Trimble Navigation SketchUp BMP File Buffer Overflow (CVE-2013-3664)

A remote code execution vulnerability exists in Trimble Navigation's Sketchup...

Microsoft Internet Explorer Memory Corruption (MS13-069: CVE-2013-3203)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer...

Novell Messenger Client Filename Parameter Stack Buffer Overflow (CVE-2013-1085)

A stack buffer over flow has been reported in Novell Messenger client...

Microsoft Internet Explorer Memory Corruption (MS13-055; CVE-2013-3145)

A Remote code execution vulnerability has been reported in Microsoft Internet Explorer...

Microsoft Internet Explorer Memory Corruption (MS13-055; CVE-2013-3115)

A use after free vulnerability has been reported in Microsoft Internet Explorer...

Adobe Multiple Products PNG File Handling Stack Buffer Overflow (CVE-2007-2365)

There exists a stack buffer overflow vulnerability in Adobe Photoshop...

WordPress Plugin Google Document Embedder Arbitrary File Disclosure (CVE-2012-4915)

A remote code execution vulnerability has been reported in Google Doc Embedder Plugin for WordPress...

Preemptive Protection against Microsoft Windows TCP/IP Driver Denial of Service (MS13-049; CVE-2013-3138)

A denial of service vulnerability has been reported in the TCP/IP driver of Microsoft Windows...

Citadel SMTP RCPT Remote Buffer Overflow - High Confidence (CVE-2008-0394)

The Citadel Server is a mail server product geared towards small and medium size organizations. The product implements POP3, IMAP4, and SMTP services. The SMTP server module is installed and started in a default installation. There exists a buffer overflow vulnerability in Citadel SMTP Server. Th...

Internet Explorer CMarkupTransNavContext Use After Free (MS13-037; CVE-2013-1308)

A Code Execution vulnerability exists in Internet Explorer. An attacker who successfully exploited these vulnerabilities could gain the same user rights as the current user. When Internet Explorer attempts to access an object in memory that has been deleted, it may corrupt memory in such a way th...

Smart Software Solutions CoDeSys CmpWebServer Content-Length NULL Pointer (CVE-2011-5009)

Denial of service has been reported in Smart Software Solutions CoDeSys CmpWebServer.The vulnerability is due to insufficient validation of incoming HTTP POST requests to TCP port 8080.A remote attacker could exploit this vulnerability by sending a malicious HTTP POST request to the affected...

Adobe Photoshop PNG Image Processing Buffer Overflow - Improved Performance (CVE-2012-4170)

A heap buffer overflow vulnerability has been reported in Adobe Photoshop CS6. The vulnerability is due to an error while handling certain chunks within a specially crafted PNG file. A remote attacker can exploit this vulnerability by enticing a user to open a malicious PNG file. Successful...

Novell File Reporter FSFUI Arbitrary File Retrieval (CVE-2012-4958)

A file retrieval vulnerability has been reported in Novell File Reporter. The vulnerability is due to lack of authorization on certain requests, resulting in the retrieval of the contents of a file. A remote attacker can exploit this issue by sending a specially crafted request to the affected...

Microsoft OData WCF Replace Denial of Service (MS13-007; CVE-2013-0005)

A denial of service vulnerability has been reported in the OData specification...

Microsoft Excel SerAuxErrBar Heap Overflow (MS12-076; CVE-2012-1885)

A remote code execution vulnerability has been reported in Microsoft Excel...

Oracle Warehouse Builder WB_OLAP_AW_REMOVE_SOLVE_ID SQL Injection (CVE-2011-0799)

An SQL injection vulnerability has been reported in Oracle Warehouse Builder, a component of Oracle Database...

Oracle Outside In CorelDRAW File Parser Integer Overflow (CVE-2011-2264; CVE-2011-3541)

An integer overflow vulnerability has been reported in Oracle Outside-In. The vulnerability is due to improper bounds checking of user-supplied values while parsing malicious CorelDRAW cdr files. A remote attacker may exploit this vulnerability by sending a malicious CDR file to a target user...

Black Ice BIImgFrm.ocx ActiveX Code Execution (CVE-2008-2683)

A remote code execution vulnerability has been reported in Black Ice BIImgFrm.ocx. The vulnerability is due to a design flaw in the application which allows uploading of specially crafted files to an affected system. An attacker could exploit this vulnerability by enticing a victim to open a...

Uniscribe Font Parsing Engine Remote Code Excution (MS10-063; CVE-2010-2738)

This is a memory corruption vulnerability in Microsoft Windows and Microsoft Office products. The vulnerability is due to improper input validation of a table in the TrueType font layout. Remote attacker could trigger this flaw by enticing a user to open a specially crafted TTF file. Successful...

Microsoft Windows OLEAUT32.DLL WMF File Remote Code Excution (MS11-038; CVE-2011-0658)

The vulnerability is caused by the way that OLE Automation parses a specially crafted WMF file. An attacker could host a specially crafted Web site that is designed to exploit this vulnerability through Internet Explorer and then persuade a user to view the Web site. An attacker who successfully...

Microsoft Office File Malformed String Parsing Buffer Overflow(MS06-038; CVE-2006-1540)

Microsoft Office is a popular productivity application suite released by Microsoft Corporation. It includes a word processor, a spreadsheet application, a presentation editor, and a number of other applications and components. A memory corruption vulnerability has been reported in several Microso...

Novell ZENworks Configuration Management TFTPD Heap Buffer Overflow (CVE-2010-4323)

Novell ZENworks Configuration Management is an IT desktop computer management suite that is based on a client/server architecture. A management server collects and sends data of managed assets by communicating with client applications installed on computers, or via other management protocols. A...

Microsoft Graphics Filters TIFF Image Converter Heap Overflow (MS10-105; CVE-2010-3947)

Tagged Image File Format TIFF is a container format for storing images, including photographs and line art. A remote code execution vulnerability has been discovered in the way that Microsoft Office parses specially crafted TIFF image files. The vulnerability is due to an error in Microsoft Offic...

Microsoft Excel Real Time Data Array Record Code Execution (MS10-080; CVE-2010-3240)

Microsoft Excel is a popular spreadsheet application. A remote attacker could exploit this issue via a malformed Excel file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system. A memory corruption vulnerability has been identified in Microsoft...

Microsoft Browser Embedded Media Player Memory Corruption (MS10-082; CVE-2010-2745)

Windows Media Player is a feature of the Windows operating system for personal computers. It is used for playing audio and video. A remote code execution vulnerability has been reported in Windows Media Player. The vulnerability is due to an error in the Windows Media Player that improperly...

Microsoft Windows LSASS Malformed LDAP Messages Heap Overflow (MS10-060; CVE-2010-0820)

Active Directory provides central authentication and authorization services for Windows-based systems. Active Directory Application Mode ADAM is a Lightweight Directory Access Protocol LDAP directory service that runs as a user service. An authenticated elevation of privilege vulnerability has be...

CA BrightStor ARCserve Backup Tape Engine RPC Code Execution (CVE-2007-0168)

There exists a vulnerability in Computer Associates BrightStor ARCserve Backup products. The flaw is due to a design weakness in the processing of RPC requests sent to the Tape Engine service. A remote unauthenticated attacker may leverage this vulnerability to inject and execute arbitrary code o...

Update Protection against Microsoft Internet Explorer Parent Style Uninitialized Memory Corruption Vulnerability (MS10-053)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. A remote attacker could exploit this issue by convincing a user to open a maliciously crafted HTML file with Internet Explorer, which will cause the browser to crash and may allow execution of arbitrary comman...

IBM Lotus Notes WPD Attachment Viewer Buffer Overflow (CVE-2007-5544)

Lotus Notes is a client-server collaborative software and email system provided by IBM. The Lotus Notes email client application is capable of communicating with email servers over the SMTP, POP, and IMAP protocols. There exist a buffer overflow vulnerability in IBM Lotus Notes WPD viewer. The...

Microsoft Access ACCWIZ.dll Uninitialized Variable Code Execution (MS10-044; CVE-2010-1881)

ACCWIZ.dll Microsoft Access Wizard Controls is a component of Microsoft Office that provides a library of Access ActiveX controls. A remote code execution vulnerability has been reported in the way that the AccWizObjects ActiveX control is instantiated by Microsoft Office and Internet Explorer. T...

Microsoft Internet Explorer error handling code execution (MS07-057; CVE-2007-3893)

Microsoft Internet Explorer IE is the most widely used web browser application. The browser is capable of processing HTML, XML, images, scripting languages, and various other popular Internet specifications. Internet Explorer's support of scripting language that allows a web page to open new popu...

Microsoft Excel Embedded Shockwave Flash Object Code Execution (MS06-069; CVE-2006-3014)

Microsoft Excel is a popular spreadsheet application that is usually released as a part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formulas, and various data sources. The common extension used for Microsoft Excel documents is .xls. A...

Microsoft Excel RealTimeData Record Heap Corruption (MS10-038; CVE-2010-1247)

Microsoft Excel is a spreadsheet application released by the Microsoft Corporation. Its native file format is the Binary Interchange File Format BIFF, which is available is several versions. An Excel file contains information about the various spreadsheets that form an Excel workbook, the data an...

Microsoft ASP.NET Application Folder Information Disclosure (MS06-033; CVE-2006-1300)

ASP.NET is a technology that provides a programming model and infrastructure for creating dynamic web applications. ASP.NET is part of the Microsoft .NET Framework. ASP.NET is deployed on the Microsoft Internet Information Server, which treats files with the .aspx extension as ASP.NET files and...

Microsoft Excel COLINFO Record Buffer Overflow (MS06-059; CVE-2006-3875)

Microsoft Excel is a popular spreadsheet application that is usually released as part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formulas, and various data sources. The proprietary file format used for storing Microsoft Excel documents ...

IBM Lotus Notes WPD Attachment Handling Buffer Overflow (CVE-2008-4564)

Lotus Notes is a client-server collaborative software and email system provided by IBM. The Lotus Notes email client application is capable of communicating with email servers over the SMTP, POP, and IMAP protocols. A stack-based buffer overflow vulnerability exists in the IBM Lotus Notes WPD. Th...

Microsoft Windows ISATAP IPv6 Source Address Spoofing (CVE-2010-0812)

The Intra-Site Automatic Tunnel Addressing Protocol ISATAP provides IPv6 connectivity within an IPv4 Intranet. A spoofing vulnerability has been reported in Microsoft Windows due to the way that Windows checks the inner packet's IPv6 source address in a tunneled ISATAP packet. The vulnerability i...

QuickTime-Darwin Denial of Service (CVE-2004-0169)

A vulnerability exists in the Quicktime Streaming Server and Darwin Streaming Server that allows remote users to cause a denial of service condition on the server. The vulnerability can be exploited to cause the service to either crash or consume all available processor resources. The...

Internet Explorer CSS Strings Parsing Memory Corruption (MS07-045; CVE-2007-0943)

Microsoft Internet Explorer IE is the most widely used web browser application. The browser is capable of processing HTML, images, scripting languages, and various other popular Internet specifications. The application is also capable of using Cascading Style Sheets CSS. A remote code execution...

Microsoft Works File Converter WPS File Section Header Index Table Stack Overflow (MS08-011; CVE-2008-0105)

Microsoft Works is a home/office productivity software suite. Its core functionality includes a word processor, a spreadsheet, and a database. A Microsoft Works Document, normally denoted by the extension .wps, has numerous properties which define the appearance of the document, as well as some...

Microsoft Excel File Named Graph Record Parsing Stack Overflow (MS07-023; CVE-2007-0215)

Microsoft Excel is a popular spreadsheet application that is usually released as part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formulae, and various data sources. The proprietary file format used for storing Microsoft Excel documents ...

Microsoft DirectX Crafted MJPEG Stream Handling Code Execution (MS08-033; CVE-2008-0011)

Microsoft DirectX is a software component which contains a set of APIs that provide access to graphics acceleration chips and sound cards and other types of media hardware. These APIs control low-level functions including graphics acceleration, support for input devices such as joysticks,...

Microsoft Windows SMB Client Pool Corruption (MS10-006; CVE-2010-0016)

The SMB Protocol is a network file sharing protocol that is implemented in Microsoft Windows. A remote code execution vulnerability has been reported in the Microsoft Server Message Block SMB Protocol. The vulnerability is due to an error in the Microsoft SMB implementation that improperly...

RealNetworks Helix Server RTSP SET_PARAMETERS Request Denial of Service (CVE-2009-2533)

Helix Server is a multi media server that is designed to serve streaming and static audio and video content. Helix project, Helix Server being part of it, is intended as a largely free software/open source digital media framework that runs on numerous operating systems and processors including...

CA BrightStor ARCserve Backup Universal Agent Buffer Overflow (CVE-2005-1018)

Computer Associates CA BrightStor ARCserve Backup software offers data protection for distributed servers, clients, databases and applications. The CA backup servers are capable of backing up files as well as system settings. The backups are performed across a local network using the UniversalAge...

Opera Browser file URI Handling Buffer Overflow (CVE-2008-5178)

Opera is a web browser and Internet suite developed by the Opera Software company. Opera handles common Internet-related tasks such as displaying web sites, sending and receiving e-mail messages, managing contacts, IRC online chatting, downloading files via BitTorrent, and reading web feeds. The...

Microsoft DirectX RLE Compressed Targa Image File Heap Overflow (CVE-2006-4183)

Microsoft DirectX is a set of libraries that aim for accelerated video and audio experience on Microsoft Windows operating system. The three-dimension 3D acceleration engine of DirectX is known as Direct3D. Direct3D include texture rendering, which displays bitmap images on the surface of 3D...

CA BrightStor ARCserve Backup caloggerd Opcode 79 Stack Buffer Overflow (CVE-2008-2242)

Computer Associates BrightStor ARCserve Backup products offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distributed operations including Backup and Restore, Data Migration, and Threat Management. There exists a...

MediaWiki Language Option PHP Code Execution (CVE-2005-4031)

MediaWiki is a web-based enterprise collaboration platform developed in the PHP scripting language. The software is a set of CGI programs that are loaded and executed by an HTTP server. It typically runs as a document management system, or a knowledge base. The web content of a MediaWiki...

Oracle Database sys.pbsde.init Procedure Buffer Overflow (CVE-2005-3438)

Stored procedures are a powerful feature of an Oracle database server. They are essentially a set of SQL statements that are stored server-side, which are called by name and optionally passed a set of parameters. Stored procedures provide improved performance, because only data specific to the...