13538 matches found
Microsoft Excel SxView Record Parsing Memory Corruption (MS10-038) - Ver2 (CVE-2010-0821)
Microsoft Excel is a spreadsheet application released by the Microsoft Corporation. Its native file format is the Binary Interchange File Format BIFF, which is available is several versions. An Excel file contains information about the various spreadsheets that form an Excel workbook, the data an...
Microsoft Windows 2000 Troubleshooter ActiveX Control Buffer Overflow - Ver2 (CVE-2003-0662)
A buffer overflow vulnerability has been reported in Microsoft Windows 2000. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Microsoft PowerPoint Techno-color Time Bandit Code Execution - Ver2 (CVE-2011-0655)
A code execution vulnerability has been reported in Microsoft PowerPoint. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft IIS nsiilog.dll ISAPI Overflow Buffer Overflow - Ver2 (CVE-2003-0349)
A buffer overflow vulnerability has been reported in Microsoft IIS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
ProShow Gold file based Buffer Overflow - Ver2 (CVE-2009-3214)
A buffer overflow vulnerability has been reported in Photodex Proshow Gold. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Internet Explorer HTML Object use after free Memory Corruption (MS10-090) - Ver2 (CVE-2010-3340)
Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been initialized or has been deleted. To trigger this...
BakBone NetVault Remote Heap Overflow - Ver2 (CVE-2005-1547)
A buffer overflow vulnerability has been reported in Bakbone Netvault. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Microsoft Windows Assembly Execution File Inclusion - Ver2 (CVE-2012-0013)
A file inclusion vulnerability has been reported in Microsoft Office. The vulnerability is due to ClickOnce application file types not being included in the Windows Packager unsafe file type list. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary cod...
IBiz EBanking Integrator WriteOFXDataFile Method Arbitrary File Overwrite - Ver2 (CVE-2008-1725)
A file overwrite vulnerability has been reported in Nsoftware Ibiz E-banking Integrator. An attacker could exploit this vulnerability via a full pathname in the argument. Successful exploitation of this vulnerability would allow a remote attacker to overwrite arbitrary files on the vulnerable...
Oracle Java java.awt.image.ByteComponentRaster Memory Corruption - Ver2 (CVE-2013-2473)
A memory corruption vulnerability has been reported in Oracle Java Runtime. The vulnerability is due to a memory corruption error in the ByteComponentRaster class from jre/bin/awt. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affecte...
PhpBB viewtopic.php URL Decoding Code Execution - Ver2 (CVE-2004-1315)
A code execution vulnerability has been reported in phpBB. The vulnerability is due to lack of input validation on the highlight parameter supplied to viewtopic. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause...
Microsoft Office Excel SerAuxTrend Record Remote Code Execution (MS11-045) - Ver2 (CVE-2011-1274)
This is a remote code execution vulnerability. When Microsoft Excel validates record information upon opening a specially crafted Excel file, a memory handling error may corrupt system memory in such a way that an attacker could execute arbitrary code. Successful exploitation of this vulnerabilit...
Windows Explorer WMF Unspecified Denial of Service - Ver2 (CVE-2007-1090)
A denial-of-service vulnerability has been reported in Microsoft Windows Explorer. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Internet Explorer vtable Use After Free Memory Corruption - Ver2 (CVE-2013-0021)
A memory corruption vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrar...
Mozilla Firefox JIT escape Function Memory Corruption - Ver2 (CVE-2009-2477)
Mozilla Firefox is a web browser developed by Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions of HTML, XML, XUL, JavaScript, and various graphic formats, and so on. The browser runs on Windows,...
Cisco IOS Server HTTP Interface Cross Site Scripting - Ver2 (CVE-2005-3921)
A cross-site scripting vulnerability has been reported in Cisco Ios. An attacker could exploit this vulnerability an HTTP interface to the contents of memory buffers. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
Microsoft Office Excel Graphic Object Dereferencing Code Execution - Ver2 (CVE-2011-0977)
A code execution vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly handle dereferencing data structures when parsing a specially crafted Office file that contains graphic objects. Successful exploitatio...
Apple Quicktime RTSP URL Buffer Overflow - Ver2 (CVE-2007-0015)
Apple QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying still image files as well as numerous audio and video formats. It also provides libraries and plugins for other applications, such as browsers, to read QuickTime media...
Microsoft Office Excel Record Type Confusion Code Execution - Ver2 (CVE-2011-1273)
A code execution vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to improper parsing of certain records leading to type confusion while handling specially crafted Excel files. Successful exploitation of this vulnerability could allow a remote attacker to execut...
Internet Explorer Cross Domain Document Switching (MS09-019) - Ver2 (CVE-2007-3091)
Microsoft Internet Explorer is the most widely used Internet browser. An information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to a script that can create a race condition that could break the same-origin policy of Internet Explorer and re...
Ultra Crypto Component AcquireContext Buffer Overflow - Ver2 (CVE-2007-4903)
A buffer overflow vulnerability has been reported in Ultra Crypto Component. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Microsoft Excel SxView Record Memory Pointer Corruption (MS10-038) - Ver2 (CVE-2010-1245)
Microsoft Excel is a popular spreadsheet application. A remote attacker could exploit this issue via a malformed Excel file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system. A memory corruption vulnerability has been identified in Microsoft...
Microsoft Excel Un-Documented Publisher Record Memory Corruption (MS10-038) - Ver2 (CVE-2010-1250)
Microsoft Excel is a popular spreadsheet application. A remote attacker could exploit this issue via a malformed Excel file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system. A memory corruption vulnerability has been identified in Microsoft...
Microsoft Outlook AttachMethods Remote Code Execution - Ver2 (CVE-2010-0266)
A code execution inclusion vulnerability has been reported in Microsoft Office Outlook. The vulnerability is due to an error in Microsoft Office Outlook that fails to properly verify the file extension of an attachment in a specially crafted e-mail message. Successful exploitation of this...
Altnet Download Manager ActiveX Buffer Overflow - Ver2 (CVE-2007-5217)
A buffer overflow vulnerability has been reported in Altnet Download Manager. An attacker could exploit this vulnerability a long argument to the Install method. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause...
Microsoft Excel FNGROUPNAME Record Uninitialized Memory Code Execution - Ver2 (CVE-2010-0262)
A code execution vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitra...
PointDev IDEAL Migration and Administration Buffer Overflow - Ver2 (CVE-2009-4265)
A buffer overflow vulnerability has been reported in Pointdev Ideal Administration. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Microsoft PowerPoint Integer Underflow Heap Corruption Code Execution - Ver2 (CVE-2010-2573)
A code execution vulnerability has been reported in Microsoft Office PowerPoint. The vulnerability is due to an integer underflow in Microsoft PowerPoint that fails to properly parse specially crafted PowerPoint file. Successful exploitation of this vulnerability could allow a remote attacker to...
Microsoft Word Smart Tags Code Execution (MS06-027) - Ver2 (CVE-2006-2492)
A code execution vulnerability exists in Microsoft Office Word software. The vulnerability is due to insufficient validation of certain fields related to the Smart Tags in a Word document. An attacker may exploit this vulnerability by enticing a user to open a crafted Word file, which may result ...
Microsoft Office Excel Index Parsing Pointer Corruption Code Execution - Ver2 (CVE-2009-3132)
A code execution vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitra...
Microsoft Excel External Name Record Memory Corruption (MS10-038) - Ver2 (CVE-2010-1249)
Microsoft Excel is a popular spreadsheet application. A remote attacker could exploit this issue via a malformed Excel file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system. A memory corruption vulnerability has been identified in Microsoft...
Microsoft Windows WinHlp Item Buffer Overflow - Ver2 (CVE-2002-0823)
A buffer overflow vulnerability has been reported in Microsoft winhlp32. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Microsoft PowerPoint Converter CoCollection Record Handling Error (MS09-017) - Ver2 (CVE-2009-0226)
Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A remote code execution vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory corruption error in Microsoft PowerPoint when reading sound data from specially craft...
Internet Explorer Outlook Express Address Book ActiveX Denial of Service - Ver2 (CVE-2005-4840)
A denial-of-service vulnerability has been reported in Microsoft Outlook Express Book Control. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Macromedia Shockwave swdir.dll ActiveX Control Remote Stack Buffer Overflow - Ver2 (CVE-2007-1403)
A buffer overflow vulnerability has been reported in Macromedia Shockwave. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Cisco WebEx UCF atucfobj.dll ActiveX NewObject Buffer Overflow - Ver2 (CVE-2008-3558)
A buffer overflow vulnerability has been reported in Cisco Webex Meeting Manager. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Mozilla Firefox JIT escape Function Memory Corruption - Ver2 (CVE-2009-2477)
Mozilla Firefox is a web browser developed by Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions of HTML, XML, XUL, JavaScript, and various graphic formats, and so on. The browser runs on Windows,...
Microsoft Windows ShellExecute and IE7 URL Handling Code Execution (MS07-061) - Ver2 (CVE-2007-3896)
Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Windows Internet Explorer 7. The vulnerability occurs when Windows does not correctly handle specially crafted URLs or URIs that are passed to it. There are a...
Microsoft SMB Client Transaction Memory Corruption - Ver2 (CVE-2010-0270)
A memory corruption vulnerability has been reported in Microsoft Windows. The vulnerability is due to an error in the Microsoft SMB client implementation that fails to properly validate fields in the SMB response. Successful exploitation of this vulnerability could allow a remote attacker to...
Microsoft Windows Signature Validation Remote Code Execution - Ver2 (CVE-2012-0151)
A code execution vulnerability has been reported in Windows Authenticode Signature Verification function used for portable executable PE files. The vulnerability is due to an error in the way the Authenticode Signature Verification function validates the file digest of a specially crafted PE file...
Macromedia Shockwave SWDIR.SLL ActiveX Denial of Service - Ver2 (CVE-2006-6885)
A denial-of-service vulnerability has been reported in Macromedia Shockwave. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Microsoft Publisher Out-of-bounds Array Index Code Execution (MS11-091) - Ver2 (CVE-2011-3410)
A remote code execution vulnerability has been reported in Microsoft Publisher. The vulnerability is caused when Microsoft Publisher does not properly handle values in memory while parsing specially crafted Publisher files. A remote attacker may exploit this vulnerability by convincing a user to...
Trend Micro objRemoveCtrl ActiveX Control Multiple Buffer Overflows - Ver2 (CVE-2008-3364)
Trend Micro OfficeScan is a centralized virus and security scan management system. A buffer overflow vulnerability has been reported in Trend Micro OfficeScan. The vulnerability is due to a boundary error in the OfficeScan ActiveX control objRemoveCtrl. To trigger this issue, an attacker may crea...
Microsoft PowerPoint Converter GuideAtom Record Handling Error (MS09-017) - Ver2 (CVE-2009-0225)
Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A memory corruption vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory corruption error in Microsoft PowerPoint when reading sound data from specially crafted...
Microsoft Visio DXF File Parsing Code Execution - Ver2 (CVE-2012-1888)
A code execution vulnerability has been reported in Microsoft Office Visio. The vulnerability is due to a boundary error in Microsoft Office Visio when parsing specially crafted DXF files. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the...
Google Android Vold Volume Manager Integer Wrap Root Exploit Privilege Escalation - Ver2 (CVE-2011-1823)
A privilege escalation vulnerability has been reported in Google Android Operating System. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...
Realplayer vidplin.dll AVI Header Parsing Code Execution - Ver2 (CVE-2010-4393)
RealPlayer is a media player developed by RealNetworks Inc. It is capable of playing back numerous formats of multimedia files. AVI Audio Video Interleave is one of the video formats that is supported by RealPlayer. This file format links the audio part and the video part together and can be...
Microsoft Word TextBox Sub-document Memory Corruption - Ver2 (CVE-2007-1910)
Microsoft Word is a document authoring product released by the Microsoft Corporation. A memory corruption vulnerability has been reported in Microsoft Word. The vulnerability is due to improper validation of a supplied value inside the Main Stream. A remote attacker could exploit this vulnerabili...
GIMP XWD File Handling Stack Buffer Overflow - Ver2 (CVE-2012-5576)
A buffer overflow vulnerability has been reported in GNU Image Manipulation Program GIMP. The vulnerability is due to insufficient validation of certain fields while parsing XWD files. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the...
Internet Explorer TSUserEX.DLL ActiveX Code Execution - Ver2 (CVE-2006-4219)
A code execution vulnerability has been reported in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...