Microsoft XML Core Services DTD Cross-Domain Scripting (MS08-069) - Ver2 (CVE-2008-4029)

MSXML is an application for processing Extensible Stylesheet Language Transformation in an XML file that allows programmers to create high-performance XML-based applications. An information disclosure vulnerability has been reported in Microsoft XML Core Services MSXML. The vulnerability is due t...

Microsoft PowerPoint Viewer TextCharsAtom Record Stack Buffer Overflow - Ver2 (CVE-2010-0034)

A buffer overflow vulnerability has been reported in Microsoft Office PowerPoint. The vulnerability is due to a stack overflow in Microsoft PowerPoint TextCharsAtom record when processing malicious PowerPoint documents. A remote attacker could exploit this vulnerability by convincing a victim to...

Mozilla Firefox Javascript Deleted Frame Reference Code Execution - Ver2 (CVE-2006-3801)

A code execution vulnerability has been reported in Mozilla Firefox. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Office Text Converter Integer Underflow Code Execution - Ver2 (CVE-2009-0087)

A code execution vulnerability has been reported in Microsoft Office Word. The vulnerability is due to a memory corruption error when WordPad and Office Text Converters parse a specially crafted file that includes malformed data. A remote attacker could exploit this vulnerability by convincing a...

VLC Ogg Vorbis Comment Header Format String Denail of Service - Ver2 (CVE-2007-3316)

A denial-of-service vulnerability has been reported in Videolan Vlc Media Player. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Cisco IOS HTTP Authentication Bypass - Ver2 (CVE-2001-0537)

An authentication bypass vulnerability has been reported in Cisco IOS. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...

Adobe Reader JavaScript spell.customDictionaryOpen Method Memory Corruption - Ver2 (CVE-2009-1493)

Adobe develops products for creating, distributing, and viewing Portable Document Format PDF documents. Adobe Reader is a viewer application that allows for reading and the printing of PDF documents. Adobe Acrobat provides PDF authoring functionality in addition to those of viewing. A buffer...

Microsoft Excel Embedded Object Validation Integer Overflow - Ver2 (CVE-2008-3477)

An integer overflow vulnerability has been reported inMicrosoft Office Excel. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Office Smart Tag WordCount Memory Corruption - Ver2 (CVE-2008-2244)

A memory corruption vulnerability has been reported in July. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft PowerPoint OEPlaceholderAtom Arbitrary Array Indexing (MS10-004) - Ver2 (CVE-2010-0031)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. Multiple remote code execution vulnerabilities have been identified in Microsoft PowerPoint. The vulnerabilities are due to an invalid array indexing and to a use after free error in Microsoft PowerPoint...

CCRP Control BrowseDialog Denial of Service - Ver2 (CVE-2007-0371)

A denial-of-service vulnerability has been reported in Common Controls Replacement Project Browsedialog Server. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Microsoft Excel RealTime Date Record Parsing Buffer Overflow - Ver2 (CVE-2011-0101)

A buffer overflow vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to a memory handling error in Microsoft Office Excel during validation of record information while parsing a specially crafted Excel file. A remote attacker could exploit this vulnerability by...

MSN Messenger UIAutomation ActiveX Control Information Disclosure (MS08-050) - Ver2 (CVE-2008-0082)

Windows Messenger, MSN Messenger, and Windows Live Messenger are popular instant messaging clients for Microsoft Windows. An information disclosure vulnerability exists in Windows Messenger, MSN Messenger, and Windows Live Messenger. The vulnerability is caused by an ActiveX control that is marke...

Microsoft Office Excel SXDB Record Cache Memory Corruption (MS09-067) - Ver2 (CVE-2009-3127)

Microsoft Excel is a popular spreadsheet application. A memory corruption vulnerability has been identified in Microsoft Excel.The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this flaw b...

CSNews csNews.cgi setup Parameter Code Execution - Ver2 (CVE-2002-1751)

A code execution vulnerability has been reported in Cgiscript.net Cslivesupport. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Avaya IP Office CCR ImageUpload.ashx Unrestricted File Upload Code Execution - Ver2 (CVE-2012-3811)

A code execution vulnerability has been reported in Avaya IP Office Customer Call Reporter. The vulnerability is due to insufficient restriction of content uploaded to the server by ImageUpload. A remote attacker could exploit this vulnerability by uploading a file to a server running the...

Microsoft Excel File OBJ Record Memory Corruption (MS08-074) - Ver2 (CVE-2008-4264)

Microsoft Excel is a popular spreadsheet application. . A remote code execution vulnerability has been identified in the Microsoft Excel. The vulnerability is due to an error in Microsoft Excel as a result of pointer corruption when loading Excel formulas. An attacker can exploit this flaw to...

Idautomation ActiveX Arbitrary File Overwrite - Ver2 (CVE-2008-2283)

A file overwrite vulnerability has been reported in Idautomation Aztec Barcode, Idautomation Datamatrix Barcode, Idautomation Linear Barcode and Idautomation Pdf417 Barcode. Successful exploitation of this vulnerability would allow remote attackers to overwrite arbitrary files on the affected...

Symantec Web Gateway blocked.php Blind SQL Injection - Ver2 (CVE-2012-2574)

An SQL injection vulnerability has been reported in Symantec Web Gateway. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CsSearch csSearch.cgi Arbitrary Command Execution - Ver2 (CVE-2002-0495)

A command execution vulnerability has been reported in Cgiscript.net Cssearch. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

B-net Software Content Management System shout.php name Parameter XSS - Ver2 (CVE-2006-0078)

A cross-site scripting vulnerability has been reported in Haddad Said B-net Software 1.0. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

Wireshark DECT Dissector Stack Buffer Overflow - Ver2 (CVE-2011-1591)

A stack buffer overflow vulnerability has been reported in Wireshark DECT dissector. The vulnerability is caused due to improper bounds checking. A remote attacker can exploit this vulnerability by enticing a user to read a specially crafted packet trace file. Successful exploitation would allow ...

Microsoft Works File Converter Heap Overflow - Ver2 (CVE-2012-0177)

A buffer overflow vulnerability has been reported in Microsoft Works. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows symbolic link table Privilege Escalation - Ver2 (CVE-1999-1317)

A privilege escalation vulnerability has been reported in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...

Microsoft Windows Shortcut Font Name Buffer Overflow - Ver2 (CVE-2005-0550)

A buffer overflow vulnerability has been reported in Microsoft Windows Xp, Microsoft Windows 2000 and Microsoft Windows 2003 Server. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Microsoft IIS ida idq Information Disclosure - Ver2 (CVE-2000-0071)

An information disclosure vulnerability has been reported in Microsoft Internet Information Server. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Mac OS X DMG UFS ffs_mountfs Integer Overflow - Ver2 (CVE-2007-0229)

An integer overflow vulnerability has been reported in Apple Mac OS X. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Mozilla Firefox IconURL Arbitrary JavaScript Execution - Ver2 (CVE-2005-1477)

Mozilla web browsers implement an extension scheme that makes it possible for developers to produce extensions for the browser. The extension scheme also implements a well defined, standard installation procedure which enables quick installations of new browser extensions. The installation of suc...

Microsoft PowerPoint Converter ExObject Record Memory Corruption (MS09-017) - Ver2 (CVE-2009-0223)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A remote code execution vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory corruption error in Microsoft PowerPoint when reading sound data from specially craft...

Microsoft PowerPoint Converter SoundEntity Record Code Execution - Ver2 (CVE-2009-1128)

A code execution vulnerability has been reported in Microsoft Office PowerPoint. The vulnerability is due to a memory corruption error in Microsoft PowerPoint when reading sound data from specially crafted older PowerPoint 95 formatted files. A remote attacker could exploit this vulnerability by...

Firefox install function Cross-Site Scripting - Ver2 (CVE-2005-1477)

A cross-site scripting vulnerability has been reported in Mozilla Firefox. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

Firefox Hyphenated URL Buffer Overflow - Ver2 (CVE-2005-2871)

A buffer overflow vulnerability has been reported in Mozilla Firefox. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Oracle Java FileDialog.Show Heap Buffer Overflow - Ver2 (CVE-2011-0802)

A remote code execution vulnerability has been reported in Oracle Java Runtime Environment.The vulnerability is due to insufficient validation of the selected file's default values size. A remote attacker could exploit this vulnerability by enticing an unsuspecting user to open a web page...

Konqueror FTP IFrame Null Pointer Dereference Denial of Service - Ver2 (CVE-2007-1308)

A denial-of-service vulnerability has been reported in KDE Konqueror 3.5.5. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Command Injection - Ver2 (CVE-2007-3010)

...

Neutrino Exploit Kit Landing Page Code Execution

Neutrino is an exploit kit that operates by delivering malicious payload to a victim's computer. Remote attackers can infect users with Neutrino by enticing them to visit a malicious landing page...

Microsoft PowerPoint Data Out of Bounds Stack Buffer Overflow (MS09-017) - Ver2 (CVE-2009-1131)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A stack buffer overflow vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory corruption error in Microsoft PowerPoint when reading data that is too large from...

Internet Explorer createTextRange Remote Code Execution (MS06-013) - Ver2 (CVE-2006-1359)

Microsoft Internet Explorer IE is a popular web browser application. The browser is capable of processing HTML, scripting languages, and interpreting various other popular Internet specifications. A remote code execution vulnerability has been identified in Microsoft Internet Explorer. The...

Microsoft Windows LNK PIF Code Execution - Ver2 (CVE-2010-2568)

A code execution vulnerability has been reported in Microsoft Windows 7, Microsoft Windows Vista, Microsoft Windows Xp, Microsoft Windows 2003 Server, Microsoft Windows Server 2003 and Microsoft Windows Server 2008. Successful exploitation of this vulnerability could allow a remote attacker to...

Microsoft Office RTF Mismatch Memory Corruption (MS12-029) - Ver2 (CVE-2012-0183)

A remote code execution vulnerability has been reported in Microsoft Office. The vulnerability is due to a memory corruption while parsing specially crafted RTF-formatted data. A remote attacker can exploit this issue by enticing a target user to open a specially crafted RTF file. Successful...

SAP Internet Transaction Server wgate.dll service Parameter XSS - Ver2 (CVE-2003-0749)

A cross-site scripting vulnerability has been reported in SAP Internet Transaction Server. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

Internet Explorer Navigation Cancel Page XSS - Ver2 (CVE-2007-1499)

A cross-site scripting vulnerability has been reported in Microsoft Internet Explorer. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

Microsoft WordPad Text Converter Buffer Overflow - Ver2 (CVE-2010-2563)

A buffer overflow vulnerability has been reported in Microsoft Windows Server 2003 Service Pack 2. A remote attacker could trigger this vulnerability by enticing a vulnerable target to open a specially crafted document file. Successful exploitation of this vulnerability could allow a remote...

Microsoft PowerPoint Viewer 2003 Picture Integer Overflow - Ver2 (CVE-2008-0120)

An integer overflow vulnerability has been reported in Microsoft Office PowerPoint. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Office Excel OBJ Record Parsing Remote Code Execution - Ver2 (CVE-2009-0557)

A code execution vulnerability has been reported in Microsoft Office Excel. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft PowerPoint Converter NoteSlide Record Memory Corruption (MS09-017) - Ver2 (CVE-2009-0220)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A remote code execution vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory corruption error in Microsoft PowerPoint when reading sound data from specially craft...

Windows Media Runtime Voice Sample Rate Code Execution - Ver2 (CVE-2009-0555)

A code execution vulnerability has been reported in Microsoft Windows Media. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Acrobat AcroPDF.dll Code Execution - Ver2 (CVE-2006-6236)

A code execution vulnerability has been reported in Adobe Acrobat Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Embedded OpenType Font Parser Directory Entry Code Execution - Ver2 (CVE-2009-2514)

A code execution vulnerability has been reported in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Internet Explorer XML Core Services Memory Corruption - Ver2 (CVE-2006-5745)

A memory corruption vulnerability has been reported in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...