Microsoft Windows OLEAUT32.DLL WMF File Remote Code Excution (MS11-038; CVE-2011-0658)

The vulnerability is caused by the way that OLE Automation parses a specially crafted WMF file. An attacker could host a specially crafted Web site that is designed to exploit this vulnerability through Internet Explorer and then persuade a user to view the Web site. An attacker who successfully...

Microsoft Excel Series Integer Underflow (MS11-045; CVE-2011-1278)

Microsoft Excel is a popular spreadsheet application. A vulnerability has been identified in Microsoft Excel. When Microsoft Excel validates record information upon opening a specially crafted Excel file, a memory handling error may corrupt system memory in such a way that an attacker could execu...

HP Data Protector Backup Client Service EXEC_SETUP Code Execution (CVE-2011-0922)

HP OpenView Storage Data Protector is a backup solution tailored for enterprise and distributed environments. The Data Protector environment consists of a Cell Manager, backup agents, and backup device servers. The backup agent supports various message types in its communication with clients in...

Microsoft Windows Kernel-Mode Drivers Win32k Memory Corruption (MS11-012; CVE-2011-0090)

The Windows kernel-mode driver win32k.sys is a kernel-mode device driver and is the kernel part of the Windows subsystem. It contains the window manager and the Graphics Device Interface GDI. It also serves as a wrapper for DirectX support. An elevation of privilege vulnerability has been...

Symantec Alert Management System pagehndl.dll Stack Buffer Overflow (CVE-2010-0110)

Symantec Alert management System 2 AMS2 is a package used by various Symantec solutions such as System Center, AntiVirus Server, and AntiVirus Central Quarantine Server. AMS2 starts multiple services on the system that run with System account privileges, by default. A stack buffer overflow...

Microsoft Internet Explorer HTML Time Element Memory Corruption (MS10-090; CVE-2010-3346)

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been initialized or has been deleted. To trigger this...

Internet Explorer toStaticHTML API Cross-Site-Scripting (MS10-072; CVE-2010-3324)

Multiple memory corruption vulnerabilities have been reported in Microsoft Internet Explorer. An information disclosure vulnerability has been reported in the way that the toStaticHTML API sanitizes HTML. The vulnerability is due to the way that Internet Explorer handles content using specific...

Microsoft Word Index Value Parsing Memory Corruption (MS10-079; CVE-2010-3219)

Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in Microsoft Word. The vulnerability is due to an error in Microsoft Word that fails to properly parse specially crafted Word files. A remote attacker could trigger this flaw by...

Microsoft Excel Biff Record PtgName Entries Code Execution (MS10-080; CVE-2010-3235)

Microsoft Excel is a popular spreadsheet application. A memory corruption vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly validate formula information upon opening a specially crafted Excel file. A remote...

Preemptive Protection against Apple Mac OS X CoreGraphics Heap Overflow Vulnerability

A heap buffer overflow Vulnerability has been discovered in Apple CoreGraphics. CoreGraphics refers to a pair of Mac OS X technologies, each part of the CoreGraphics framework: Quartz 2D and Quartz Compositor. It includes both a 2D renderer in CoreGraphics and the composition engine that sends...

CA BrightStor ARCserve Backup Message Engine Stack Overflow (CVE-2007-5327)

There exists a buffer overflow vulnerability in CA BrightStor ARCserve Backup Message Engine. The vulnerability is due to insufficient boundary checking when processing strings supplied in RPC requests. Successful exploitation of this vulnerability allows a remote unauthenticated attacker to...

CA BrightStor ARCserve Backup Tape Engine RPC ReserveGroup Buffer Overflow (CVE-2006-6917)

Computer Associates BrightStor ARCserve Backup products offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distributed operations including Backup and Restore, Data Migration, and Threat Management. There exists a...

Mercury Mail Transport System Buffer Overflow (CVE-2005-4411)

The Mercury Mail Transport System server is an implementation of an Internet mail server. The product offers services which are implementations of the server side of several protocols such as SMTP, POP3, IMAP and Computing and Communications Services Office Nameserver protocol also know as the...

BitDefender Antivirus PDF Processing Memory Corruption (CVE-2008-5409)

There exists a memory corruption vulnerability in multiple BitDefender products. The vulnerability is due to boundary errors within the BitDefender PDF Scanner plugin pdf.xmd. A remote attacker can exploit this vulnerability by delivering a crafted PDF file to the vulnerable system, potentially...

Microsoft Windows Embedded OpenType Font Engine LZCOMP Overflow (MS10-001; CVE-2010-0018)

Embedded OpenType EOT fonts are a compact form of fonts designed for use on web pages. A remote attacker can exploit these vulnerabilities via a specially crafted EOT file. Successful exploitation may allow execution of arbitrary code on a vulnerable system. An integer overflow vulnerability has...

Microsoft Excel COLINFO Record Buffer Overflow (MS06-059; CVE-2006-3875)

Microsoft Excel is a popular spreadsheet application that is usually released as part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formulas, and various data sources. The proprietary file format used for storing Microsoft Excel documents ...

HP OpenView Storage Data Protector Stack Buffer Overflow (CVE-2007-2280)

HP OpenView Storage Data Protector is a cross-platform backup solution for Windows, Unix and Linux operating systems. The Data Protector environment consists of various components and processes: Cell Manager, OmniInet, backup agents, and backup device servers. A buffer overflow vulnerability has...

IBM Lotus Notes WPD Attachment Handling Buffer Overflow (CVE-2008-4564)

Lotus Notes is a client-server collaborative software and email system provided by IBM. The Lotus Notes email client application is capable of communicating with email servers over the SMTP, POP, and IMAP protocols. A stack-based buffer overflow vulnerability exists in the IBM Lotus Notes WPD. Th...

Internet Explorer HTML CSS Tag Rendering Memory Corruption (MS10-018; CVE-2010-0807)

A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has been deleted. To trigger this issue, an attacker may create a malicious web page that will cause Internet Explorer to exit unexpectedly...

Microsoft Word Section Table Array Buffer Overflow (MS07-14; CVE-2007-0515)

Microsoft Word is a document authoring product released by the Microsoft Corporation. Microsoft Word is available packaged with the Microsoft Office suite, as well as in form of a standalone product. Its native file format is the Word Document, normally identified by the .doc file extension. A Wo...

Novell ZENworks Desktop Management ActiveX Control Buffer Overflow (CVE-2008-5073)

Novel ZENworks Desktop Management is a resource management solution for workstations and laptops. The product include various software components that are installed on management and managed computers. One of these software components is an ActiveX control implemented in file AxNalServer.dll. A...

Microsoft Office Jet Engine MDB File Parsing Buffer Overflow (CVE-2007-6026)

Microsoft Office Access, previously known as Microsoft Access, is a relational database management system from Microsoft which combines the relational Microsoft Jet Database Engine with a graphical user interface and software development tools. There exists a buffer overflow vulnerability in...

Microsoft Internet Explorer Cross Domain Information Disclosure (MS06-042; CVE-2006-3280)

Microsoft Internet Explorer IE is the most widely used web browser application. The browser is capable of processing HTML, images, scripting languages, and various other popular Internet specifications. Internet Explorer has numerous built-in mechanisms that enforce security policies which are...

Opera Browser file URI Handling Buffer Overflow (CVE-2008-5178)

Opera is a web browser and Internet suite developed by the Opera Software company. Opera handles common Internet-related tasks such as displaying web sites, sending and receiving e-mail messages, managing contacts, IRC online chatting, downloading files via BitTorrent, and reading web feeds. The...

IBM DB2 Universal Database Connection Handshake Denial of Service (CVE-2006-4257)

The IBM DB2 Universal Database UDB is a relational database management system. The product supports the Distributed Relational Database Architecture DRDA, an Open Group standard, to meet the needs of application programs requiring access to distributed relational data. There exists a denial of...

Microsoft IIS WebDAV Remote Buffer Overflow (MS03-007; CVE-2003-0109)

The Internet Information Server IIS is a Web server packaged with several versions of the Windows operating system. The server is capable of serving static, as well as dynamic content. Several Microsoft Windows IIS servers support the World Wide Web Distributed Authoring and Versioning WebDAV...

Qualcomm WorldMail IMAP Literal Token Parsing Buffer Overflow (CVE-2005-4267)

The Internet Message Access Protocol IMAP allows the access and manipulation of electronic mail. A buffer overflow vulnerability exists in the IMAP service component of Qualcomm WorldMail. The flaw is caused by insufficient boundary checks when processing IMAP commands. An unauthenticated attacke...

Oracle Database Server SYS.LT.FINDRICSET Function SQL Injection (CVE-2007-5511)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, i.e., procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...

Symantec VERITAS Storage Foundation Administrator Service Buffer Overflow (CVE-2008-0638)

Symantec VERITAS Storage Foundation, provides a complete solution for heterogeneous online storage management. Storage Foundation Management Server allows centralized storage management capabilities across a broad array of operating systems and storage hardware. There exists a buffer overflow...

Digium Asterisk SIP Invalid Response Code Denial of Service (CVE-2007-1594)

Asterisk is an open source software implementation of a telephone private branch exchange. Like any PBX, it allows a number of attached telephones to make calls to one another, and to connect to other telephone services including the public switched telephone network. Asterisk supports a wide ran...

CA BrightStor ARCserve Backup Message Engine Opcode 47 Buffer Overflow (CVE-2007-0169)

Computer Associates BrightStor ARCserve Backup and Business Protection Suite families of software products offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distributed operations including backup and restore, dat...

Microsoft Visual FoxPro vfp6r.dll DoCmd ActiveX Control Command Execution (CVE-2008-0236)

Microsoft Visual FoxPro 6.0 is designed for building data-centric Windows applications. Visual FoxPro 6.0 is shipped with a set of various ActiveX controls that are registered on the host upon installation. Specifically, an ActiveX control vfp6r.dll is included. There exists an access control...

JScript Scripting Engine Web Pages Decoding Code Execution (MS09-045; CVE-2009-1920)

JScript is an interpreted, object-based scripting language that is often used to make Web sites more flexible or interactive. A remote code execution vulnerability has been reported in the way that the JScript scripting engine decodes script in Web pages. The vulnerability is due to a memory...

Microsoft Workstation Service NetrGetJoinInformation Corruption (MS09-041; CVE-2009-1544)

Microsoft Windows Workstation Service routes local file system requests and remote file or print network requests via Remote Procedure Call RPC. RPC is a protocol that a program can use to request a service from another program which is located on another computer in a network. An elevation of...

Microsoft Works Oversized Font Buffer Overflow (MS09-024; CVE-2009-1533)

Microsoft Works is home productivity software suite with fewer features than the Microsoft Office suite.The Microsoft Works Converter allows the user to open, edit, and save files in the Microsoft Works file format. A remote code execution vulnerability has been discovered in Microsoft Works...

Microsoft Excel QSir and QSif Records Pointer Corruption (MS09-021; CVE-2009-1134)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the Microsoft Excel. The flaw is due to a memory corruption error in Microsoft Excel when loading specially crafted Excel files that include a malformed record object. The...

Internet Explorer DOM Manipulations Improper Handling (MS09-019; CVE-2009-1531)

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been correctly initialized or has been deleted. To...

Microsoft PowerPoint Converter NoteSlide Record Memory Corruption (MS09-017; CVE-2009-0220)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A remote code execution vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory corruption error in Microsoft PowerPoint when reading sound data from specially craft...

Microsoft Excel TXO and OBJ Records Parsing Memory Corruption (MS08-074; CVE-2008-4265; CVE-2009-0100)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the Microsoft Excel. The vulnerability is due to a memory corruption error in Microsoft Excel when loading Excel records. An attacker can exploit this flaw to execute arbitrary code ...

Protection against Microsoft Windows HTTP Services Certificate Name Mismatch Remote Code Execution Vulnerability (MS09-013)

A spoofing vulnerability has been reported in Microsoft Windows HTTP Services. Windows HTTP Services WinHTTP provides developers with an HTTP client application programming interface API to send requests through the HTTP protocol to other HTTP servers. A remote attacker may exploit this issue to...

Update Protection against Microsoft Windows GDIplus GpFont.SetData Integer Overflow

A vulnerability has been reported in Microsoft Windows Graphics Device Interface GDI. GDI is a Microsoft standard for representing graphical objects and outputting these representations to devices such as monitors and printers. The vulnerability occurs when an application that uses the affected...

Preemptive Protection against Novell Groupwise Internet Agent RCPT Command Buffer Overflow

A buffer overflow vulnerability was reported in Novell GroupWise, a client-server collaborative software and email system provided by Novell. The vulnerability is due to a boundary error while processing specially crafted SMTP requests. Remote attackers can exploit this vulnerability to execute...

Workaround for Microsoft Windows Saved Search Remote Code Execution Vulnerability (MS08-075)

A remote code execution vulnerability was reported in the way Windows Explorer saves specially crafted search files. Windows Search is a standard component of Windows Vista that allows instant search capabilities for most common file and data types. Windows Search has XML-based files that save...

Internet Explorer WebDav Pathname Code Execution (MS08-073; CVE-2008-4259)

A remote code execution vulnerability has been reported in the way Microsoft Internet Explorer accesses uninitialized memory in certain situations. The vulnerability is due to a memory corruption error in Internet Explorer when it attempts to access uninitialized memory in certain situations. An...

Microsoft Windows Message Queuing Service Queue Name Handling (MS08-065) - ver 2 (CVE-2008-3479)

Microsoft Message Queuing MSMQ is a component of Microsoft Windows designed to act as a message portal between a set of applications requiring message exchange functionality. MSMQ enables applications that are running at different times to communicate across heterogeneous networks and across...

Update Protection against Novell eDirectory SOAP Handling Accept Language Header Overflow

A buffer overflow vulnerability exists in Novell eDirectory Directory Services over SOAP. Novell eDirectory is a cross-platform directory server used for identity management. Novell eDirectory utilizes various protocols to provide information services to various platforms, including HTTP-based...

Update Protection against CA Multiple Products gui_cm_ctrls ActiveX Control Memory Corruption Vulnerability

A memory corruption vulnerability has been reported in CA Multiple Products. Computer Associates CA provides a group of security and management products for enterprise as well as individual clients. A remote attacker may exploit this vulnerability to execute arbitrary code on a vulnerable system...

Microsoft Access Snapshot Viewer ActiveX Control Arbitrary File Download (CVE-2008-2463)

Microsoft Snapshot Viewer is an application that allows viewing of snapshots created with any version of Microsoft Access. A remote code execution vulnerability has been discovered in the Snapshot Viewer for Microsoft Access. The vulnerability is due to an error in the Snapshot Viewer ActiveX...

Microsoft Media Player SAMI Format Parsing Code Execution (MS08-033; CVE-2008-1444)

Microsoft Synchronized Accessible Media Interchange SAMI is designed to simplify creating captions for media playback on a PC. SAMI captions coexist with digital media as separate, simple text files. A remote code execution vulnerability has been identified in Microsoft Windows Media Player which...

Internet Explorer HTML Rendering Memory Corruption (MS08-010; CVE-2008-0076)

Microsoft Internet Explorer is the most widely used Internet browser. The vulnerability is due to a memory corruption error in Microsoft Internet Explorer when rendering HTML documents with certain layout combinations. A remote attacker could exploit this issue by convincing a user to visit a...