13538 matches found
Microsoft Word Array Data Handling Buffer Overflow (MS07-024; CVE-2007-0035)
A buffer overflow vulnerability exists in the way Microsoft Word processes word documents. The vulnerability is the result of an infinite loop. A remote attacker can exploit this vulnerability by enticing the target user to open a crafted Word document, potentially causing arbitrary code to be...
Openwsman HTTP Basic Authentication Buffer Overflow (CVE-2008-2234)
Openwsman is an implementation of Web Services Management WS-Management specification. It uses the WS-Management protocol, which is a SOAP-based protocol using HTTP for exchange of information related to management of devices and applications in a platform independent manner. There exists a stack...
BitDefender Antivirus PDF Processing Memory Corruption (CVE-2008-5409)
There exists a memory corruption vulnerability in multiple BitDefender products. The vulnerability is due to boundary errors within the BitDefender PDF Scanner plugin pdf.xmd. A remote attacker can exploit this vulnerability by delivering a crafted PDF file to the vulnerable system, potentially...
Apache HTTP Server mod_isapi Dangling Pointer Remote Code Execution (CVE-2010-0425)
Apache HTTP server is a popular web server that is capable of being utilized with many different options and configurations, with a wide variety of plug-in modules which are loaded at run-time to extend its functionality. One of the technologies supported by Apache HTTP server is Internet Server...
Update Protection against Novell iPrint Client ienipp.ocx target-frame Stack Buffer Overflow
A buffer overflow vulnerability exists in Novell iPrint Client, an application that allows users to install and manage printers, or submit print jobs from a web browser. The vulnerability is due to a boundary error in the ActiveX control when parsing target-frame parameter values. A remote attack...
Internet Explorer Post Encoding Information Disclosure (MS10-018; CVE-2010-0488)
Microsoft Internet Explorer is the most widely used Internet browser. An information disclosure vulnerability has been reported in the way that Internet Explorer handles content using specific encoding strings when submitting data. The vulnerability is due to the way Internet Explorer handles...
Internet Explorer Mouse Leave Event Handler Memory Corruption (MS10-018; CVE-2010-0267)
Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been correctly initialized or has been deleted. To trigger this...
Internet Explorer CSS HTML Object Memory Corruption (MS10-018; CVE-2010-0492)
Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been correctly initialized or has been deleted. To trigger this...
CA Multiple Products HTTP Request Buffer Overflow (CVE-2005-3190)
The Computer Associates CA BrightStor backup server product line provides facilities for integration with third party software and hardware products to consolidate storage management tasks. CA uses an XML-based interface named iSponsor/iGateway to integrate with storage management applications fr...
MySQL MaxDB Webtool GET Command Buffer Overflow (CVE-2005-0684)
MaxDB is an open source database application suite developed by MySQL AB available for various operating systems. The software bundles an HTTP server component, named Webtool, used to provide web-based application interfaces. Clients can connect to the Webtool with a web browser and access...
Trend Micro OfficeScan Console Authentication Buffer Overflow (CVE-2007-3454)
Trend Micro OfficeScan is a centralized virus and security scan management system. It is meant to consolidate the coordination of security scan actions and the management of Trend Micro virus scanner products installed on the nodes of an enterprise network. The product is a central command centre...
Update Protection against Microsoft Windows ICMPv6 Router Advertisement Vulnerability (MS10-009)
A remote code execution vulnerability exists in the Windows TCP/IP stack due to insufficient bounds checking when processing specially crafted ICMPv6 Router Advertisement packets. An anonymous attacker could exploit the vulnerability by sending specially crafted ICMPv6 Router Advertisement packet...
Digium Asterisk Invalid RTP Payload Type Number Memory Corruption (CVE-2008-1289)
Asterisk is an open source software implementation of a telephone private branch exchange. Like any PBX, it allows a number of attached telephones to make calls to one another, and to connect to other telephone services including the public switched telephone network. Asterisk supports a wide ran...
Novell iPrint Client ienipp.ocx target-frame Stack Buffer Overflow (CVE-2009-1568)
Novell iPrint Client is an application that allows users to install and manage printers, or submit print jobs from a web browser. Novell iPrint Client is bundled with an ActiveX control that implements various functions. A buffer overflow vulnerability exists in Novell iPrint Client. The...
Internet Explorer Script Action Handler Buffer Overflow (CVE-2006-1245)
Microsoft Internet Explorer is the most widely used web browser application used today. The browser is capable of processing HTML, scripting languages, and various other popular Internet specifications. A vulnerability has been identified in Microsoft Internet Explorer. The vulnerability is creat...
Firefox Image File Dragging Malformed Extension (CVE-2005-0230)
The Mozilla web browser and its derivatives, Firefox, Netscape, and K-Meleon are applications designed for tasks related to browsing the web, such as displaying HTML encoded pages and downloading files. The Mozilla web browser allows the user to quickly save images displayed on web pages by...
Update Protection against EMC RepliStor rep_srv and ctrlservice Denial of Service
A denial of service vulnerability exists in EMC RepliStor. EMC RepliStor is a data recovery and protection system designed for Microsoft Windows. The vulnerability is due to an input validation error while parsing a specially crafted packet sent to 'repsrv.exe' and 'ctrlservice.exe' services...
Citrix Systems Multiple Products IMA Service Buffer Overflow (CVE-2008-0356)
The Citrix MetaFrame products are remote access and application publishing products built on Citrix' Independent Computing Architecture ICA. The products allow for access and control of the remote hosts as well as deploying applications. There exists a buffer overflow vulnerability in Independent...
VERITAS NetBackup vmd Shared Library Buffer Overflow (CVE-2005-3116)
The Symantec VERITAS NetBackup Server product suite is an enterprise backup system solution available for various platforms. It is capable of performing scheduled automatic backups as well as manual backups invoked by a client. A minimal backup environment consists of backup clients and a master...
Novell iManager Tomcat HTTP POST Request Handling Denial of Service (CVE-2006-4517)
Novell iManager is a web-based administration console that provides management of many other Novell products. During installation, if the Windows Web Publishing Services IIS is not available, the installation program will install the Apache HTTP server. The iManager service itself is a Java web...
Microsoft Web Services on Devices API Memory Corruption (MS09-063; CVE-2009-2512)
The WSDAPI is an implementation of the Devices Profile for Web Services DPWS for Windows Vista and Windows Server 2008. The DPWS constrains Web Services specifications so that clients can easily discover devices. A remote code execution vulnerability has been reported in the Web Service on Device...
Oracle Database Server SYS.LT.FINDRICSET Function SQL Injection (CVE-2007-5511)
Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, i.e., procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...
Microsoft .NET Framework Pointer Verification Error (MS09-061; CVE-2009-0090)
The Microsoft .NET Framework is a software framework that includes a large library of coded solutions to common programming problems and a virtual machine that manages the execution of programs written specifically for the framework. A remote code execution vulnerability exists in the Microsoft...
CVS File Existence Information Disclosure (CVE-2004-0788)
Concurrent Versions System CVS is an open-source network-transparent version control system. CVS itself does not listen for, or accept network connections. To implement remote repository access, it can be installed as an inetd service, or invoked with the rsh/ssh command. Data between the server...
Preemptive Protection against Microsoft GDI+ PNG Integer Overflow Vulnerability (MS09-062)
A remote code execution vulnerability has been discovered in the way that GDI+ allocates memory. The Microsoft Windows graphics device interface GDI enables applications to use graphics and formatted text on the video display and on the printer. A remote attacker may trigger this issue via a...
Update Protection against Adobe JRun 4 Management Console Cross-Site Scripting Vulnerability (APSB09-12)
A Cross Site Scripting XSS vulnerability has been discovered in Adobe JRun Management Console. JRun is an application server based on Java 2 Platform, Enterprise Edition J2EE. It works with popular Web servers including Apache and IIS. A remote attacker could exploit this issue to execute a...
Microsoft Remote Desktop Connection DWORD Heap Overflow (MS09-044; CVE-2009-1133)
A remote code execution vulnerability has been reported in the way Microsoft Remote Desktop Connection processes specific parameters returned by the RDP server. The Microsoft Remote Desktop Protocol RDP provides remote display and input capabilities over network connections for Microsoft...
Microsoft DirectShow Size Validation Remote Code Execution (MS09-028; CVE-2009-1539)
Microsoft DirectShow is used for streaming media on Microsoft Windows operating systems. It is used for high-quality capture and playback of multimedia streams. The vulnerability is due to an error in the Microsoft DirectShow component that fails to properly validate certain size fields within...
Microsoft Word Multiple SPRM Records Buffer Overflow (MS09-027; CVE-2009-0563)
Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in Microsoft Word. The vulnerability is due to an error in Microsoft Word that fails to properly handle Word files. A remote attacker could trigger this flaw by convincing a victim to...
Microsoft WordPad Word 97 Text Converter Text Location Stack Overflow (MS09-010; CVE-2009-0235)
WordPad Text Converters allow users who do not have Microsoft Office Word installed to open documents in other Microsoft Windows applications. They also allow users to save documents in the Word 97 file format. The vulnerability is due to a memory corruption error when a user opens a specially...
Update Protection against Akamai Download Manager Arbitrary Program Execution
In its Update Rollup for ActiveX Kill Bits from February 2009 960715, Microsoft has released a security update to set a kill bit for an ActiveX control developed by Akamai Technologies. Akamai Technologies has released a security update that addresses a vulnerability in the affected...
Workaround for Microsoft Office Visio Malformed File Parsing Remote Code Execution Vulnerabilities (MS09-005)
Multiple remote code execution vulnerabilities have been reported in Microsoft Visio. Microsoft Visio is a diagram creation software for Microsoft Windows. A remote attacker can exploit these vulnerabilities via a specially crafted Visio file. Successful exploitation may allow execution of...
Workaround for Microsoft Windows Saved Search Remote Code Execution Vulnerability (MS08-075)
A remote code execution vulnerability was reported in the way Windows Explorer saves specially crafted search files. Windows Search is a standard component of Windows Vista that allows instant search capabilities for most common file and data types. Windows Search has XML-based files that save...
Microsoft Excel Axisparent Record Index Handling Code Execution (MS08-043; CVE-2008-3004)
Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the way Microsoft Excel handles index values. The vulnerability is due to an error in Microsoft Excel that fails to properly validate index values when loading Excel files into memor...
Update Protection against TFTP Server Error Packet Handling Buffer Overflow Vulnerability
A buffer overflow vulnerability has been reported in TFTP Server. The Trivial File Transfer Protocol TFTP is used for file transfer, allowing a remote user to download or upload files to the server. TFTP Server is an open source TFTP server service that facilitates the transfer of files to or fro...
Microsoft PowerPoint TxMasterStyle10Atom Processing Code Execution (MS08-051; CVE-2008-1455)
Microsoft PowerPoint is a popular presentation program. A remote code execution vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory calculation error in Microsoft PowerPoint when parsing bullet list values in specially crafted PowerPoint files. A remote...
Preemptive Protection against Microsoft Windows DNS Server Spoofing Vulnerability (MS07-062)
A DNS Cache Poisoning vulnerability has been reported in Microsoft DNS servers. DNS cache poisoning occurs when false DNS records are injected into a DNS server's cache tables. Once the cache tables have been altered, a remote attacker may inspect, capture or corrupt any information exchanged...
Microsoft Visual Studio PDWizard.ocx ActiveX Control Code Execution (CVE-2007-4891)
Microsoft Visual Studio is a software development product for computer programmers. It centers on an integrated development environment which lets programmers create standalone applications, web sites, web applications, and web services.The vulnerability is due to an error in the Microsoft Visual...
Preemptive Protection against Microsoft Agent Remote Code Execution Vulnerability (MS07-051)
A remote code execution vulnerability exists in Microsoft Agent. Microsoft Agent is a software technology that enables an enriched form of user interaction that can make using and learning to use a computer easier. A remote attacker can exploit this issue to execute arbitrary code on the affected...
Symantec Products SupportSoft ActiveX Control Multiple Buffer Overflows (CVE-2006-6490)
Multiple vulnerabilities have been reported in Symantec SupportSoft ActiveX controls. SupportSoft provides third party ActiveX controls used for remote assistance and other technical support functions. A remote attacker could cause the browser to crash allowing execution of arbitrary commands.The...
Preemptive Protection against Mercury Mail IMAP Buffer Overflow Vulnerability
Multiple buffer overflow vulnerabilities exist in Mercury Mail Transport System. Mercury Mail Transport System is a free mail server program that supports various email access and exchange protocols, including the Internet Message Access Protocol IMAP. IMAP is a standard protocol for accessing...
Pimcore Cross Site Scripting (CVE-2022-0831; CVE-2022-0832)
A cross site scripting vulnerability exists in Pimcore. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary script into the affected system...
Nagios IM Command Injection (CVE-2019-9202)
A command injection vulnerability exists in Nagios IM. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Microsoft Windows Win32 Kernel Subsystem Elevation of Privilege (CVE-2022-41113)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Linux Kernel Privilege Escalation (CVE-2022-0847)
A privilege escalation vulnerability exists in Linux Kernel. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...
Adobe Acrobat and Reader Out-of-bounds Read (APSB22-46: CVE-2022-38449
An out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...
Cisco NFVIS Improper Access Control (CVE-2021-34746)
An improper access control vulnerability exists in Cisco NFVIS. Successful exploitation of this vulnerability could allow a remote attacker to read sensitive files on the affected system...
Adobe Acrobat and Reader Use After Free (APSB22-39: CVE-2022-35670)
A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Win32k Elevation of Privilege (CVE-2022-34699)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Cisco Adaptive Security Appliance Privilege Escalation (CVE-2022-20759)
A privilege escalation vulnerability exists in Cisco Adaptive Security Appliance. Successful exploitation of this vulnerability could allow a remote attacker to easily elevate their privilege to that of a domain admin once he compromises a regular user in the domain...