers and services for the Microsoft Windows and Mac OS X operating systems. A memory corruption vulnerability has been identified in the way that Microsoft Office handles the loading of DLL files. This vulnerability...

Microsoft Windows Media Player RTSP Use after Free Code Execution (MS10-075; CVE-2010-3225)

A remote code execution vulnerability has been reported in Microsoft Windows Media Player network sharing service. The Network Service account is a built-in account that has more access to resources and objects than members of the Users group. Services that run as the Network Service account acce...

Update Protection against Synology Disk Station FTP Login Web Commands Injection Vulnerability

A remote command injection vulnerability has been discovered in Synology Disk Station. The Synology Disk Station is a product designed for storage purposes of small offices or home users. It supports several terabytes of total storage. A remote attacker may exploit this vulnerability to execute...

Microsoft Silverlight Pointer Handling Memory Corruption (MS10-060; CVE-2010-0019)

Microsoft Silverlight is a cross-browser, cross-platform implementation of the Microsoft .NET Framework for building media experiences and rich interactive applications for the Web. A memory corruption vulnerability has been reported in the way that Microsoft Silverlight handles pointers. To...

Openwsman HTTP Basic Authentication Buffer Overflow (CVE-2008-2234)

Openwsman is an implementation of Web Services Management WS-Management specification. It uses the WS-Management protocol, which is a SOAP-based protocol using HTTP for exchange of information related to management of devices and applications in a platform independent manner. There exists a stack...

HP OpenView Network Node Manager ovet_demandpoll.exe Code Execution (CVE-2010-1550)

HP OpenView product consists of a suite of network and system management software applications developed by HP. It includes several optional modules and components, such as OpenView Quality Manager, OpenView Performance Insight, and OpenView Network Node Manager. A remote code execution...

GhostScript PostScript Parser Stack Overflow (CVE-2010-1869)

GhostScript is an interpreter for the PostScript language and the Portable Document Format PDF. A stack overflow vulnerability has been discovered in GhostScript. The vulnerability is within the parser function of GhostScript. A remote attacker may exploit this issue via a specially crafted...

Microsoft SMB Client Message Size Remote Code Execution (MS10-020; CVE-2010-0477)

The SMB Protocol is a network file sharing protocol that is implemented in Microsoft Windows. A remote code execution vulnerability has been reported in the Microsoft Windows Server Message Block SMB client implementation. The vulnerability is due to an error in the Microsoft SMB client...

Microsoft Excel EntExU2 Record Memory Corruption (MS10-017; CVE-2010-0257)

Microsoft Excel is a popular spreadsheet application. A memory corruption vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this flaw ...

Microsoft Excel DbOrParamQry Record Parsing Code Execution (MS10-017; CVE-2010-0264)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this...

MediaWiki Parser Script Insertion (CVE-2006-2611)

A Wiki is generally referred to a collaborative online system that allows many users to easily contribute content by creating web pages that have a common look and feel and that may be changed and revised at any time. MediaWiki is a popular implementation of the Wiki system. It uses a number of P...

Novell iPrint Client ActiveX Control Multiple Buffer Overflows (CVE-2008-2431)

Novell iPrint Client is an application that allows users to install and manage printers, or submit print job from a web browser. Novell iPrint Client is bundled with a set of ActiveX controls that implement various functions. There exist multiple buffer overflow vulnerabilities in Novell iPrint...

Citrix Program Neighborhood Agent Buffer Overflow (CVE-2004-1078)

Citrix Presentation Server, formally known as Citrix MetaFrame, is designed for central application deployment. This package allows applications to be deployed and managed by a farm of dedicated servers and allow client machines to access the applications remotely. There exists a buffer overflow...

Internet Explorer Object Reference Counting Memory Corruption (MS07-069; CVE-2007-3902)

Microsoft Internet Explorer IE is a web browser application that is capable of rendering both static and dynamic web content. The application is primarily used for tasks related to web browsing, such as displaying HTML encoded pages, downloading files, etc. A memory corruption vulnerability exist...

Novell Groupwise Internet Agent RCPT Command Buffer Overflow (CVE-2009-0410)

Novell GroupWise is a client-server collaborative software and email system provided by Novell. The Novell GroupWise Client application is capable of communicating with Novell Group server, as well as Internet email gateways using SMTP, POP, and IMAP protocols. There exists a stack buffer overflo...

Symantec AntiVirus Real Time Virus Scan Service Stack Overflow (CVE-2006-2630)

Symantec Antivirus Corporate Edition and Symantec Client Security are applications designed to protect organizations from the threat of viruses, malware, and intrusion attempts. Both applications can be deployed in an enterprise network environment, and they both support an anti-virus scanning...

Microsoft SQL Server INSERT Statement Buffer Overflow (MS08-040; CVE-2008-0106)

Microsoft SQL Server is a popular relational database management system RDBMS. Microsoft SQL Server can be administered programmatically using system stored procedures, or through Distributed Management Objects DMO. Its primary query language is Transact-SQL, an implementation of the ANSI/ISO...

Microsoft .NET Framework Pointer Verification Error (MS09-061; CVE-2009-0090)

The Microsoft .NET Framework is a software framework that includes a large library of coded solutions to common programming problems and a virtual machine that manages the execution of programs written specifically for the framework. A remote code execution vulnerability exists in the Microsoft...

Novell eDirectory Management Console Accept-Language Buffer Overflow (CVE-2009-0192)

Novell eDirectory is an X.500 and LDAP compatible directory service software product. It is developed by Novell, Inc. for centrally managing access to resources on multiple servers and computers within a given network. The product is made available for multiple platforms including NetWare,...

Preemptive Protection against Microsoft GDI+ PNG Integer Overflow Vulnerability (MS09-062)

A remote code execution vulnerability has been discovered in the way that GDI+ allocates memory. The Microsoft Windows graphics device interface GDI enables applications to use graphics and formatted text on the video display and on the printer. A remote attacker may trigger this issue via a...

Internet Explorer Data Stream Handling Memory Corruption (MS08-024; CVE-2008-1085)

Microsoft Internet Explorer IE is a web browser application that supports a wide range of WWW standard protocols and content formats. Besides HTML page and graphic images, various non-HTML content can be downloaded using IE. These contents, however, cannot be processed natively by IE. A set of...

Skype skype4com URI Handler Remote Heap Corruption (CVE-2007-5989)

Skype is a peer-to-peer Voice over IP VoIP Internet telephony network solution. The product is used to transfer real time conversations between two peers over the Internet. Skype users can speak to other Skype users, receive calls from traditional phones, and receive voice-mail messages. Peers ar...

Cisco Secure Access Control Server UCP Application Buffer Overflow (CVE-2008-0532)

Cisco Secure Access Control Server provides authentication, authorization, and accounting AAA services to network devices that control client access to the network. Such devices include network access servers, PIX firewalls, wireless access points, routers and switches. A buffer overflow...

Microsoft Windows AVI File Data Validation Integer Overflow (MS09-038; CVE-2009-1546)

Audio Video Interleave AVI is a special case of Resource Interchange File Format RIFF. This file type used with applications that capture, edit, and play back audio-video sequences. The vulnerability is due to an error in the Windows component responsible for processing AVI files that does not...

Microsoft IIS Anonymous HTTP Request Authentication Bypass (MS09-020; CVE-2009-1122)

Web Distributed Authoring and Versioning WebDAV is a set of extensions for HTTP that allow clients to publish, lock, and manage resources on the Web. An elevation of privilege vulnerability has been reported in the Microsoft Windows WebDAV extension for IIS. The vulnerability is due to an error i...

Symantec Alert Management System Alert Originator Service Buffer Overflow (CVE-2009-1430)

Symantec System Center provides centralized systems and policy management for Norton Antivirus Enterprise Solution across multiple Windows NT and NetWare networks. The vulnerability exists in the IAO Service of Symantec Alert Management System 2 AMS2. The vulnerability is due to a boundary error ...

Microsoft IIS WebDAV Extension URL Decoding Security Bypass (CVE-2009-1535)

Web Distributed Authoring and Versioning WebDAV is a set of extensions for HTTP that allow clients to publish, lock, and manage resources on the Web. An elevation of privilege vulnerability has been reported in the Microsoft Windows WebDAV extension for IIS. The vulnerability is due to an error i...

Microsoft PowerPoint Converter ExEmbed Record Stack Corruption (MS09-017; CVE-2009-1129)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A stack corruption vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory corruption error in Microsoft PowerPoint when reading sound data from specially crafted...

Preemptive Protection against Free Download Manager Remote Control Server

A buffer overflow vulnerability was reported in Free Download Manager, a free download accelerator and manager. The vulnerability is caused due to a boundary error in the Remote Control Server when processing "Authorization" headers in HTTP requests. This issue can be triggered via an HTTP reques...

Update Protection against Trend Micro HouseCall "notifyOnLoadNative()" Vulnerability

A vulnerability was reported in Trend Micro HouseCall . HouseCall is an application for checking whether your computer has been infected by viruses, spyware, or other malware. The vulnerability is caused by a use-after-free error in the HouseCall ActiveX control. This can be exploited to...

Internet Explorer HTML Embed Tag Stack Buffer Overflow (MS08-073; CVE-2008-4261)

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in the way Microsoft Internet Explorer embeds objects into a Web page. The vulnerability is due to a memory corruption error in Internet Explorer When it displays a Web pa...

Microsoft Windows GDI+ GIF Parsing Buffer Overflow (MS08-052; CVE-2008-3013)

Graphics Interchange Format GIF images are 8-bit files that support transparency, compression, interlacing, and multiple-image pictures animated GIFs. A remote code execution vulnerability has been discovered in the way GDI+ parses GIF images. The vulnerability is due to a buffer overrun when GDI...

Preemptive Protection against CA eTrust Secure Content Manager Gateway FTP PASV Stack Overflow Vulnerability

A buffer overflow vulnerability was discovered in CA eTrust Secure Content Manager. CA eTrust Secure Content Manager SCM is a gateway product for Windows platform that secures, monitors, filters and blocks potential threats from messaging and Web traffic. It provides protection against malware,...

Microsoft PowerPoint Drawing Shapes Handling Memory Corruption (MS08-016; CVE-2008-0118)

Microsoft PowerPoint is a popular presentation program. A remote code execution vulnerability has been reported in Microsoft Office. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system.The vulnerability is due to an allocation error in Microsoft...

Microsoft Works WPS File Field Length Handling Stack Overflow (MS08-011; CVE-2007-0216; CVE-2008-0108)

Microsoft Works is home productivity software suite with fewer features than the Microsoft Office suite. The Microsoft Works Converter allows the user to open, edit, and save files in the Microsoft Works file format. CVE-2007-0216: The vulnerability is due to an error in the Microsoft Works...

Preemptive Protection against Microsoft MHTML Information Disclosure Vulnerability (MS07-034)

An information disclosure vulnerability has been reported in Microsoft Windows. The vulnerability is within the MHTML Protocol, a component of Outlook Express. The MHTML MIME Encapsulation of Aggregate HTML protocol handler provides a URL type MHTML:// that permits MHTML encoded documents to be...