새로운 댓글
Vulnerability 검색 결과, 40
PHP import_request_variables() arbitrary variable overwrite
SummaryUsing import_request_variables() you can overwrite $_* and $* (any php variable). Systems AffectedPHP >=4.0.7 From the PHP manual: [quote] Imports GET/POST/Cookie variables into the global scope. It is useful if you disable register_globals, but would like to see some variables in the global scope. [/quote] So import_request_variables() emulate register globals on and is a bit different f..Microsoft Internet Explorer Local File Accesses Vulnerability
Overview: Microsoft Internet Explorer is a default browser bundled with all versions of Microsoft Windows operating system. Description: A vulnerability has been identified in Microsoft Internet Explorer, (default installation) in windows XP service pack 2 which could be exploited by malicious users to obtain victims local files. This flaw is due to an error in the way Microsoft Internet explore..Trend Micro OfficeScan Web Deployment ActiveX Remote Code Execution Vulnerability
A vulnerability has been identified in OfficeScan Corporate Edition, which could be exploited by attackers to take complete control of an affected system. This issue is due to a buffer overflow error in the web deployment ActiveX control when handling malformed arguments passed to certain methods, which could be exploited by remote attackers to execute arbitrary commands by tricking a user into ..Microsoft Word Document Handling Memory Corruption and Code Execution Vulnerability
A vulnerability has been identified in Microsoft Word, which could be exploited by attackers to take complete control of an affected system. This issue is due to a memory corruption error when handling a malformed document, which could be exploited by attackers to execute arbitrary commands by tricking a user into opening a specially crafted Word document. Affected Products Microsoft Office 2000..Microsoft Internet Explorer Multiple Remote Code Execution Vulnerabilities (MS07-016)
Multiple vulnerabilities have been identified in Microsoft Internet Explorer, which could be exploited by attackers to take complete control of an affected system. The first issue is due to a memory corruption error when instantiating the "Imjpcksid.dll" COM object as an ActiveX control, which could be exploited by remote attackers to execute arbitrary commands by tricking a user into visiting a..