Microsoft Excel Substream Parsing Integer Overflow (MS11-021; CVE-2011-0097)

A use-after-free vulnerability has been reported in Microsoft Excel...

Novell Netware XNFS.NLM Heap Buffer Overflow (CVE-2011-4191)

A heap buffer overflow vulnerability has been reported in Novell Netware...

Microsoft Publisher Function Pointer Overwrite (MS11-091; CVE-2011-1508)

A memory corruption vulnerability has been reported in Microsoft Publisher. The vulnerability is due to the way Microsoft Publisher does not properly handle memory for function pointers while parsing specially crafted Publisher files. A remote attacker may exploit this vulnerability by enticing a...

Microsoft .NET Heap Corruption Code Execution (MS12-016; CVE-2012-0015)

A remote code execution vulnerability has been reported in the Microsoft .NET Framework. The vulnerability is due to improper calculation of buffer length while processing specially crafted input. A remote attacker may exploit this issue by enticing a target user to open a specially crafted web...

Oracle Warehouse Builder WB_RT_AUDIT_SHADOW_TABLE Multiple SQL Injections (CVE-2011-0799)

Multiple SQL injection vulnerabilities have been reported in Oracle Warehouse Builder OWB, a component of Oracle Database...

Microsoft AntiXSS Library Bypass Information Disclosure (MS12-007; CVE-2012-0007)

An information disclosure vulnerability has been reported in the Microsoft Anti-Cross Site Scripting AntiXSS Library...

Microsoft OLE Property Code Execution (MS11-093; CVE-2011-3400)

A remote code execution vulnerability has been reported in Microsoft Object Linking and Embedding OLE. The vulnerability is due to improper handling of OLE objects in memory. A remote attacker could exploit this vulnerability by enticing a user to open a file containing a specially crafted OLE...

Microsoft Windows TCP/IP Stack Reference Counter Overflow (MS11-083; CVE-2011-2013)

A remote code execution vulnerability has been reported in Microsoft Windows TCP/IP stack...

Java Signed Applet (CVE-2008-5353; CVE-2010-0094; CVE-2010-0840)

Java Technology is a programming platform which aims to provide a system for developing and deploying cross-platform applications. It is distributed in the form of various tools such as Java Runtime Environment JRE and Java Development Kit JDK. Multiple Vulnerabilities in JRE can be exploited by...

Internet Explorer OnLoad Event Memory Corruption (MS11-081; CVE-2011-1997)

A memory corruption vulnerability has been reported in Internet Explorer. The vulnerability is due to an error in the way IE accesses objects that have been deleted. A remote attacker may exploit this vulnerability by enticing a user to open a malicious web-page. Successful exploitation may cause...

Oracle Secure Backup Administration Server validate_login Command Injection (CVE-2011-2261)

A command injection vulnerability has been reported in Oracle secure backup administration server. The vulnerability is due to insufficient user data filtering. A remote attacker may exploit this vulnerability by sending a specially crafted HTTP request to a target user. Successful exploitation...

Microsoft Share Point Query/View Cross-Site Scripting (MS11-074)

Multiple cross-site scripting vulnerabilities have been reported in Microsoft SharePoint Server. A remote attacker could exploit these vulnerabilities to execute a cross-site scripting attack that could allow him to issue commands in an affected SharePoint server...

Cisco Unified Communications Manager Multiple SQL Injections (CVE-2011-1610)

Multiple SQL injection vulnerabilities have been reported in Cisco Unified Communications Manager. A remote attacker can exploit these vulnerabilities by sending a malicious request to the target web service and injecting an SQL query into a parameter. Successful exploitation of this vulnerabilit...

Internet Explorer Malformed IFRAME Buffer Overflow (MS04-040; CVE-2004-1050)

Internet Explorer IE is a popular web browser developed by Microsoft corporation. A buffer overflow vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is in the way Microsoft Internet Explorer parses certain parameters of an IFRAME tag. An attacker can exploit this...

Microsoft OpenType CFF Driver Font Data Stack Overflow (MS11-032; CVE-2011-0034)

OpenType is a font format developed jointly by Microsoft and Adobe as an extension of Apple's TrueType font format. An OpenType font file contains data, in table format, that comprises either a TrueType or a PostScript outline font. A remote code execution vulnerability has been reported in the w...

Microsoft Windows Kernel CsDdeInitialize Code Execution (MS11-034; CVE-2011-1242)

The Windows kernel is the core of the operating system. It provides system-level services such as device management and memory management, allocates processor time to processes, and manages error handling. An elevation of privilege vulnerability has been reported in the Windows kernel. The...

Oracle GoldenGate Veridata Server XML SOAP Request Buffer Overflow (CVE-2010-4416)

Oracle GoldenGate Veridata is a high-speed, low-impact data comparison solution that identifies and reports on data discrepancies between databases without interrupting ongoing business processes. The application provides details on tables, rows, and columns that are persistently out of sync,...

Update Protection against Multiple Vendors librpc.dll Stack Buffer Overflow

A buffer overflow vulnerability exists in IBM's Informix Dynamic Server and EMC's Legato Networker. The vulnerability is due to insufficient validation of user input during authentication by the RPC protocol parsing library, librpc.dll, used by the Portmapper service portmap.exe. Successful...

HP OpenView NNM nnmRptConfig.exe Template Format String Code Execution (CVE-2011-0270)

The Network Node Manager NNM is an HP OpenView product which manages networks. It determines and displays physical and logical connectivity in networks, as well as information referring to protocols running over the network. A format string vulnerability has been reported in HP OpenView Network...

Internet Explorer onCellChange Event Memory Corruption (MS11-003; CVE-2011-0035)

A memory corruption vulnerability has been reported in Microsoft Internet Explorer The vulnerability is due to the way Internet Explorer accesses an object that has not been correctly initialized or has been deleted when parsing specially crafted Web content. To trigger this issue, an attacker ma...

Microsoft Kerberos Implementation Spoofing Elevation of Privilege (MS11-013; CVE-2011-0091)

A spoofing vulnerability has been reported in implementations of Kerberos on Windows 7 and Windows Server 2008 R2. Kerberos is a protocol used to mutually authenticate users and services on an open and unsecured network. It allows services to correctly identify the user of a Kerberos ticket witho...

Apple QuickTime FPX Subimage Remote Code Execution (CVE-2010-3801)

Apple QuickTime is a media player application that is capable of playing back numerous multimedia file formats from local file system or network servers. A memory corruption vulnerability has been reported in Apple QuickTime. A remote attacker could exploit this issue via a malformed FPX file...

CA Multiple Products Alert Notification Server Buffer Overflow (CVE-2007-4620)

Computer Associates, or CA, develop and sell various software to enterprise users. Some CA products, such as Threat Manager, Protection Suites, and BrightStor ARCserve Backup, share a set of common components. One of these common component is Alert Notification Server. This component runs as a...

Adobe Shockwave Director rcsL Chunk Remote Code Execution (APSA10-04; CVE-2010-3653)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A memory corruption vulnerability has been identified in Adobe Shockwave Player. An attacker can exploit th...

Internet Explorer Event Handling Memory Corruption (MS10-071; CVE-2010-3326)

Multiple memory corruption vulnerabilities have been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been initialized or has been deleted. To trigger this issue, an attacker may create a malicious web page that will...

Adobe Shockwave Player MMAP Index Memory Corruption (APSB10-20; CVE-2010-2880)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A memory corruption vulnerability has been identified in Adobe Shockwave Player. The vulnerability is due t...

IBM Lotus Notes DOC Attachment Viewer Buffer Overflow (CVE-2007-5544)

Lotus Notes is a client-server collaborative software and email system provided by IBM. The Lotus Notes email client application is capable of communicating with email servers over a range of protocols, such as: SMTP, POP, and IMAP. A stack buffer overflow vulnerability exists in the way IBM Lotu...

Apple Safari for Windows and Internet Explorer Combined Code Execution (CVE-2008-2540)

Microsoft Internet Explorer is the most widely used Internet browser. Safari is a web browsing application developed by Apple. A combination of the default download location in Safari and how the Windows desktop handles executables creates a blended threat in which files may be downloaded to a...

Preemptive Protection against Adobe ColdFusion Multiple Cross-Site Scripting Vulnerabilities (APSB10-11)

Multiple cross-site scripting XSS vulnerabilities have been discovered in Adobe ColdFusion server. Adobe ColdFusion is an application server for developing dynamically generated Web sites. Cross-site scripting occurs when a Web-based application fails to validate user input before returning it to...

Microsoft Excel Column Record Handling Memory Corruption (MS07-002; CVE-2007-0030)

Microsoft Excel is a popular spreadsheet application that is usually released as part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formulae, and various data sources. The proprietary file format used for storing Microsoft Excel documents ...

Microsoft Office Visio Legacy Files (CVE-2010-0254; CVE-2010-0256)

Microsoft Visio is a diagram creation software for Microsoft Windows. Multiple remote code execution vulnerabilities have been identified in Microsoft Visio. A remote attacker could trigger these flaws by convincing a victim to open a specially crafted Visio file in legacy format. Successful...

Microsoft Windows Vista Windows Mail File Execution (MS07-034; CVE-2007-1658)

Microsoft Windows Mail product is an implementation of an email and newsgroup client capable of handling most standard Internet protocols as well as numerous proprietary Microsoft protocols and formats. It is the successor to Outlook Express and is included in recent versions of Microsoft Windows...

Gallery Search Engine Cross-Site Scripting (CVE-2003-0614)

A Cross Site scripting XSS security breach is exploited by an attacker inserting specially crafted code to unfiltered input fields in web applications. Sourceforge's "Gallery" is prone to a cross site scripting vulnerability in the "serch.php" script. Depending on the script executed, the victim'...

Microsoft Excel XLSX File Parsing Code Execution (MS10-017; CVE-2010-0263)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this...

Apple QuickTime crgn Atom Parsing Memory Corruption (CVE-2008-1017)

Apple's QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous audio/video formats. There exists a memory corruption vulnerability in Apple QuickTime application. The vulnerability is due to...

Microsoft IIS Server Crafted ASP Page Buffer Overflow (MS06-034; CVE-2006-0026)

Microsoft Internet Information Services IIS is a multi-featured server product that ships with all versions of Microsoft Windows 2000, XP and Server 2003. The product provides FTP, SMTP, NNTP and HTTP services. The HTTP component, known as the WWW Publishing Service, allows for the serving of...

Subversion svn Protocol String Parsing (CVE-2004-0413)

Subversion is a revision control system that handles svn protocol requests. A specially crafted svn request could cause svnserve, the daemon that handles svn protocol requests, to allocate insufficient heap memory and overflow the heap. It is possible for a malicious attacker to run arbitrary cod...

BlackBerry Application Web Loader ActiveX Control Buffer Overflow (CVE-2009-0305)

The BlackBerry Application Web Loader allows to download the BlackBerry applications from a web server using a browser supporting ActiveX controls onto a handheld device. It makes deployment of new applications and updates easier for developers. A user can load the application to their BlackBerry...

Qualcomm WorldMail IMAP Server Directory Traversal (CVE-2005-3189)

The Qualcomm WorldMail product is an email and messaging server. The product is designed for small to large enterprise environments. WorldMail provides, amongst other services, an IMAP server which allows email retrieval. There exists a directory traversal vulnerability in Qualcomm WorldMail IMAP...

Internet Explorer COM Object Instantiation Memory Corruption (MS06-021; CVE-2006-1303)

Microsoft Internet Explorer is the most widely used web browser application. The browser is capable of processing HTML, images, scripting languages, and various other popular Internet specifications. The browser is also compatible with Microsoft's Common Object Model COM scheme, whereby...

Preemptive Protection against HP OpenView Network Node Manager webappmon.exe CGI Host Header Buffer Overflow

A buffer overflow vulnerability exists in the HP OpenView Network Node Manager NNM CGI program webappmon.exe. The vulnerability is due to a boundary error when processing the Host header from HTTP requests. A remote unauthenticated attacker can exploit this vulnerability by sending a crafted HTTP...

Microsoft Office Malformed GIF File Processing Code Execution (MS06-039; CVE-2006-0007)

The Microsoft Office is a popular application suite that consists of several independent applications such as Microsoft Word, Microsoft Excel, Microsoft PowerPoint, and others. The suite ships with a set of image processing helper libraries known as graphics filters. The graphics filters are used...

CA BrightStor ARCserve Backup Media Server SUN-RPC Service Buffer Overflow (CVE-2007-2139)

Computer Associates BrightStor ARCserve Backup products offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distributed operations including Backup and Restore, Data Migration, and Threat Management. There exists a...

RealNetworks RealPlayer SMIL File Handling Buffer Overflow (CVE-2005-0455)

The Synchronized Multimedia Integration Language SMIL is a W3C standard based on XML. SMIL is the standard markup language for timing and controlling streaming media clips for media players. A stack buffer overflow vulnerability exists in RealNetworks RealPlayer and RealOne Player. The flaw exist...

Symantec VERITAS NetBackup vnetd Buffer Overflow (CVE-2006-0991)

The Symantec VERITAS NetBackup server product suite is an enterprise backup system solution available for various platforms. It is capable of performing scheduled automatic backups as well as manual backups invoked by a client. A minimal backup environment consists of backup agents and a master...

Oracle Database Server DBMS_METADATA Package SQL Injection (CVE-2005-1197)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, i.e. procedures, functions, variables, constants, cursors, and exceptions, are provided to the database user i...

Microsoft SMB Endless Loop Denial of Service (CVE-2009-3676)

The SMB Protocol is a network file sharing protocol. A denial of service vulnerability has been reported in the way that Microsoft Server Message Block SMB protocol software handles specially crafted SMB packets. The vulnerability is due to an error in the Microsoft Server Message Block SMB...

Oracle Database dbms_assert Filter Bypass (CVE-2006-5340)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, i.e. procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...

Apache Tomcat URIencoding Directory Traversal (CVE-2007-0450; CVE-2008-2938)

Apache Tomcat is an implementation of the Java Servlet and JavaServer pages technologies. The software provides the servlet container used in development and deployment of Java based web applications. Users access Tomcat applications using web browsers that communicate to the server via the HTTP...

Symantec Discovery XFERWAN Service Buffer Overflow (CVE-2007-1173)

Symantec Discovery is a network asset management and configuration suite. This product is deployed in enterprise network to collect information about network computers and devices for management purpose. The product employs numerous communication protocols to access network nodes. One of the...