새로운 댓글
2007/02 검색 결과, 56
Microsoft Word Macro and Drawing Object Code Execution Vulnerabilities (MS07-014)
Two vulnerabilities have been identified in Microsoft Word, which could be exploited by attackers to take complete control of an affected system. The first issue is due to a lack of validation of certain properties in modified documents, which could be exploited by attackers to cause a vulnerable application to not prompt the user with a macro security warning when executing macros present in a ..Microsoft Windows and Office RichEdit Remote Code Execution Vulnerability (MS07-013)
A vulnerability has been identified in Microsoft Windows and Office, which could be exploited by attackers to take complete control of an affected system. This issue is due to a memory corruption error in the RichEdit components when parsing OLE objects embedded within RTF files, which could be exploited by remote attackers to execute arbitrary commands by convincing a user to interact with a ma..Microsoft Windows MFC Memory Corruption Code Execution Vulnerability (MS07-012)
A vulnerability has been identified in Microsoft Windows, which could be exploited by attackers to take complete control of an affected system. This issue is due to a memory corruption error in certain MFC components when parsing OLE objects embedded within RTF files, which could be exploited by remote attackers to execute arbitrary commands by convincing a user to interact with a malformed embe..Microsoft Windows OLE Dialog Remote Command Execution Vulnerability (MS07-011)
A vulnerability has been identified in Microsoft Windows, which could be exploited by attackers to take complete control of an affected system. This issue is due to a memory corruption error in the OLE Dialog component when parsing OLE objects embedded within RTF files, which could be exploited by remote attackers to execute arbitrary commands by convincing a user to interact with a malformed em..Microsoft Malware Protection Engine Remote Code Execution Vulnerability (MS07-010)
A vulnerability has been identified in various Microsoft products, which could be exploited by attackers or malware to take complete control of an affected system. This issue is due to an integer overflow error in the Microsoft Malware Protection Engine (mpengine.dll) when processing a specially crafted PDF file, which could be exploited by attackers to execute arbitrary commands e.g. by sending..Microsoft Data Access Components Remote Code Execution Vulnerability (MS07-009)
A vulnerability has been identified in Microsoft Data Access Components (MDAC), which could be exploited by attackers to take complete control of an affected system. This issue is due to a memory corruption error in the ADODB.Connection ActiveX control when handling malformed arguments passed to certain methods, which could be exploited by remote attackers to execute arbitrary commands by tricki..