13538 matches found
Realplayer vidplin.dll AVI Header Parsing Code Execution - Ver2 (CVE-2010-4393)
RealPlayer is a media player developed by RealNetworks Inc. It is capable of playing back numerous formats of multimedia files. AVI Audio Video Interleave is one of the video formats that is supported by RealPlayer. This file format links the audio part and the video part together and can be...
Microsoft Windows Compressed Folder Exploit Download Code Execution - Ver2 (CVE-2004-0575)
A code execution vulnerability has been reported in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Publisher Function Pointer Overwrite (MS11-091) - Ver2 (CVE-2011-1508)
A memory corruption vulnerability has been reported in Microsoft Publisher. The vulnerability is due to the way Microsoft Publisher does not properly handle memory for function pointers while parsing specially crafted Publisher files. A remote attacker may exploit this vulnerability by enticing a...
Microsoft Windows Common Controls OLE Remote Code Execution - Ver2 (CVE-2013-1313)
A code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to an error in the way that OLE Automation parses a specially crafted file. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Internet Explorer Mishandled OBJECT Type Attribute Buffer Overflow - Ver2 (CVE-2003-0344)
A buffer overflow vulnerability has been reported in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Microsoft Windows MSCOMCTL.OCX ActiveX Control Remote Code Execution - Ver2 (CVE-2012-0158)
A code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to insufficient boundary check in the MSCOMCTL ActiveX control. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft WordPad Converter sprm Record Parsing Code Execution - Ver2 (CVE-2011-0028)
A code execution vulnerability has been reported in Microsoft WordPad. The vulnerability is due to an error in the WordPad converter that fails to correctly parse the sprmTTextFlow and the sprmTSplit fields in a Word document. Successful exploitation of this vulnerability could allow a remote...
Nokia PC Suite Video Manager Buffer Overflow - Ver2 (CVE-2012-2442)
A buffer overflow vulnerability has been reported in Nokia Pc Suite. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Mambo Gallery Manager help.mgm.php mosConfig_absolute_path Parameter PHP Code Execution - Ver2 (CVE-2006-3980)
A code execution vulnerability has been reported in Mambo Gallery Manager. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Lenovo Veriface III Plain Image Authentication Bypass - Ver2 (CVE-2009-0655)
An authentication bypass vulnerability has been reported in Lenovo Veriface III. Successful exploitation of this vulnerability could allow a remote attacker to bypass login authentication and gain unauthorized access to the vulnerable system...
Microsoft RPCSS DCOM Interface Privilege Escalation - Ver2 (CVE-2003-0605)
A privilege escalation vulnerability has been reported in Microsoft Windows 2000. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...
Microsoft Excel Record Parsing Code Execution - Ver2 (CVE-2011-3403)
A code execution vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to improper handling of certain records in Microsoft Excel while parsing malformed Excel files. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary cod...
Microsoft Excel Corrupted Table Records Code Execution (MS10-080) - Ver2 (CVE-2010-3232)
Microsoft Excel is a popular spreadsheet application. A remote attacker could exploit this issue via a malformed Excel file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system. A memory corruption vulnerability has been identified in Microsoft...
Microsoft Office Excel Label Record Buffer Overflow (MS11-021) - Ver2 (CVE-2011-0098)
A code execution vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to a flaw in the parsing of Label record in Excel documents, causing a buffer overflow. Remote attackers can exploit this vulnerability by enticing target users to open a malicious Excel file. In ...
Internet Explorer ActiveX Navigate Handling Code Execution (MS08-073) - Ver2 (CVE-2008-4258)
Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in Internet Explorer that fails to properly validate parameters made during a method call in the...
FreeBSD SNMP getBulkRequest bsnmpd Stack Buffer Overflow - Ver2 (CVE-2014-1452)
A buffer overflow vulnerability has been reported in FreeBSD SNMP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
CA BrightStor Tape Engine Buffer Overflow - Ver2 (CVE-2006-6076)
A buffer overflow vulnerability has been reported in Computer Associates BrightStor ARCserve Backup and Ca Brightstor Arcserve Backup Agent. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Winamp Maki File Buffer Overflow - Ver2 (CVE-2009-1831)
A buffer overflow vulnerability has been reported in Nullsoft Winamp. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Microsoft GDI+ Office Excel Art Parsing Memory Corruption (MS09-062) - Ver2 (CVE-2009-2528)
Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been discovered in the way that GDI+ parses Microsoft Office Art in Excel files.The vulnerability is due to an error in the code responsible for parsing Office Art Property Tables that allows an attack...
Microsoft Office Drawing Shape Group Properties Buffer Overflow (MS10-003) - Ver2 (CVE-2010-0243)
Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been reported in the way Microsoft Office handles specially crafted Excel files. The vulnerability is due to a memory corruption error in Microsoft Office when loading malformed Excel records. A remote...
Microsoft Office Excel Scenario Record Buffer Overflow (MS11-045) - Ver2 (CVE-2011-1275)
Microsoft Excel is a popular spreadsheet application. This is a remote code execution vulnerability. When Microsoft Excel validates record information upon opening a specially crafted Excel file, a memory handling error may corrupt system memory in such a way that an attacker could execute...
Microsoft PowerPoint Malformed Record Memory Corruption - Ver2 (CVE-2006-0022)
A memory corruption vulnerability has been reported in Microsoft PowerPoint. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Office FORMAT Record Code Execution - Ver2 (CVE-2008-3005)
A code execution vulnerability has been reported in Microsoft Office. An attacker could exploit this vulnerability an Excel file with a crafted array index for a FORMAT record. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected...
Apache Tomcat Parameter Hash Collision Denial of Service - Ver2 (CVE-2011-4858)
A denial-of-service vulnerability has been reported in Apache Software Foundation Tomcat. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Microsoft Excel REPT Function Integer Overflow (MS08-057) - Ver2 (CVE-2008-4019)
Microsoft Excel is a popular spreadsheet application that is usually released as part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formula, and various data sources. The common extension used for Microsoft Excel documents is .xls, .xlsx a...
Microsoft Office Publisher pubconv.dll Size Value Heap Corruption (MS10-103) - Ver2 (CVE-2010-2569)
Microsoft Publisher is a desktop publishing application for creating marketing materials, managing customer lists and more. The vulnerability is due to an error in pubconv.dll, Publisher Converter DLL that is used to open Publisher files created in versions earlier than Microsoft Publisher 2007. ...
Microsoft Excel RealTimeData Record Stack Buffer Overflow - Ver2 (CVE-2010-1246)
A buffer overflow vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. Successful exploitation of this vulnerability could allow a remote attacker to execute...
UTorrent announce Buffer Overflow - Ver2 (CVE-2007-0927)
A buffer overflow vulnerability has been reported in Utorrent. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Zavio IP Camera Firmware 1.6.03 User Code Execution - Ver2 (CVE-2013-2568)
A code execution vulnerability has been reported in Zavio IP Camera Firmware. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system and gain the credentials of registered users...
Microsoft Excel SERIES Record Parsing Code Execution (MS12-030) - Ver2 (CVE-2012-1847)
A remote code execution vulnerability has been reported in Microsoft Excel. The vulnerability is due to an error in the way Microsoft Excel handles memory when opening specially crafted Excel files. A remote attacker can exploit this issue by enticing a target user to open a specially crafted Exc...
Apple Quicktime for Windows QTPlugin.ocx ActiveX Control Set Buffer Overflow - Ver2 (CVE-2008-0778)
A buffer overflow vulnerability has been reported in Apple Quicktime. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Microsoft Office PICT Filter Map Structure Memory Corruption - Ver2 (CVE-2008-3021)
A memory corruption vulnerability has been reported in Microsoft Office. The vulnerability is due to a memory corruption error when a malformed PICT file is opened by any of the affected Microsoft Office applications. Successful exploitation of this vulnerability could allow a remote attacker to...
Microsoft Excel WOpt Record Memory Corruption - Ver2 (CVE-2010-0824)
A memory corruption inclusion vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. Successful exploitation of this vulnerability could allow a remote attacker to...
Microsoft Excel Merge Cell Record Pointer Code Execution (MS10-080) - Ver2 (CVE-2010-3237)
Microsoft Excel is a popular spreadsheet application. A remote attacker could exploit this issue via a malformed Excel file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system. A memory corruption vulnerability has been identified in Microsoft...
SMF Forum smf.php mosConfig_absolute_path Parameter PHP Code Execution - Ver2 (CVE-2006-3773)
A code execution vulnerability has been reported in Mambo Smf-forum. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Excel Malformed File Memory Corruption - Ver2 (CVE-2012-1886)
A memory corruption vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to an error in Microsoft Excel while handling specially crafted Excel files. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affecte...
Samba Trans2 Open2 Buffer Overflow - Ver2 (CVE-2003-0201)
A buffer overflow vulnerability has been reported in Samba. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Microsoft Word TextBox Sub-document Memory Corruption - Ver2 (CVE-2007-1910)
A memory corruption vulnerability has been reported in Microsoft Office Word. The vulnerability is due to improper validation of a supplied value inside the Main Stream. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft SharePoint Callback Function Elevation of Privilege (MS13-024) - Ver2 (CVE-2013-0080)
An information disclosure and elevation of privilege vulnerability has been reported in Microsoft SharePoint. The vulnerability is due to an error in the way Microsoft SharePoint handles specially crafted URLs containing malicious JavaScript elements. A remote attacker may exploit this issue by...
Adobe Acrobat authplay.dll Memory Corruption - Ver2 (CVE-2009-1862)
A memory corruption vulnerability has been reported in Adobe Acrobat, Adobe Acrobat Reader and Adobe Flash Player. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft GDI EMF Image Processing Integer Overflow - Ver2 (CVE-2011-0041)
A integer overflow vulnerability has been reported in Microsoft GDI+. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Digium Asterisk File Descriptor Denial of Service (CVE-2014-2287)
A denial of service vulnerability has been reported in Digium Asterisk. The vulnerability is due to file descriptor exhaustion from a large number of crafted SIP INVITE requests. A remote attacker can exploit this vulnerability to cause a denial of service condition...
Adobe Flash Player Cross-Site Scripting (APSB14-09: CVE-2014-0509)
A cross-site scripting vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in the way the browser and the plug-in handle specially crafted URLs. A remote attacker can exploit this vulnerability by enticing an affected user to open a malicious web-page...
Microsoft Internet Explorer CSS Table Handling Memory Corruption (MS10-090; CVE-2010-3962)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
Symantec LiveUpdate Administrator Security Bypass (CVE-2014-1644)
A security policy bypass vulnerability exists in Symantec LiveUpdate Administrator. The vulnerability is due to a failure to validate temporary passwords when processing a user account password reset. A remote unauthenticated attacker could exploit this vulnerability by sending a malicious reques...
Digium Asterisk Cookie Stack Overflow (CVE-2014-2286)
A stack-overflow vulnerability has been reported in Digium Asterisk. The vulnerability is due to insufficient validation of Cookie: headers in HTTP requests sent to the HTTP management interface. A remote attacker can exploit this vulnerability to cause a denial-of-service condition...
OpenSSL TLS DTLS Overly-long Heartbeat Response Information Disclosure
An information disclosure vulnerability exists in OpenSSL. The vulnerability is due to an error when handling TLS/DTLS heartbeat packets. An attacker can leverage this vulnerability to disclose memory contents of a connected client or server...
TLS and DTLS Heartbeat Extension
The Heartbeat Extension allows keep-alive functionality for TLS/DTLS protocols. Heartbeat consists of two message types, HeartbeatRequest and HeartbeatResponse...
IBM Lotus Domino LDAP Server Memory Exception (CVE-2006-0580; CVE-2006-4510)
A denial of service vulnerability exists in the IBM Lotus Domino LDAP Server component. The flaw is caused by improper validation of the user supplied data in an LDAP bind request. An attacker can exploit this vulnerability to terminate the target server which causes a denial of service condition...
McAfee Asset Manager downloadReport Information Disclosure (CVE-2014-2588)
An information disclosure vulnerability has been reported in McAfee Asset Manager. The vulnerability is due to insufficient input validation. A remote authenticated attacker can exploit this vulnerability to download arbitrary files from the server...