access Archives - CVE Vulnerability

CVE-2008-3068

Sun, 26 Feb 2023 09:09:50 +0000

Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List (CRL) checks by using an arbitrary URL from a certificate embedded in a (1) S/MIME e-mail message or (2) signed document, which allows remote attackers to obtain reading times and IP addresses of recipients, and port-scan results, via a crafted certificate with an Authority Information Access (AIA) extension.

The post CVE-2008-3068 appeared first on CVE Vulnerability.

CVE-2008-1200

Sun, 26 Feb 2023 09:08:54 +0000

Unspecified vulnerability in Microsoft Access allows remote user-assisted attackers to execute arbitrary code via a crafted .MDB file, possibly related to Jet Engine (msjet40.dll). NOTE: this is probably a different issue than CVE-2007-6026.

The post CVE-2008-1200 appeared first on CVE Vulnerability.

CVE-2007-6357

Sun, 26 Feb 2023 09:08:08 +0000

Stack-based buffer overflow in Microsoft Office Access allows remote, user-assisted attackers to execute arbitrary code via a crafted Microsoft Access Database (.mdb) file. NOTE: due to the lack of details as of 20071210, it is not clear whether this issue is the same as CVE-2007-6026 or CVE-2005-0944.

The post CVE-2007-6357 appeared first on CVE Vulnerability.

CVE-2007-0671

Sun, 26 Feb 2023 09:05:34 +0000

Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.

The post CVE-2007-0671 appeared first on CVE Vulnerability.

CVE-2018-8312

Sun, 26 Feb 2023 06:51:23 +0000

A remote code execution vulnerability exists when Microsoft Access fails to properly handle objects in memory, aka “Microsoft Access Remote Code Execution Vulnerability.” This affects Microsoft Access, Microsoft Office.

The post CVE-2018-8312 appeared first on CVE Vulnerability.

CVE-2018-0903

Sun, 26 Feb 2023 06:44:26 +0000

Microsoft Access 2010 SP2, Microsoft Access 2013 SP1, Microsoft Access 2016, and Microsoft Office 2016 Click-to-Run allow a remote code execution vulnerability due to how objects are handled in memory, aka “Microsoft Access Remote Code Execution Vulnerability”.

The post CVE-2018-0903 appeared first on CVE Vulnerability.

CVE-2020-1582

Sun, 26 Feb 2023 06:37:59 +0000

A remote code execution vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, aka ‘Microsoft Access Remote Code Execution Vulnerability’.

The post CVE-2020-1582 appeared first on CVE Vulnerability.

CVE-2020-0760

Sun, 26 Feb 2023 06:35:31 +0000

A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka ‘Microsoft Office Remote Code Execution Vulnerability’. This CVE ID is unique from CVE-2020-0991.

The post CVE-2020-0760 appeared first on CVE Vulnerability.