Page 5 of 61 results (0.006 seconds)

CVSS: 9.3EPSS: 51%CPEs: 3EXPL: 0

CVE-2009-0095

https://notcve.org/view.php?id=CVE-2009-0095

10 Feb 2009 — Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly validate object data in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Memory Validation Vulnerability." Microsoft Office Visio 2002 SP2, 2003 SP3 y 2007 SP1 no valida adecuadamente los datos Object de los ficheros Visio, esto permite a atacantes remotos ejecutar código de su elección a través de un fichero manipulado. También se conoce como "Vulnerabilidad de Validación de Memoria". • http://www.us-cert.gov/cas/techalerts/TA09-041A.html • CWE-399: Resource Management Errors •

CVSS: 9.3EPSS: 62%CPEs: 3EXPL: 0

CVE-2009-0096

https://notcve.org/view.php?id=CVE-2009-0096

10 Feb 2009 — Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly perform memory copy operations for object data, which allows remote attackers to execute arbitrary code via a crafted Visio document, aka "Memory Corruption Vulnerability." Microsoft Office Visio 2002 SP2, 2003 SP3, y 2007 SP1 no realiza correctamente la copia de memoria para los datos de objetos, lo que permite a atacantes remotos ejecutar código a su elección a través de un documento de Visio manipulado, también conocido como "Vulne... • http://www.us-cert.gov/cas/techalerts/TA09-041A.html • CWE-399: Resource Management Errors •

CVSS: 9.3EPSS: 51%CPEs: 3EXPL: 0

CVE-2009-0097

https://notcve.org/view.php?id=CVE-2009-0097

10 Feb 2009 — Microsoft Office Visio 2002 SP2 and 2003 SP3 does not properly validate memory allocation for Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Memory Corruption Vulnerability." Microsoft Office Visio v2002 SP2 and v2003 SP3 no valida de forma adecuada el posicionamiento en memoria de los ficheros Visio, lo que permite a atacantes remotos ejecutar código de su elección a través de un fichero manipulado, también conocido como "Memory Corruption Vulerability" • http://www.us-cert.gov/cas/techalerts/TA09-041A.html • CWE-399: Resource Management Errors •

CVSS: 9.3EPSS: 76%CPEs: 22EXPL: 1

CVE-2007-5348 – Microsoft Internet Explorer - GDI+ (PoC) (MS08-052)

https://notcve.org/view.php?id=CVE-2007-5348

10 Sep 2008 — Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via an image file with crafted ... • https://www.exploit-db.com/exploits/6619 • CWE-189: Numeric Errors •

CVSS: 9.3EPSS: 70%CPEs: 22EXPL: 0

CVE-2008-3012

https://notcve.org/view.php?id=CVE-2008-3012

10 Sep 2008 — gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 does not properly perform memory allocation, which allows remote attackers to execute ... • http://marc.info/?l=bugtraq&m=122235754013992&w=2 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 9.3EPSS: 71%CPEs: 22EXPL: 0

CVE-2008-3014

https://notcve.org/view.php?id=CVE-2008-3014

10 Sep 2008 — Buffer overflow in gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a malformed W... • http://marc.info/?l=bugtraq&m=122235754013992&w=2 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 9.3EPSS: 74%CPEs: 20EXPL: 1

CVE-2008-3013 – Microsoft Windows GDI+ GIF Parsing Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2008-3013

09 Sep 2008 — gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a malformed GIF image file conta... • https://www.exploit-db.com/exploits/6716 • CWE-399: Resource Management Errors •

CVSS: 9.3EPSS: 71%CPEs: 14EXPL: 2

CVE-2008-3015 – Microsoft Windows GDI+ BMP Parsing Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2008-3015

09 Sep 2008 — Integer overflow in gdiplus.dll in GDI+ in Microsoft Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a BMP image file with a malformed BitMapInfoHeader that triggers a buffer overflow, aka "GDI+ BMP Integer Overflow Vuln... • http://marc.info/?l=bugtraq&m=122235754013992&w=2 • CWE-189: Numeric Errors •

CVSS: 7.5EPSS: 10%CPEs: 23EXPL: 0

CVE-2008-3068

https://notcve.org/view.php?id=CVE-2008-3068

07 Jul 2008 — Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List (CRL) checks by using an arbitrary URL from a certificate embedded in a (1) S/MIME e-mail message or (2) signed document, which allows remote attackers to obtain reading times and IP addresses of recipients, and port-scan results, via a crafted certificate with an Authority Information Access (AIA) extension. Microsoft Crypto API 5.131.2600.2180 hasta la 6.0, como la... • http://securityreason.com/securityalert/3978 •

CVSS: 9.3EPSS: 53%CPEs: 10EXPL: 0

CVE-2008-1089

https://notcve.org/view.php?id=CVE-2008-1089

08 Apr 2008 — Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute arbitrary code via a Visio file containing crafted object header data, aka "Visio Object Header Vulnerability." Vulnerabilidad sin especificar en Microsoft Visio 2002 SP2, 2003 SP2 y SP3, y 2007 SP1, permite a atacantes asistidos por el usuario ejecutar código de su elección a través de un archivo Visio que contiene datos del objeto de cabecera manipulados, también con... • http://marc.info/?l=bugtraq&m=120845064910729&w=2 • CWE-94: Improper Control of Generation of Code ('Code Injection') •