Archive
10 December 2008
Vulnerabilities first published on this day (UTC), newest first.
41 results · Feed
-
Unscored —CVE-2008-4266 EPSS 28%
Array index vulnerability in Microsoft Office Excel 2000 SP3, 2002 SP3, and 2003 SP3; Excel Viewer 2003 Gold and SP3; O…
-
Unscored —
Heap-based buffer overflow in mscomct2.ocx (aka Windows Common ActiveX control or Microsoft Animation ActiveX control) …
-
Unscored —CVE-2008-4268 EPSS 21%
The Windows Search component in Microsoft Windows Vista Gold and SP1 and Server 2008 does not properly free memory duri…
-
Unscored —CVE-2008-4264 EPSS 26%
Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Excel Viewer 2003 Gold and SP3; Excel Viewe…
-
Unscored —CVE-2008-4265 EPSS 25%
Microsoft Office Excel 2000 SP3 allows remote attackers to execute arbitrary code via a crafted Excel spreadsheet that …
-
Unscored —CVE-2008-4032 EPSS 48%
Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not properly perform authentic…
-
Unscored —CVE-2008-4027 EPSS 34%
Double free vulnerability in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Go…
-
Unscored —CVE-2008-4025 EPSS 33%
Integer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP…
-
Unscored —CVE-2008-4260 EPSS 19%
Microsoft Internet Explorer 7 sometimes attempts to access a deleted object, which allows remote attackers to execute a…
-
Unscored —CVE-2008-4031 EPSS 23%
Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 …
-
Unscored —CVE-2008-4256 EPSS 21%
The Charts ActiveX control in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8…
-
Unscored —CVE-2008-4024 EPSS 29%
Microsoft Office Word 2000 SP3 and 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code vi…
-
Unscored —CVE-2008-4259 EPSS 33%
Microsoft Internet Explorer 7 sometimes attempts to access uninitialized memory locations, which allows remote attacker…
-
Unscored —CVE-2008-4258 EPSS 18%
Microsoft Internet Explorer 5.01 SP4 and 6 SP1 does not properly validate parameters during calls to navigation methods…
-
Unscored —CVE-2008-4261 EPSS 30%
Stack-based buffer overflow in Microsoft Internet Explorer 5.01 SP4, 6 SP1 on Windows 2000, and 6 on Windows XP and Ser…
-
Unscored —CVE-2008-4254 EPSS 22%
Multiple integer overflows in the Hierarchical FlexGrid ActiveX control (mshflxgd.ocx) in Microsoft Visual Basic 6.0 an…
-
Unscored —CVE-2008-4028 EPSS 38%
Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 …
-
Unscored —CVE-2008-4252 EPSS 21%
The DataGrid ActiveX control in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not prope…
-
Unscored —CVE-2008-4026 EPSS 23%
Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compat…
-
Unscored —CVE-2008-4269 EPSS 21%
The search-ms protocol handler in Windows Explorer in Microsoft Windows Vista Gold and SP1 and Server 2008 uses untrust…
-
Unscored —CVE-2008-4253 EPSS 21%
The FlexGrid ActiveX control in Microsoft Visual Basic 6.0, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, Office FrontPage…
-
Unscored —
The WordPad Text Converter for Word 97 files in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows …
-
Unscored —CVE-2008-4837 EPSS 37%
Stack-based buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Word Viewer 2…
-
Unscored —CVE-2008-4030 EPSS 23%
Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 …
-
Unscored —CVE-2008-3010 EPSS 15%
Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1 and 9 i…
-
Critical 9.8CVE-2008-3465 EPSS 14%
Heap-based buffer overflow in an API in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vis…
-
Unscored —CVE-2008-3009 EPSS 16%
Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1, 9, and…
-
Unscored —CVE-2008-2249 EPSS 31%
Integer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and…
-
Unscored —
Stack-based buffer overflow in SAN Manager Master Agent service (aka msragent.exe) in EMC Control Center 5.2 SP5 and 6.…
-
Unscored —CVE-2008-5418 Public exploit
Directory traversal vulnerability in login.php in the PunPortal module before 2.0 for PunBB allows remote attackers to …
-
Unscored —
Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop…
-
Unscored —
HP DECnet-Plus 8.3 before ECO03 for OpenVMS on the Alpha platform uses world-writable permissions for the OSIT$NAMES lo…
-
Unscored —
The SAN Manager Master Agent service (aka msragent.exe) in EMC Control Center before 6.1 does not properly authenticate…
-
Unscored —
The default configuration of system.conf in D-Bus (aka DBus) before 1.2.6 omits the send_type attribute in certain rule…
-
Unscored —
Unspecified vulnerability in the Feature Pack for Web Services in the Web Services Security component in IBM WebSphere …
-
Unscored —
The PK11_SESSION cache in the OpenSSL PKCS#11 engine in Sun Solaris 10 does not maintain reference counts for operation…
-
Unscored —CVE-2008-5304 Public exploit
Cross-site scripting (XSS) vulnerability in TWiki before 4.2.4 allows remote attackers to inject arbitrary web script o…
-
Unscored —
PerfServlet in the PMI/Performance Tools component in IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 allows at…
-
Unscored —
IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 sends SSL traffic over "unsecured TCP," which makes it easier f…
-
Unscored —
Unspecified vulnerability in IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 on Windows has unknown impact and …