Microsoft Publisher 2007 Pubconv.dll Memory Corruption

Core Security Technologies - Corelabs Advisory Microsoft Publisher 2007 Pubconv.dll Memory Corruption 1. Advisory Information Title: Microsoft Publisher 2007 Pubconv.dll Memory Corruption Advisory ID: CORE-2011-0106 Advisory URL:...

Multiples Vulnerabilities in ManageEngine ServiceDesk Plus

Core Security - Corelabs Advisory 1. Advisory Information Title: Multiples Vulnerabilities in ManageEngine ServiceDesk Plus Advisory ID: CORE-2011-0506 Advisory URL: http://www.coresecurity.com/content/multiples-vulnerabilities-manageengine-sdp Date published: 2011-09-14 Date of last update:...

MS WINS ECommEndDlg Input Validation Error

Core Security - Corelabs Advisory MS WINS ECommEndDlg Input Validation Error 1. Advisory Information Title: MS WINS ECommEndDlg Input Validation Error Advisory ID: CORE-2011-0526 Advisory URL: http://www.coresecurity.com/content/ms-wins-ecommenddlg-input-validation Date published: 2011-09-12 Date...

Multiple vulnerabilities in HP Data Protector

Core Security Technologies - Corelabs Advisory Multiple vulnerabilities in HP Data Protector 1. Advisory Information Title: Multiple vulnerabilities in HP Data Protector Advisory ID: CORE-2011-0514 Advisory URL: http://www.coresecurity.com/content/HP-Data-Protector-multiple-vulnerabilities Date...

HP Data Protector EXEC_CMD Buffer Overflow Vulnerability

Core Security Technologies - Corelabs Advisory HP Data Protector EXECCMD Buffer Overflow Vulnerability 1. Advisory Information Title: HP Data Protector EXECCMD Buffer Overflow Vulnerability Advisory ID: CORE-2011-0606 Advisory URL:...

IBM WebSphere Application Server Cross-Site Request Forgery

Core Security Technologies - CoreLabs AdvisoryIBM WebSphere Application Server Cross-Site Request Forgery 1. Advisory Information Title: IBM WebSphere Application Server Cross-Site Request Forgery Advisory ID: CORE-2010-1021 Advisory URL: http://www.coresecurity.com/content/IBM-WebSphere-CSRF Dat...

MS HyperV Persistent DoS Vulnerability

Core Security Technologies - Corelabs Advisory MS HyperV Persistent DoS Vulnerability 1. Advisory Information Title: MS HyperV Persistent DoS Vulnerability Advisory ID: CORE-2011-0203 Advisory URL: http://www.coresecurity.com/content/hyperv-vmbus-persistent-dos-vulnerability Date published:...

Lotus Notes XLS viewer malformed BIFF record heap overflow

Core Security Technologies - Corelabs Advisory Lotus Notes XLS viewer malformed BIFF record heap overflow 1. Advisory Information Title: Lotus Notes XLS viewer malformed BIFF record heap overflow Advisory ID: CORE-2010-0908 Advisory URL:...

Adobe Audition vulnerability processing malformed session file

Adobe Audition vulnerability processing malformed session file 1. Advisory Information Title: Adobe Audition vulnerability processing malformed session file Advisory ID: CORE-2011-0204 Advisory URL: Date published: 2011-05-12 Date of last update: 2011-05-12 Vendors contacted: Adobe Release mode:...

Oracle GlassFish Server Administration Console Authentication Bypass

Oracle GlassFish Server Administration Console Authentication Bypass 1. Advisory Information Title: Oracle GlassFish Server Administration Console Authentication Bypass Advisory ID: CORE-2010-1118 Advisory URL: Date published: 2011-05-11 Date of last update: 2011-05-11 Vendors contacted: Oracle...

VLC Vulnerabilities handling .AMV and .NSV files

Core Security Technologies - Corelabs Advisory VLC Vulnerabilities handling .AMV and .NSV files 1. Advisory Information Title: VLC Vulnerabilities handling .AMV and .NSV files Advisory ID: CORE-2011-0208 Advisory URL: http://www.coresecurity.com/content/vlc-vulnerabilities-amv-nsv-files Date...

ZOHO ManageEngine ADSelfService multiple vulnerabilities

Core Security Technologies - Corelabs Advisory ZOHO ManageEngine ADSelfService multiple vulnerabilities 1. Advisory Information Title: ZOHO ManageEngine ADSelfService multiple vulnerabilities Advisory ID: CORE-2011-0103 Advisory URL:...

Cisco WebEx .atp and .wrf Overflow Vulnerabilities

Core Security Technologies - Corelabs Advisory Cisco WebEx .atp and .wrf Overflow Vulnerabilities 1. Advisory Information Title: Cisco WebEx .atp and .wrf Overflow Vulnerabilities Advisory ID: CORE-2010-1001 Advisory URL:...

Symantec Intel Handler Service Remote DoS

Core Security - CoreLabsSymantec Intel Handler Service Remote DoS 1. Advisory Information Title: Symantec Intel Handler Service Remote DoS Advisory Id: CORE-2010-0728 Advisory URL: http://www.coresecurity.com/content/symantec-intel-handler-service-remote-dos Date published: 2010-12-13 Date of las...

Vulnerabilidades de Arnet WiFi

Advisory ID Internal CORE-2010-0715 1. Información sobre esta Advertencia de Seguridad Title: Vulnerabilidades de Arnet WiFi Advisory Id: CORE-2010-0715 Advisory URL: https://www.coresecurity.com/advisories/vulnerabilidades-Arnet-wifi Date published: 2010-12-01 Date of last update: 2010-11-26...

Multiple vulnerabilities in BugTracker.Net

Core Security - CoreLabsMultiple vulnerabilities in BugTracker.Net 1. Advisory Information Title: Multiple vulnerabilities in BugTracker.Net Advisory Id: CORE-2010-1109 Advisory URL: http://www.coresecurity.com/content/multiple-vulnerabilities-in-bugtracker Date published: 2010-11-30 Date of last...

Landesk OS command injection

Core Security - CoreLabsLandesk OS command injection 1. Advisory Information Title: Landesk OS command injection Advisory Id: CORE-2010-1018 Advisory URL: http://www.coresecurity.com/content/landesk-os-command-injection-vulnerability Date published: 2010-11-10 Date of last update: 2010-11-10...

Apple OS X ATSServer CFF CharStrings INDEX Sign Mismatch

Apple OS X ATSServer CFF CharStrings INDEX Sign Mismatch 1. Advisory Information Title: Apple OS X ATSServer CFF CharStrings INDEX Sign Mismatch Advisory Id: CORE-2010-0825 Advisory URL: http://www.coresecurity.com/content/Apple-OSX-ATSServer-CharStrings-Sign-Mismatch Date published: 2010-11-08...

LibSMI smiGetNode Buffer Overflow When Long OID Is Given In Numerical Form

Core Security - CoreLabs LibSMI smiGetNode Buffer Overflow When Long OID Is Given In Numerical Form 1. Advisory Information Title: LibSMI smiGetNode Buffer Overflow When Long OID Is Given In Numerical Form Advisory Id: CORE-2010-0819 Advisory URL:...

Microsoft Office HtmlDlgHelper class memory corruption

Core Security - CoreLabs Microsoft Office HtmlDlgHelper class memory corruption 1. Advisory Information Title: Microsoft Office HtmlDlgHelper class memory corruption Advisory Id: CORE-2010-0517 Advisory URL: http://www.coresecurity.com/content/MS-Office-HtmlDlgHelper-memory-corruption Date...

MS OpenType CFF Parsing Vulnerability

Core Security - CoreLabsMS OpenType CFF Parsing Vulnerability 1. Advisory Information Title: MS OpenType CFF Parsing Vulnerability Advisory Id: CORE-2010-0624 Advisory URL: http://www.coresecurity.com/content/ms-opentype-cff-parsing-vulnerability Date published: 2010-10-12 Date of last update:...

Adobe Acrobat Reader Acrord32.dll Use After Free Vulnerability

Core Security - CoreLabsAdobe Acrobat Reader Acrord32.dll Use After Free Vulnerability 1. Advisory Information Title: Adobe Acrobat Reader Acrord32.dll Use After Free Vulnerability Advisory Id: CORE-2010-0701 Advisory URL:...

Microsoft Office Excel PivotTable Cache Data Record Buffer Overflow

Core Security - CoreLabs Microsoft Office Excel PivotTable Cache Data Record Buffer Overflow 1. Advisory Information Title: Microsoft Office Excel PivotTable Cache Data Record Buffer Overflow Advisory Id: CORE-2010-0407 Advisory URL:...

Microsoft Windows CreateWindow function callback vulnerability

Core Security - CoreLabsMicrosoft Windows CreateWindow function callback vulnerability 1. Advisory Information Title: Microsoft Windows CreateWindow function callback vulnerability Advisory Id: CORE-2010-0623 Advisory URL:...

HP OpenView NNM OvJavaLocale Buffer Overflow Vulnerability

Advisory ID Internal CORE-2010-0608 1. Advisory Information Title: HP OpenView NNM OvJavaLocale Buffer Overflow Vulnerability Advisory Id: CORE-2010-0608 Date published: 2010-08-03 Date of last update: 2010-08-03 Vendors contacted: HP Release mode: Coordinated release 2. Vulnerability Information...

Novell iManager Multiple Vulnerabilities

Novell iManager Multiple Vulnerabilities 1. Advisory Information Title: Novell iManager Multiple Vulnerabilities Advisory Id: CORE-2010-0316 Advisory URL: http://www.coresecurity.com/content/novell-imanager-buffer-overflow-off-by-one-vulnerabilities Date published: 2010-06-23 Date of last update:...

XnView MBM Processing Heap Overflow

Advisory ID Internal CORE-2010-0514 1. Advisory Information Title: XnView MBM Processing Heap Overflow Advisory Id: CORE-2010-0514 Advisory URL:http://www.coresecurity.com/content/xnview-mbm-heap-overflow Date published: 2010-06-14 Date of last update: 2010-06-14 Vendors contacted: XnView Release...

SQL Injection in CubeCart PHP Free & Commercial Shopping Cart Application

Advisory ID Internal CORE-2010-0415 1. Advisory Information Title: SQL Injection in CubeCart PHP Free & Commercial Shopping Cart Application Advisory Id: CORE-2010-0415 Advisory URL:https://www.coresecurity.com/core-labs/advisories/cubecart-php-shopping-cart-sql-injection Date published:...

Adobe Director DIRAPI.DLL Memory Corruption Vulnerability

Advisory ID Internal CORE-2010-0405 1. Advisory Information Title: Adobe Director DIRAPI.DLL Memory Corruption Vulnerability Advisory Id: CORE-2010-0405 Advisory URL:http://www.coresecurity.com/content/adobe-director-memory-corruption Date published: 2010-05-11 Date of last update: 2010-05-11...

Microsoft Office Visio DXF File Insertion Buffer Overflow

Advisory ID Internal CORE-2010-0428 1. Advisory Information Title: Microsoft Office Visio DXF File Insertion Buffer Overflow Advisory Id: CORE-2010-0428 Advisory URL:https://www.coresecurity.com/core-labs/advisories/ms-visio-dxf-buffer-overflow Date published: 2010-05-04 Date of last update:...

Windows SMTP Service DNS query Id vulnerabilities

Advisory ID Internal CORE-2010-0427 1. Advisory Information Title: Windows SMTP Service DNS query Id vulnerabilities Advisory Id: CORE-2010-0427 Advisory URL:http://www.coresecurity.com/content/CORE-2010-0424-windows-smtp-dns-query-id-bugs Date published: 2010-05-04 Date of last update: 2010-05-0...

User Invoices Persistent XSS Vulnerability in CactuShop

Core Security - CoreLabs User Invoices Persistent XSS Vulnerability in CactuShop 1. Advisory Information Title: User Invoices Persistent XSS Vulnerability in CactuShop Advisory Id: CORE-2010-0406 Advisory URL: http://www.coresecurity.com/content/cactushop-xss-persistent-vulnerability Date...

XSS Vulnerability in NextGEN Gallery Wordpress Plugin

Advisory ID Internal CORE-2010-0323 1. Advisory Information Title: XSS Vulnerability in NextGEN Gallery Wordpress Plugin Advisory Id: CORE-2010-0323 Advisory URL:http://www.coresecurity.com/content/nextgen-gallery-xss-vulnerability Date published: 2010-04-06 Date of last update: 2010-03-25 Vendor...

eFront-learning PHP file inclusion vulnerability

1. Advisory Information Title: eFront-learning PHP file inclusion vulnerability Advisory Id: CORE-2010-0311 Advisory URL:http://www.coresecurity.com/core-labs/advisories/efront-php-file-inclusion Date published: 2010-03-16 Date of last update: 2010-03-16 Vendors contacted: Vendor name Release...

Virtual PC Hypervisor Memory Protection Vulnerability

1. Advisory Information Title: Virtual PC Hypervisor Memory Protection Vulnerability Advisory Id: CORE-2009-0803 Advisory URL:http://www.coresecurity.com/core-labs/advisories/virtual-pc-2007-hypervisor-memory-protection-bug Date published: 2010-03-16 Date of last update: 2010-03-16 Vendors...

Microsoft Office Excel DbOrParamQry Record Parsing Vulnerability

Advisory ID Internal CORE-2009-1103 1. Advisory Information Title: Microsoft Office Excel DbOrParamQry Record Parsing Vulnerability Advisory Id: CORE-2009-1103 Date published: 2010-03-09 Date of last update: 2010-03-09 Vendors contacted: Microsoft Release mode: Coordinated release 2...

Windows Movie Maker and Microsoft Producer IsValidWMToolsStream() Heap Overflow

Advisory ID Internal CORE-2009-0813 1. Advisory Information Title: Windows Movie Maker and Microsoft Producer IsValidWMToolsStream Heap Overflow Advisory Id: CORE-2009-0813 Advisory URL:http://www.coresecurity.com/content/movie-maker-heap-overflow Date published: 2010-03-09 Date of last update:...

Luxology Modo 401 .LXO Integer Overflow

Advisory ID Internal CORE-2009-0913 1. Advisory Information Title: Luxology Modo 401 .LXO Integer Overflow Advisory Id: CORE-2009-0913 Date published: 2010-03-02 Date of last update: 2010-03-02 Vendors contacted: Luxology LLC Release mode: User release 2. Vulnerability Information Class: Failure...

Microsoft Office Excel / Word OfficeArtSpgr Container Pointer Overwrite Vulnerability

Advisory ID Internal CORE-2009-0827 1. Advisory Information Title: Microsoft Office Excel / Word OfficeArtSpgr Container Pointer Overwrite Vulnerability Advisory Id: CORE-2009-0827 Date published: 2010-02-09 Date of last update: 2010-02-08 Vendors contacted: Microsoft Release mode: Coordinated...

Multiple Vulnerabilities with 8.3 Filename Pseudonyms in Web Servers

Advisory ID Internal CORE-2010-0121 1. Advisory Information Advisory Id: CORE-2010-0121 Advisory URL:https://www.coresecurity.com/core-labs/advisories/filename-pseudonyms-vulnerabilities Date published: 2010-02-05 Date of last update: 2010-02-05 Vendors contacted: Cherokee team, Nginx team,...

LANDesk command injection

Advisory ID Internal CORE-2010-0104 1. Advisory Information Title: LANDesk command injection Advisory Id: CORE-2010-0104 Date published: 2010-02-04 Date of last update: 2010-02-04 Vendors contacted: LANDesk Team Release mode: Coordinated release 2. Vulnerability Information Class: Cross site...

Internet Explorer Dynamic OBJECT tag and URLMON sniffing vulnerabilities

Advisory ID Internal CORE-2009-0625 1. Advisory Information Title: Internet Explorer Dynamic OBJECT tag and URLMON sniffing vulnerabilities Advisory Id: CORE-2009-0625 Date published: 2010-02-03 Date of last update: 2010-02-03 Vendors contacted: Microsoft Release mode: User release 2...

Cisco Secure Desktop XSS/JavaScript Injection

1. Advisory Information Title: Cisco Secure Desktop XSS/JavaScript Injection Advisory Id: CORE-2010-0106 Advisory URL:http://www.coresecurity.com/core-labs/advisories/cisco-secure-desktop-xss Date published: 2010-02-01 Date of last update: 2010-02-01 Vendors contacted: Cisco Release mode:...

Corel Paint Shop Pro Photo X2 FPX Heap Overflow

1. Advisory Information Title: Corel Paint Shop Pro Photo X2 FPX Heap Overflow Advisory Id: CORE-2009-1126 Advisory URL:http://www.coresecurity.com/core-labs/advisories/corel-paintshop-heap-overflow Date published: 2010-02-01 Date of last update: 2010-02-01 Vendors contacted: Corel Release mode:...

Google SketchUp 'lib3ds' 3DS Importer Memory Corruption

Advisory ID Internal CORE-2009-1209 1. Advisory Information Title: Google SketchUp 'lib3ds' 3DS Importer Memory Corruption Advisory Id: CORE-2009-1209 Advisory URL:www.coresecurity.com/core-labs/advisories/google-sketchup-vulnerability Date published: 2010-01-13 Date of last update: 2010-01-12...

Qemu and KVM VNC server remote DoS

Qemu and KVM VNC server remote DoS 1. Advisory Information Title: Qemu and KVM VNC server remote DoS Advisory ID: CORE-2008-1210 Advisory URL: Date published: 2009-12-22 Date of last update: 2008-12-19 Vendors contacted: Qemu and KVM teams Release mode: Coordinated release 2. Vulnerability...

Multiple XSS and Injection Vulnerabilities in TestLink Test Management and Execution System

Advisory ID Internal CORE-2009-1013 1. Advisory Information Advisory Id: CORE-2009-1013 Advisory URL:http://www.coresecurity.com/content/testlink-multiple-injection-vulnerabilities Date published: 2009-12-09 Date of last update: 2009-12-09 Vendors contacted: TestLink Community Release mode:...

DAZ Studio Arbitrary Command Execution

1. Advisory Information Title: DAZ Studio Arbitrary Command Execution Advisory Id: CORE-2009-0911 Advisory URL:https://www.coresecurity.com/core-labs/advisories/dazstudio-scripting-injection Date published: 2009-12-02 Date of last update: 2009-12-01 Vendors contacted: DAZ Release mode: User...

Autodesk Maya Script Nodes Arbitrary Command Execution

Advisory ID Internal CORE-2009-0910 1. Advisory Information Title: Autodesk Maya Script Nodes Arbitrary Command Execution Advisory Id: CORE-2009-0910 Advisory URL:http://www.coresecurity.com/content/maya-arbitrary-command-execution Date published: 2009-11-23 Date of last update: 2009-11-20 Vendor...

Autodesk 3DS Max Application Callbacks Arbitrary Command Execution

Advisory ID Internal CORE-2009-0909 Core Security - CoreLabs Autodesk 3DS Max Application Callbacks Arbitrary Command Execution 1. Advisory Information Title: Autodesk 3DS Max Application Callbacks Arbitrary Command Execution Advisory Id: CORE-2009-0909 Advisory...