Microsoft Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/microsoft/ Sun, 26 Feb 2023 09:11:55 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png Microsoft Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/microsoft/ 32 32 CVE-2008-7217 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7217/ Sun, 26 Feb 2023 09:11:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7217/ Microsoft Office 2008 for Mac, when running on Macintosh systems that restrict Office access to administrators, does not enforce this restriction for user ID 502, which allows local users with that ID to bypass intended security policy and access Office programs, related to permissions and ownership for certain directories.

The post CVE-2008-7217 appeared first on CVE Vulnerability.

]]> Microsoft Office 2008 for Mac, when running on Macintosh systems that restrict Office access to administrators, does not enforce this restriction for user ID 502, which allows local users with that ID to bypass intended security policy and access Office programs, related to permissions and ownership for certain directories.

The post CVE-2008-7217 appeared first on CVE Vulnerability.

]]> CVE-2008-4609 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-4609/ Sun, 26 Feb 2023 09:10:37 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-4609/ The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress.

The post CVE-2008-4609 appeared first on CVE Vulnerability.

]]> The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress.

The post CVE-2008-4609 appeared first on CVE Vulnerability.

]]> CVE-2008-4264 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-4264/ Sun, 26 Feb 2023 09:10:27 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-4264/ Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allow remote attackers to execute […]

The post CVE-2008-4264 appeared first on CVE Vulnerability.

]]> Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a crafted Excel spreadsheet that contains a malformed formula, which triggers “pointer corruption” during the loading of formulas from this spreadsheet, aka “File Format Parsing Vulnerability.”

The post CVE-2008-4264 appeared first on CVE Vulnerability.

]]> CVE-2008-4265 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-4265/ Sun, 26 Feb 2023 09:10:27 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-4265/ Microsoft Office Excel 2000 SP3 allows remote attackers to execute arbitrary code via a crafted Excel spreadsheet that contains a malformed object, which triggers memory corruption during the loading of records from this spreadsheet, aka “File Format Parsing Vulnerability.”

The post CVE-2008-4265 appeared first on CVE Vulnerability.

]]> Microsoft Office Excel 2000 SP3 allows remote attackers to execute arbitrary code via a crafted Excel spreadsheet that contains a malformed object, which triggers memory corruption during the loading of records from this spreadsheet, aka “File Format Parsing Vulnerability.”

The post CVE-2008-4265 appeared first on CVE Vulnerability.

]]> CVE-2008-3068 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-3068/ Sun, 26 Feb 2023 09:09:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-3068/ Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List (CRL) checks by using an arbitrary URL from a certificate embedded in a (1) S/MIME e-mail message or (2) signed document, which allows remote attackers to obtain reading times and IP addresses of recipients, and […]

The post CVE-2008-3068 appeared first on CVE Vulnerability.

]]> Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List (CRL) checks by using an arbitrary URL from a certificate embedded in a (1) S/MIME e-mail message or (2) signed document, which allows remote attackers to obtain reading times and IP addresses of recipients, and port-scan results, via a crafted certificate with an Authority Information Access (AIA) extension.

The post CVE-2008-3068 appeared first on CVE Vulnerability.

]]> CVE-2008-2161 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-2161/ Sun, 26 Feb 2023 09:09:22 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-2161/ Buffer overflow in TFTP Server SP 1.4 and 1.5 on Windows, and possibly other versions, allows remote attackers to execute arbitrary code via a long TFTP error packet. NOTE: some of these details are obtained from third party information.

The post CVE-2008-2161 appeared first on CVE Vulnerability.

]]> Buffer overflow in TFTP Server SP 1.4 and 1.5 on Windows, and possibly other versions, allows remote attackers to execute arbitrary code via a long TFTP error packet. NOTE: some of these details are obtained from third party information.

The post CVE-2008-2161 appeared first on CVE Vulnerability.

]]> CVE-2008-1200 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-1200/ Sun, 26 Feb 2023 09:08:54 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-1200/ Unspecified vulnerability in Microsoft Access allows remote user-assisted attackers to execute arbitrary code via a crafted .MDB file, possibly related to Jet Engine (msjet40.dll). NOTE: this is probably a different issue than CVE-2007-6026.

The post CVE-2008-1200 appeared first on CVE Vulnerability.

]]> Unspecified vulnerability in Microsoft Access allows remote user-assisted attackers to execute arbitrary code via a crafted .MDB file, possibly related to Jet Engine (msjet40.dll). NOTE: this is probably a different issue than CVE-2007-6026.

The post CVE-2008-1200 appeared first on CVE Vulnerability.

]]> CVE-2008-0551 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-0551/ Sun, 26 Feb 2023 09:08:36 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-0551/ The NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1 and earlier in Namo Web Editor in Sejoong Namo ActiveSquare 6 allows remote attackers to execute arbitrary code via a URL in the argument to the Install method. NOTE: some of these details are obtained from third party information.

The post CVE-2008-0551 appeared first on CVE Vulnerability.

]]> The NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1 and earlier in Namo Web Editor in Sejoong Namo ActiveSquare 6 allows remote attackers to execute arbitrary code via a URL in the argument to the Install method. NOTE: some of these details are obtained from third party information.

The post CVE-2008-0551 appeared first on CVE Vulnerability.

]]> CVE-2008-0470 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-0470/ Sun, 26 Feb 2023 09:08:33 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-0470/ A certain ActiveX control in Comodo AntiVirus 2.0 allows remote attackers to execute arbitrary commands via the ExecuteStr method.

The post CVE-2008-0470 appeared first on CVE Vulnerability.

]]> A certain ActiveX control in Comodo AntiVirus 2.0 allows remote attackers to execute arbitrary commands via the ExecuteStr method.

The post CVE-2008-0470 appeared first on CVE Vulnerability.

]]> CVE-2008-0437 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-0437/ Sun, 26 Feb 2023 09:08:32 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-0437/ Multiple buffer overflows in the WebHPVCInstall.HPVirtualRooms14 ActiveX control in HPVirtualRooms14.dll 1.0.0.100, as used in the installation process for HP Virtual Rooms, allow remote attackers to execute arbitrary code via a long (1) AuthenticationURL, (2) PortalAPIURL, or (3) cabroot property value. NOTE: some of these details are obtained from third party information.

The post CVE-2008-0437 appeared first on CVE Vulnerability.

]]> Multiple buffer overflows in the WebHPVCInstall.HPVirtualRooms14 ActiveX control in HPVirtualRooms14.dll 1.0.0.100, as used in the installation process for HP Virtual Rooms, allow remote attackers to execute arbitrary code via a long (1) AuthenticationURL, (2) PortalAPIURL, or (3) cabroot property value. NOTE: some of these details are obtained from third party information.

The post CVE-2008-0437 appeared first on CVE Vulnerability.

]]>