Oracle Warehouse Builder Stored Procedure SQL Injection (CVE-2011-0799)

An SQL injection vulnerability has been reported in Oracle Warehouse Builder, a component of Oracle Database. The vulnerability is due to improper input validation in a certain stored procedure. A remote attacker with limited user privileges could exploit this vulnerability by injecting SQL...

SonicWall SSL-VPN NetExtender ActiveX Control Buffer Overflow (CVE-2007-5603)

An arbitrary code execution vulnerability has been reported in SonicWall SSL-VPN NetExtender. The vulnerability is due to insufficient length validation by an ActiveX control. A remote attacker may exploit this vulnerability by sending a specially crafted request to an affected service. Successfu...

GOM Player ActiveX Control Buffer Overflow (CVE-2007-5779)

A remote code execution vulnerability has been reported in GOM player. The vulnerability is due to a boundary error in GOM while handling a certain method. A remote attacker may exploit this vulnerability by enticing an unsuspecting user to open a specially crafted HTML page. Successful...

Black Ice BIImgFrm.ocx ActiveX Code Execution (CVE-2008-2683)

A remote code execution vulnerability has been reported in Black Ice BIImgFrm.ocx. The vulnerability is due to a design flaw in the application which allows uploading of specially crafted files to an affected system. An attacker could exploit this vulnerability by enticing a victim to open a...

Microsoft Data Access Components (MDAC) Insecure Library Loading (MS11-059; CVE-2011-1975)

This is a remote code execution vulnerability. The vulnerability is due to the improper way in which the MDAC handles the loading of library files DLL. A remote attacker could trigger this vulnerability by enticing a victim to accept and open an excel related file on a remote folder SMB or Webdav...

Uniscribe Font Parsing Engine Remote Code Excution (MS10-063; CVE-2010-2738)

This is a memory corruption vulnerability in Microsoft Windows and Microsoft Office products. The vulnerability is due to improper input validation of a table in the TrueType font layout. Remote attacker could trigger this flaw by enticing a user to open a specially crafted TTF file. Successful...

Microsoft Windows ATMFD Font Driver OTF Code Execution (MS11-041; CVE-2011-1873)

The Windows kernel is the core of the operating system. It provides system-level services such as device management and memory management, allocates processor time to processes, and manages error handling. A remote code execution vulnerability exists due to the way that the Windows kernel-mode...

Internet Explorer Redirect CDL Protocol Memory Corruption (MS11-050; CVE-2011-1262)

A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due to a memory corruption error in Internet Explorer when handling CDL protocol. Successful exploitation of this vulnerability will crash the browser, and may allow execution of arbitrary code on t...

Microsoft XML Editor Crafted Entity Information Disclosure (MS11-049; CVE-2011-1280)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the SLK file format. A remote attacker could trigger this flaw by...

Microsoft Office Excel RealTimeData Record Memory Corruption (MS11-021; CVE-2011-0101)

Microsoft Excel is a popular spreadsheet application. A remote attacker could exploit this issue via a malformed Excel file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system. A memory corruption vulnerability has been identified in Microsoft...

Microsoft Windows Kernel win32k.sys SysCommand Code Execution (MS11-034; CVE-2011-1239)

The Windows kernel is the core of the operating system. It provides system-level services such as device management and memory management, allocates processor time to processes, and manages error handling. An elevation of privilege vulnerability has been reported in the Windows kernel. The...

Microsoft Windows Win32k Window Class Pointer Confusion (MS11-012; CVE-2011-0088)

The Windows kernel-mode driver win32k.sys is a kernel-mode device driver and is the kernel part of the Windows subsystem. It contains the window manager and the Graphics Device Interface GDI. It also serves as a wrapper for DirectX support. An elevation of privilege vulnerability has been...

Update Protection against Multiple Vendors librpc.dll Stack Buffer Overflow

A buffer overflow vulnerability exists in IBM's Informix Dynamic Server and EMC's Legato Networker. The vulnerability is due to insufficient validation of user input during authentication by the RPC protocol parsing library, librpc.dll, used by the Portmapper service portmap.exe. Successful...

HP OpenView Network Node Manager nnmRptConfig.exe Buffer Overflow (CVE-2011-0268)

The Network Node Manager NNM is an HP OpenView product which manages networks. It determines and displays physical and logical connectivity in networks, as well as information referring to protocols running over the network. A buffer overflow vulnerability has been reported in HP OpenView Network...

Microsoft Graphics Filters CGM Image Converter Buffer Overrun (MS10-105; CVE-2010-3945; CVE-2012-2524)

Computer Graphics Metafile CGM is a free and open international standard file format for 2D vector graphics, raster graphics, and text. A remote code execution vulnerability has been discovered in the way that Microsoft Office allocates buffer size when handling CGM image files. The vulnerability...

Microsoft Office Art Drawing Records Code Execution (MS10-087; CVE-2010-3334)

Microsoft Office is an office suite of inter-related desktop applications, servers and services for the Microsoft Windows and Mac OS X operating systems. A remote attacker could exploit this issue via a malformed Office file. Successful exploitation of this vulnerability may allow execution of...

Adobe Shockwave Player Duplicate Keys Memory Corruption (APSB10-25; CVE-2010-4088)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A memory corruption vulnerability has been identified in Adobe Shockwave Player. The vulnerability is due t...

Adobe Shockwave Player MMAP Entry Size Memory Corruption (APSB10-25; CVE-2010-4084; CVE-2010-4086)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A memory corruption vulnerability has been identified in Adobe Shockwave Player. The vulnerability is due t...

Microsoft Word UPX Data Stack Validation Buffer Overflow (MS10-079; CVE-2010-3214)

Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in the way that Microsoft Word handles stack validation inside a specially crafted Word file. The vulnerability is due to an error in Microsoft Word that fails to properly validate UPX...

Internet Explorer CSS Special Character Information Disclosure (MS10-071; CVE-2010-3325)

CSS Cascading Style Sheets is a formatting method for Web pages using HTML. An information disclosure vulnerability has been reported in the way Microsoft Internet Explorer processes CSS special characters. The vulnerability is due to the way Internet Explorer improperly process CSS special...

Internet Explorer Event Handling Memory Corruption (MS10-071; CVE-2010-3326)

Multiple memory corruption vulnerabilities have been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been initialized or has been deleted. To trigger this issue, an attacker may create a malicious web page that will...

HP OpenView NNM ovwebsnmpsrv.exe Invalid Option Buffer Overflow (CVE-2010-1960)

The HP OpenView product consists of a suite of network and system management software applications developed by HP. It includes several optional modules and components, such as OpenView Quality Manager, OpenView Performance Insight, and OpenView Network Node Manager. A buffer overflow vulnerabili...

Microsoft Word RTF Parsing Engine Memory Corruption (MS10-056; CVE-2010-1901)

Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in Microsoft Word. The vulnerability is due to insufficient data validation by Microsoft Office Word when handling rich text data. A remote attacker could trigger this flaw by convincin...

ClamAV CHM File Handling Integer Overflow (CVE-2005-2450)

Clam AntiVirus is an open source product that provides anti-virus scanning utilities and an anti-virus library. The product is capable of decoding several file formats in order to be able to scan them for viruses. One of such formats is the Microsoft compiled help files, as known as CHM. There...

Microsoft Publisher Object Handler Validation Code Execution (MS08-027; CVE-2008-0119)

Microsoft Publisher is an application that allows users to design, layout, and format documents destined to be published in print, on the web, and various other formats. Microsoft Publisher is released as part of Microsoft Office as well as stand-alone application. Microsoft Publisher saves...

Oracle Database SQL Compiler Access Control Security Bypass (CVE-2007-3855)

There exists a security bypass vulnerability in the Oracle Database Server product. Specifically, the flaw exists due to improper enforcement of user permissions on data access to tables through certain types of views. A remote authenticated attacker may use this vulnerability to perform UPDATE,...

Preemptive Protection against HP Performance Manager Apache Tomcat Policy Bypass

A vulnerability exists in HP Performance Manager, a web-based analysis and visualization tool that analyzes performance trends of applications, systems, and services. HP Performance Manager incorporates Apache Tomcat 5 to help serve custom web applications. The vulnerability is due to insufficien...

Multiple Vendors AgentX receive_agentx Integer Overflow (CVE-2010-1319)

AgentX++ is a C++ object API written by Frank Fock. It is an implementation of the AgentX protocol which is used in multiple applications; including RealNetworks Helix Server and Helix Mobile Server. A buffer overflow vulnerability has been reported in multiple products that use the AgentX++...

Microsoft Windows ISATAP IPv6 Source Address Spoofing (CVE-2010-0812)

The Intra-Site Automatic Tunnel Addressing Protocol ISATAP provides IPv6 connectivity within an IPv4 Intranet. A spoofing vulnerability has been reported in Microsoft Windows due to the way that Windows checks the inner packet's IPv6 source address in a tunneled ISATAP packet. The vulnerability i...

Microsoft Windows Media Player ActiveX Codec Retrieval (CVE-2010-0268)

Microsoft Windows Media Player is a feature of the Windows operating system for personal computers. It is used for playing audio and video. A remote code execution vulnerability has been reported in the Windows Media Player's ActiveX control. The vulnerability is due to an error in the Windows...

Internet Explorer Tabular Control Memory Corruption (MS10-018; CVE-2010-0805)

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in the way that Internet Explorer manages a long URL in certain situations. The vulnerability is due to an ActiveX control in Internet Explorer that incorrectly manages a...

Internet Explorer Mouse Leave Event Handler Memory Corruption (MS10-018; CVE-2010-0267)

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been correctly initialized or has been deleted. To trigger this...

Internet Explorer Plugin Loading Address Bar Spoofing (MS06-021; CVE-2006-1626)

Microsoft Internet Explorer is a popular browser that is bundled with the Microsoft Windows family of operating systems. The browser is capable of rendering HTML pages, as well as images and other embedded media, which may be handled by third party plugins. Some of the plugins available to be use...

Microsoft TCP IP Selective Acknowledgement Denial of Service (MS10-009; CVE-2010-0242)

TCP/IP SACK is used for connections with large TCP window sizes. When SACK is enabled, if a packet or series of packets is dropped the receiver can inform the sender of exactly which data has been received and where the holes in the data are. The sender can then selectively retransmit the missing...

Internet Explorer OnBeforeUnload JavaScript Address Bar Spoofing (MS07-057; CVE-2007-3826)

Microsoft Internet Explorer IE is a web browser application that is capable of rendering both static and dynamic web content. The application is primarily used for tasks related to web browsing, such as displaying HTML encoded pages, downloading files, etc. An address bar spoofing vulnerability...

Microsoft Works File Converter WPS File Section Header Index Table Stack Overflow (MS08-011; CVE-2008-0105)

Microsoft Works is a home/office productivity software suite. Its core functionality includes a word processor, a spreadsheet, and a database. A Microsoft Works Document, normally denoted by the extension .wps, has numerous properties which define the appearance of the document, as well as some...

Microsoft Excel File Named Graph Record Parsing Stack Overflow (MS07-023; CVE-2007-0215)

Microsoft Excel is a popular spreadsheet application that is usually released as part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formulae, and various data sources. The proprietary file format used for storing Microsoft Excel documents ...

RealNetworks RealPlayer MP3 Files Processing Buffer Overflow (CVE-2007-5080)

RealPlayer and RealOne Player are media player applications developed by RealNetworks, Inc. These applications are capable of playing back numerous multimedia file formats. The application can open media files from local file system or network servers. RealPlayer has an extensible nature that...

RealNetworks Helix Server RTSP SET_PARAMETERS Request Denial of Service (CVE-2009-2533)

Helix Server is a multi media server that is designed to serve streaming and static audio and video content. Helix project, Helix Server being part of it, is intended as a largely free software/open source digital media framework that runs on numerous operating systems and processors including...

Subversion svn Protocol String Parsing (CVE-2004-0413)

Subversion is a revision control system that handles svn protocol requests. A specially crafted svn request could cause svnserve, the daemon that handles svn protocol requests, to allocate insufficient heap memory and overflow the heap. It is possible for a malicious attacker to run arbitrary cod...

Microsoft PowerPoint Viewer TextCharsAtom Record Stack Overflow (MS10-004; CVE-2010-0034)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A remote code execution vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a stack overflow in Microsoft PowerPoint TextCharsAtom record when processing malicious...

Symantec Multiple Products VRTSweb Code Execution (CVE-2009-3027)

Symantec VERITAS Web Server VRTSweb is a shared component shipped with multiple Symantec products. VRTSweb is a Web Restore Server Component which can be used for managing Server SSL certificates, configuring SMTP notifications, managing communication ports, and other tasks. VRTSweb is developed...

Sun Java Web Start Splashscreen PNG Processing Buffer Overflow (CVE-2009-1097)

The Sun Java Web Start is a component of the Java 2 Runtime Environment JRE. It facilitates network deployment of applications developed with the Java programming language. This component enables stand-alone Java applications to be downloaded from a remote network location and run on a target...

Firefox Image File Dragging Malformed Extension (CVE-2005-0230)

The Mozilla web browser and its derivatives, Firefox, Netscape, and K-Meleon are applications designed for tasks related to browsing the web, such as displaying HTML encoded pages and downloading files. The Mozilla web browser allows the user to quickly save images displayed on web pages by...

Internet Explorer COM Object Instantiation Memory Corruption (MS06-021; CVE-2006-1303)

Microsoft Internet Explorer is the most widely used web browser application. The browser is capable of processing HTML, images, scripting languages, and various other popular Internet specifications. The browser is also compatible with Microsoft's Common Object Model COM scheme, whereby...

Microsoft Office Drawing Record msofbtOPT Code Execution (MS07-015; CVE-2007-0671)

Microsoft Office is a popular productivity application suite released by Microsoft Corporation. It includes a word processor, a spreadsheet application, a presentation editor, and a number of other applications and components. There exists a vulnerability in Microsoft Office products. The flaw is...

FreeRADIUS Illegal Attributes Denial of Service (CVE-2004-0938)

The RADIUS protocol is used for the authentication, authorization and accounting of various network services. RADIUS is most often used by operating systems and hardware devices that provide network access to remote users. There is a large number of RADIUS implementations available, both commerci...

MediaWiki Language Option PHP Code Execution (CVE-2005-4031)

MediaWiki is a web-based enterprise collaboration platform developed in the PHP scripting language. The software is a set of CGI programs that are loaded and executed by an HTTP server. It typically runs as a document management system, or a knowledge base. The web content of a MediaWiki...

Sybase EAServer WebConsole Buffer Overflow (CVE-2005-2297)

Sybase EAServer is a web service application server suite. The software provides a web-based management console to allow a remote user using a web browser to perform database administration tasks. The communication between the client and the web-based management console is encapsulated in the HTT...

RealNetworks RealPlayer SMIL File Handling Buffer Overflow (CVE-2005-0455)

The Synchronized Multimedia Integration Language SMIL is a W3C standard based on XML. SMIL is the standard markup language for timing and controlling streaming media clips for media players. A stack buffer overflow vulnerability exists in RealNetworks RealPlayer and RealOne Player. The flaw exist...