Symantec Messaging Gateway Save.do Cross Site Request Forgery - Improved Performance (CVE-2012-0308)

A cross-site request forgery CSRF vulnerability has been reported in Symantec Messaging Gateway. The vulnerability is due to errors while validating user input. A remote attacker can exploit this vulnerability by enticing a user to open a specially crafted URI. Successful exploitation would allow...

Microsoft Windows Media Decompression Remote Code Execution (MS13-011; CVE-2013-0077)

A remote code execution vulnerability has been reported in Microsoft Windows...

Novell File Reporter FSFUI Arbitrary File Retrieval (CVE-2012-4958)

A file retrieval vulnerability has been reported in Novell File Reporter. The vulnerability is due to lack of authorization on certain requests, resulting in the retrieval of the contents of a file. A remote attacker can exploit this issue by sending a specially crafted request to the affected...

Microsoft OData WCF Replace Denial of Service (MS13-007; CVE-2013-0005)

A denial of service vulnerability has been reported in the OData specification...

Microsoft Excel SerAuxErrBar Heap Overflow (MS12-076; CVE-2012-1885)

A remote code execution vulnerability has been reported in Microsoft Excel...

IBM SPSS VsVIEW6.ocx ActiveX control Code Execution (CVE-2012-0189)

A remote code execution vulnerability has been reported in the IBM SPSS. The vulnerability is due to a boundary error in several methods of the VsVIEW6.ocx ActiveX control. A remote attacker can exploit this vulnerability by enticing a target user to visit a specially crafted web-page. Successful...

Microsoft Windows Font Library File Buffer Overflow (CVE-2011-2003)

A buffer overflow vulnerability has been reported in Microsoft Windows. The vulnerability is due to an input validation error when the kernel parses a .FON font file. A remote attacker could exploit this issue by enticing a target user to open a specially crafted .FON file. Successful exploitatio...

HP Network Node Manager i Multiple Cross-Site Scripting (CVE-2011-4155)

Multiple cross-site scripting vulnerabilities have been reported in HP Network Node Manager i NNMi...

Microsoft Windows msvcrt.dll Media File Code Execution (MS12-013; CVE-2012-0150)

A remote code execution vulnerability has been reported in Microsoft Windows...

Oracle Warehouse Builder Stored Procedure SQL Injection (CVE-2011-0799)

An SQL injection vulnerability has been reported in Oracle Warehouse Builder, a component of Oracle Database. The vulnerability is due to improper input validation in a certain stored procedure. A remote attacker with limited user privileges could exploit this vulnerability by injecting SQL...

SonicWall SSL-VPN NetExtender ActiveX Control Buffer Overflow (CVE-2007-5603)

An arbitrary code execution vulnerability has been reported in SonicWall SSL-VPN NetExtender. The vulnerability is due to insufficient length validation by an ActiveX control. A remote attacker may exploit this vulnerability by sending a specially crafted request to an affected service. Successfu...

Microsoft Windows Negotiate SSP Code Execution (CVE-2004-0119)

A remote code execution vulnerability has been reported in Microsoft Windows Negotiate Security Software Provider SSP interface. The vulnerability is due to a buffer overflow while handling certain network messages. A remote attacker may exploit this vulnerability by sending a specially crafted...

ESTsoft ALZip MIM File Buffer Overflow (CVE-2011-1336)

A remote code execution vulnerability has been reported in ESTsoft's ALZip. The vulnerability is due to an error while parsing MIME files. A remote attacker may exploit this vulnerability by sending a specially crafted .mim file to an affected user. Successful exploitation of this vulnerability...

Uniscribe Font Parsing Engine Remote Code Excution (MS10-063; CVE-2010-2738)

This is a memory corruption vulnerability in Microsoft Windows and Microsoft Office products. The vulnerability is due to improper input validation of a table in the TrueType font layout. Remote attacker could trigger this flaw by enticing a user to open a specially crafted TTF file. Successful...

Microsoft Excel Series Integer Underflow (MS11-045; CVE-2011-1278)

Microsoft Excel is a popular spreadsheet application. A vulnerability has been identified in Microsoft Excel. When Microsoft Excel validates record information upon opening a specially crafted Excel file, a memory handling error may corrupt system memory in such a way that an attacker could execu...

Microsoft Windows Media Player PNG Chunk Handling Stack Overflow (MS06-024) - High Confidence (CVE-2006-0025)

An attacker can exploit this vulnerability by enticing a user to open a crafted PNG file, resulting in the possible injection and execution of arbitrary code on the target system with the privileges of the currently logged-in user. A remote stack buffer overflow vulnerability has been discovered ...

RealNetworks RealPlayer RecordClip Parameter Injection Code Execution (CVE-2010-3749)

RealNetworks RealPlayer is a cross-platform media player that supports multiple multimedia formats such as: MP3, MPEG-4, QuickTime, Windows Media, and RealAudio and RealVideo formats. RealPlayer contains many features including streaming capabilities, media browser, video download, and CD ripping...

HP OpenView NNM nnmRptConfig.exe schd_select1 Remote Code Execution (CVE-2011-0269)

The Network Node Manager NNM is an HP OpenView product which manages networks. It determines and displays physical and logical connectivity in networks, as well as information referring to protocols running over the network. A buffer overflow vulnerability has been reported in the HP OpenView...

Microsoft Graphics Filters TIFF Image Converter Heap Overflow (MS10-105; CVE-2010-3947)

Tagged Image File Format TIFF is a container format for storing images, including photographs and line art. A remote code execution vulnerability has been discovered in the way that Microsoft Office parses specially crafted TIFF image files. The vulnerability is due to an error in Microsoft Offic...

Microsoft Windows Address Book Insecure Library Loading (MS10-096; CVE-2010-3147)

The Windows Address Book WAB is an application and service that has a local database and user interface for finding and editing information about people, and it can query network directory servers using Lightweight Directory Access Protocol LDAP. A remote code execution vulnerability has been...

Adobe Shockwave Player Duplicate Keys Memory Corruption (APSB10-25; CVE-2010-4088)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A memory corruption vulnerability has been identified in Adobe Shockwave Player. The vulnerability is due t...

Microsoft OpenType Font Parsing Elevation of Privilege (MS10-078; CVE-2010-2740)

OpenType is a font format developed jointly by Microsoft and Adobe as an extension of Apple's TrueType font format. An OpenType font file contains data, in table format, that comprises either a TrueType or a PostScript outline font. An elevation of privilege vulnerability has been reported in the...

Microsoft Excel Biff Record PtgName Entries Code Execution (MS10-080; CVE-2010-3235)

Microsoft Excel is a popular spreadsheet application. A memory corruption vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly validate formula information upon opening a specially crafted Excel file. A remote...

Adobe Shockwave Player MCsL Parsing Memory Corruption (APSB10-20; CVE-2010-2881)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A memory corruption vulnerability has been identified in Adobe Shockwave Player. The vulnerability is due t...

CA BrightStor ARCserve Backup Message Engine Stack Overflow (CVE-2007-5327)

There exists a buffer overflow vulnerability in CA BrightStor ARCserve Backup Message Engine. The vulnerability is due to insufficient boundary checking when processing strings supplied in RPC requests. Successful exploitation of this vulnerability allows a remote unauthenticated attacker to...

Update Protection against Microsoft Internet Explorer Parent Style Uninitialized Memory Corruption Vulnerability (MS10-053)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. A remote attacker could exploit this issue by convincing a user to open a maliciously crafted HTML file with Internet Explorer, which will cause the browser to crash and may allow execution of arbitrary comman...

Microsoft Word RTF Parsing Engine Memory Corruption (MS10-056; CVE-2010-1901)

Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in Microsoft Word. The vulnerability is due to insufficient data validation by Microsoft Office Word when handling rich text data. A remote attacker could trigger this flaw by convincin...

Microsoft Access ACCWIZ.dll Uninitialized Variable Code Execution (MS10-044; CVE-2010-1881)

ACCWIZ.dll Microsoft Access Wizard Controls is a component of Microsoft Office that provides a library of Access ActiveX controls. A remote code execution vulnerability has been reported in the way that the AccWizObjects ActiveX control is instantiated by Microsoft Office and Internet Explorer. T...

Microsoft Internet Explorer error handling code execution (MS07-057; CVE-2007-3893)

Microsoft Internet Explorer IE is the most widely used web browser application. The browser is capable of processing HTML, XML, images, scripting languages, and various other popular Internet specifications. Internet Explorer's support of scripting language that allows a web page to open new popu...

Preemptive Protection against HP Performance Manager Apache Tomcat Policy Bypass

A vulnerability exists in HP Performance Manager, a web-based analysis and visualization tool that analyzes performance trends of applications, systems, and services. HP Performance Manager incorporates Apache Tomcat 5 to help serve custom web applications. The vulnerability is due to insufficien...

Microsoft IIS4 Exair Sample Site Denial Of Service (CVE-1999-0449)

Microsoft Internet Information Services IIS is a multi-featured server product that ships with all versions of Microsoft Windows 2000, XP and Server 2003. The product provides FTP, SMTP, NNTP and HTTP services. The HTTP component, known as the WWW Publishing Service, allows for the serving of...

Microsoft Excel Malformed Filter Records Handling Code Execution (MS07-023; CVE-2007-1214)

Microsoft Excel is a popular spreadsheet application that is usually released as part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formulae, and various data sources. The proprietary file format used for storing Microsoft Excel documents ...

Novell ZENworks Desktop Management ActiveX Control Buffer Overflow (CVE-2008-5073)

Novel ZENworks Desktop Management is a resource management solution for workstations and laptops. The product include various software components that are installed on management and managed computers. One of these software components is an ActiveX control implemented in file AxNalServer.dll. A...

Microsoft Movie Maker Project File Handling Buffer Overflow (MS10-016; CVE-2010-0265)

Microsoft Movie Maker is a video creating/editing software, that contains features such as effects, transitions, titles/credits, audio track, and timeline narration. A buffer overflow vulnerability has been identified in Microsoft Movie Maker. The vulnerability is due to an error in Microsoft Mov...

Microsoft TCP IP Selective Acknowledgement Denial of Service (MS10-009; CVE-2010-0242)

TCP/IP SACK is used for connections with large TCP window sizes. When SACK is enabled, if a packet or series of packets is dropped the receiver can inform the sender of exactly which data has been received and where the holes in the data are. The sender can then selectively retransmit the missing...

Microsoft Works File Converter WPS File Section Header Index Table Stack Overflow (MS08-011; CVE-2008-0105)

Microsoft Works is a home/office productivity software suite. Its core functionality includes a word processor, a spreadsheet, and a database. A Microsoft Works Document, normally denoted by the extension .wps, has numerous properties which define the appearance of the document, as well as some...

Microsoft Word Smart Tags Code Execution (MS06-027; CVE-2006-2492)

A code execution vulnerability exists in Microsoft Office Word software. The vulnerability is due to insufficient validation of certain fields related to the Smart Tags in a Word document. An attacker may exploit this vulnerability by enticing a user to open a crafted Word file, which may result ...

Microsoft PowerPoint Viewer TextCharsAtom Record Stack Overflow (MS10-004; CVE-2010-0034)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A remote code execution vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a stack overflow in Microsoft PowerPoint TextCharsAtom record when processing malicious...

Opera Browser file URI Handling Buffer Overflow (CVE-2008-5178)

Opera is a web browser and Internet suite developed by the Opera Software company. Opera handles common Internet-related tasks such as displaying web sites, sending and receiving e-mail messages, managing contacts, IRC online chatting, downloading files via BitTorrent, and reading web feeds. The...

Preemptive Protection against Adobe Flash Media Server Directory Traversal Vulnerability (APSB09-18)

A directory traversal vulnerability has been discovered in Adobe Flash Media Server FMS. Flash Media Server FMS is an application server for Flash-based applications. This vulnerability allows a hacker to access normally-inaccessible files and directories through a specially-created HTTP request...

Internet Explorer Malformed GIF File Double Free (MS04-025; CVE-2003-1048)

The Graphics Interchange Format GIF defines a file format intended for the on-line transmission and interchange of raster graphic data. It uses the LZW compression algorithm to minimize file sizes. A double free vulnerability exists in the way Microsoft Internet Explorer handles images of the GIF...

Ipswitch WS_FTP Server Commands Buffer Overflow Denial of Service (CVE-2004-1135)

The Ipswitch WSFTP server is a full featured secure FTP server complete with several optional authentication mechanisms, encryption and data access controls. It is fully compliant with the File Transfer Protocol specifications. A vulnerability exists in the way Ipswitch WSFTP server parses certai...

Novell GroupWise WebAccess Basic Authentication Buffer Overflow (CVE-2007-2171)

Novell GroupWise is an enterprise collaboration system that provides secure e-mail, calendaring, scheduling, and instant messaging. GroupWise also includes task management, contact management, document management, and other productivity tools. GroupWise can be used on the users' desktop and can b...

EMC Dantz Retrospect Backup Agent Denial of Service (CVE-2006-0995)

The EMC Retrospect Backup product suite is based on an agent and server model. The backup server can initiate backups, backup remote client machine, as well perform scheduled backups. The agent component is installed on a machine that is to be backed up by the server. The agent can be made to...

Symantec AntiVirus RAR Archive Decompression Buffer Overflow (CVE-2005-4438)

Symantec antivirus scanning products are designed for enterprise and home environments for protection from potentially malicious files and network traffic. Numerous Symantec products that incorporate the antivirus scanning capabilities share among them common components and libraries. One such...

VideoLAN VLC Media Player WAV Processing Integer Overflow (CVE-2008-2430)

VLC media player is an open source multimedia player. It can play many audio and video formats MPEG, DivX, ogg, Wave etc. as well as various streaming protocols. It is highly portable and available for multiple platforms. Support for various formats is implemented in the form of plugins bundled...

Microsoft Windows ASF File Media Header Parsing Code Execution (MS09-047; CVE-2009-2498)

ASF Advanced Systems Format is a file format that stores audio and video information and is specially designed to run over networks like the Internet. It is a compressed format that contains streaming audio, video, slide shows, and synchronized events. ASF enables content to be delivered as a...

TCP Window Size Enforcement (CVE-2008-4609; CVE-2009-1925; CVE-2009-1926)

TCP/IP is a set of networking protocols that are widely used on the Internet. TCP/IP provides communications across interconnected networks of computers that have diverse hardware architectures and that run various operating systems. Multiple vulnerabilities exist in TCP/IP processing in Microsof...

Oracle Secure Enterprise Search search_p_groups Cross-Site Scripting (CVE-2009-1968)

Oracle Secure Enterprise Search SES, a standalone product from Oracle, enables a secure, high quality search across all enterprise information assets. Oracle Database Secure Enterprise Search contains a flaw that allows a remote cross site scripting attack. This flaw exists because the applicatio...

Sun Solaris sadmind RPC Request Buffer Overflow (CVE-2008-3869; CVE-2008-3870)

sadmind is a daemon used to control the servers running Sun Solaris operating system. A buffer overflow vulnerability was identified in the sadmind service within the Sun Solaris operating system. The vulnerability is triggered in sadmind when decoding request parameters. This can be exploited to...