Microsoft Excel Column Record Handling Memory Corruption (MS07-002) - Ver2 (CVE-2007-0030)

Microsoft Excel is a popular spreadsheet application that is usually released as part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formulae, and various data sources. The proprietary file format used for storing Microsoft Excel documents ...

Microsoft PowerPoint Techno-color Time Bandit Code Execution - Ver2 (CVE-2011-0655)

A code execution vulnerability has been reported in Microsoft PowerPoint. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Office Image Filter BMP Header Buffer Overflow (MS08-044) - Ver2 (CVE-2008-3020)

BMP is an image file format used to store bitmap digital images. A remote code execution vulnerability was reported in the way Microsoft Office handles BMP files.The vulnerability is due to a memory corruption error when a malformed BMP file is opened by any ofthe affected Microsoft Office...

Microsoft Word UPX Data Stack Validation Buffer Overflow - Ver2 (CVE-2010-3214)

A memory corruption vulnerability has been reported in Microsoft Office Word. The vulnerability is due to an error in Microsoft Word that fails to properly validate UPX structures within specially crafted Word files. Successful exploitation of this vulnerability could allow a remote attacker to...

Microsoft Excel SST Invalid Length Use After Free - Ver2 (CVE-2012-1887)

A use-after-free vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to an error in Microsoft Excel while handling specially crafted Excel files. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected...

Microsoft Excel Biff Record PtgName Entries Code Execution (MS10-080) - Ver2 (CVE-2010-3235)

Microsoft Excel is a popular spreadsheet application. A memory corruption vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly validate formula information upon opening a specially crafted Excel file. A remote...

Microsoft Word Access Violation Code Execution - Ver2 (CVE-2011-1983)

A code execution vulnerability has been reported in Microsoft Office Word. The vulnerability is due to an error in the way Microsoft Word handles objects in memory. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Novell iPrint Client ActiveX GetPrinterURLList2 Memory Corruption - Ver2 (CVE-2011-4185)

A memory corruption vulnerability has been reported in Novell iPrint Client ActiveX control. The vulnerability is due to improper validation of user-supplied string parameters. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected...

Microsoft Excel TXO and OBJ Records Parsing Memory Corruption (MS08-074) - Ver2 (CVE-2009-0100)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the Microsoft Excel. The vulnerability is due to a memory corruption error in Microsoft Excel when loading Excel records. An attacker can exploit this flaw to execute arbitrary code ...

Microsoft Excel SxView Record Parsing Memory Corruption (MS10-038) - Ver2 (CVE-2010-0821)

Microsoft Excel is a spreadsheet application released by the Microsoft Corporation. Its native file format is the Binary Interchange File Format BIFF, which is available is several versions. An Excel file contains information about the various spreadsheets that form an Excel workbook, the data an...

Microsoft Office Excel SerAuxTrend Record Remote Code Execution (MS11-045) - Ver2 (CVE-2011-1274)

This is a remote code execution vulnerability. When Microsoft Excel validates record information upon opening a specially crafted Excel file, a memory handling error may corrupt system memory in such a way that an attacker could execute arbitrary code. Successful exploitation of this vulnerabilit...

Apple Quicktime RTSP URL Buffer Overflow - Ver2 (CVE-2007-0015)

A buffer overflow vulnerability has been reported in Apple QuickTime. The vulnerability is due to lack of boundary checks when processing the "rtsp://" URLs. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause...

Internet Explorer vtable Use After Free Memory Corruption - Ver2 (CVE-2013-0021)

A memory corruption vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrar...

Microsoft Office Excel Index Parsing Pointer Corruption Code Execution - Ver2 (CVE-2009-3132)

A code execution vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitra...

Cisco WebEx UCF atucfobj.dll ActiveX NewObject Buffer Overflow - Ver2 (CVE-2008-3558)

A buffer overflow vulnerability has been reported in Cisco Webex Meeting Manager. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Microsoft Excel SxView Record Memory Pointer Corruption (MS10-038) - Ver2 (CVE-2010-1245)

Microsoft Excel is a popular spreadsheet application. A remote attacker could exploit this issue via a malformed Excel file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system. A memory corruption vulnerability has been identified in Microsoft...

Microsoft Windows Signature Validation Remote Code Execution - Ver2 (CVE-2012-0151)

A code execution vulnerability has been reported in Windows Authenticode Signature Verification function used for portable executable PE files. The vulnerability is due to an error in the way the Authenticode Signature Verification function validates the file digest of a specially crafted PE file...

Altnet Download Manager ActiveX Buffer Overflow - Ver2 (CVE-2007-5217)

A buffer overflow vulnerability has been reported in Altnet Download Manager. An attacker could exploit this vulnerability a long argument to the Install method. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause...

Mozilla Firefox JIT escape Function Memory Corruption - Ver2 (CVE-2009-2477)

Mozilla Firefox is a web browser developed by Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions of HTML, XML, XUL, JavaScript, and various graphic formats, and so on. The browser runs on Windows,...

Microsoft PowerPoint Converter CoCollection Record Handling Error (MS09-017) - Ver2 (CVE-2009-0226)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A remote code execution vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory corruption error in Microsoft PowerPoint when reading sound data from specially craft...

Mozilla Firefox JIT escape Function Memory Corruption - Ver2 (CVE-2009-2477)

Mozilla Firefox is a web browser developed by Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions of HTML, XML, XUL, JavaScript, and various graphic formats, and so on. The browser runs on Windows,...

Trend Micro objRemoveCtrl ActiveX Control Multiple Buffer Overflows - Ver2 (CVE-2008-3364)

Trend Micro OfficeScan is a centralized virus and security scan management system. A buffer overflow vulnerability has been reported in Trend Micro OfficeScan. The vulnerability is due to a boundary error in the OfficeScan ActiveX control objRemoveCtrl. To trigger this issue, an attacker may crea...

Windows Explorer WMF Unspecified Denial of Service - Ver2 (CVE-2007-1090)

A denial-of-service vulnerability has been reported in Microsoft Windows Explorer. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Cisco IOS Server HTTP Interface Cross Site Scripting - Ver2 (CVE-2005-3921)

A cross-site scripting vulnerability has been reported in Cisco Ios. An attacker could exploit this vulnerability an HTTP interface to the contents of memory buffers. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

Macromedia Shockwave SWDIR.SLL ActiveX Denial of Service - Ver2 (CVE-2006-6885)

A denial-of-service vulnerability has been reported in Macromedia Shockwave. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Microsoft Windows ShellExecute and IE7 URL Handling Code Execution (MS07-061) - Ver2 (CVE-2007-3896)

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Windows Internet Explorer 7. The vulnerability occurs when Windows does not correctly handle specially crafted URLs or URIs that are passed to it. There are a...

Internet Explorer Cross Domain Document Switching (MS09-019) - Ver2 (CVE-2007-3091)

Microsoft Internet Explorer is the most widely used Internet browser. An information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to a script that can create a race condition that could break the same-origin policy of Internet Explorer and re...

Microsoft Outlook AttachMethods Remote Code Execution - Ver2 (CVE-2010-0266)

A code execution inclusion vulnerability has been reported in Microsoft Office Outlook. The vulnerability is due to an error in Microsoft Office Outlook that fails to properly verify the file extension of an attachment in a specially crafted e-mail message. Successful exploitation of this...

Macromedia Shockwave swdir.dll ActiveX Control Remote Stack Buffer Overflow - Ver2 (CVE-2007-1403)

A buffer overflow vulnerability has been reported in Macromedia Shockwave. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Microsoft Publisher Out-of-bounds Array Index Code Execution (MS11-091) - Ver2 (CVE-2011-3410)

A remote code execution vulnerability has been reported in Microsoft Publisher. The vulnerability is caused when Microsoft Publisher does not properly handle values in memory while parsing specially crafted Publisher files. A remote attacker may exploit this vulnerability by convincing a user to...

Microsoft Excel External Name Record Memory Corruption (MS10-038) - Ver2 (CVE-2010-1249)

Microsoft Excel is a popular spreadsheet application. A remote attacker could exploit this issue via a malformed Excel file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system. A memory corruption vulnerability has been identified in Microsoft...

Microsoft Excel Un-Documented Publisher Record Memory Corruption (MS10-038) - Ver2 (CVE-2010-1250)

Microsoft Excel is a popular spreadsheet application. A remote attacker could exploit this issue via a malformed Excel file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system. A memory corruption vulnerability has been identified in Microsoft...

Internet Explorer Outlook Express Address Book ActiveX Denial of Service - Ver2 (CVE-2005-4840)

A denial-of-service vulnerability has been reported in Microsoft Outlook Express Book Control. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Microsoft PowerPoint Integer Underflow Heap Corruption Code Execution - Ver2 (CVE-2010-2573)

A code execution vulnerability has been reported in Microsoft Office PowerPoint. The vulnerability is due to an integer underflow in Microsoft PowerPoint that fails to properly parse specially crafted PowerPoint file. Successful exploitation of this vulnerability could allow a remote attacker to...

Microsoft Windows WinHlp Item Buffer Overflow - Ver2 (CVE-2002-0823)

A buffer overflow vulnerability has been reported in Microsoft winhlp32. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Microsoft Excel FNGROUPNAME Record Uninitialized Memory Code Execution - Ver2 (CVE-2010-0262)

A code execution vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitra...

Microsoft Word Smart Tags Code Execution (MS06-027) - Ver2 (CVE-2006-2492)

A code execution vulnerability exists in Microsoft Office Word software. The vulnerability is due to insufficient validation of certain fields related to the Smart Tags in a Word document. An attacker may exploit this vulnerability by enticing a user to open a crafted Word file, which may result ...

Ultra Crypto Component AcquireContext Buffer Overflow - Ver2 (CVE-2007-4903)

A buffer overflow vulnerability has been reported in Ultra Crypto Component. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Microsoft Office Excel Record Type Confusion Code Execution - Ver2 (CVE-2011-1273)

A code execution vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to improper parsing of certain records leading to type confusion while handling specially crafted Excel files. Successful exploitation of this vulnerability could allow a remote attacker to execut...

PointDev IDEAL Migration and Administration Buffer Overflow - Ver2 (CVE-2009-4265)

A buffer overflow vulnerability has been reported in Pointdev Ideal Administration. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Microsoft Office Excel Graphic Object Dereferencing Code Execution - Ver2 (CVE-2011-0977)

A code execution vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly handle dereferencing data structures when parsing a specially crafted Office file that contains graphic objects. Successful exploitatio...

Apple Quicktime RTSP URL Buffer Overflow - Ver2 (CVE-2007-0015)

Apple QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying still image files as well as numerous audio and video formats. It also provides libraries and plugins for other applications, such as browsers, to read QuickTime media...

Microsoft SMB Client Transaction Memory Corruption - Ver2 (CVE-2010-0270)

A memory corruption vulnerability has been reported in Microsoft Windows. The vulnerability is due to an error in the Microsoft SMB client implementation that fails to properly validate fields in the SMB response. Successful exploitation of this vulnerability could allow a remote attacker to...

Nokia PC Suite Video Manager Buffer Overflow - Ver2 (CVE-2012-2442)

A buffer overflow vulnerability has been reported in Nokia Pc Suite. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Microsoft PowerPoint Malformed Record Memory Corruption - Ver2 (CVE-2006-0022)

A memory corruption vulnerability has been reported in Microsoft PowerPoint. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

GIMP XWD File Handling Stack Buffer Overflow - Ver2 (CVE-2012-5576)

A buffer overflow vulnerability has been reported in GNU Image Manipulation Program GIMP. The vulnerability is due to insufficient validation of certain fields while parsing XWD files. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the...

Adobe Acrobat authplay.dll Memory Corruption - Ver2 (CVE-2009-1862)

A memory corruption vulnerability has been reported in Adobe Acrobat, Adobe Acrobat Reader and Adobe Flash Player. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft WordPad Converter sprm Record Parsing Code Execution - Ver2 (CVE-2011-0028)

A code execution vulnerability has been reported in Microsoft WordPad. The vulnerability is due to an error in the WordPad converter that fails to correctly parse the sprmTTextFlow and the sprmTSplit fields in a Word document. Successful exploitation of this vulnerability could allow a remote...

Microsoft Excel SERIES Record Parsing Code Execution (MS12-030) - Ver2 (CVE-2012-1847)

A remote code execution vulnerability has been reported in Microsoft Excel. The vulnerability is due to an error in the way Microsoft Excel handles memory when opening specially crafted Excel files. A remote attacker can exploit this issue by enticing a target user to open a specially crafted Exc...

Microsoft RPCSS DCOM Interface Privilege Escalation - Ver2 (CVE-2003-0605)

A privilege escalation vulnerability has been reported in Microsoft Windows 2000. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...