Priority HIGH 73
Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in Microsoft Visual Studio 6.0, Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.55917 · Published 2008-08-18 · No fix listed CWE-119
Priority HIGH 72
Heap-based buffer overflow in mscomct2.ocx (aka Windows Common ActiveX control or Microsoft Animation ActiveX control) in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, Visual FoxPro 8.0 SP1 and 9.…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.53703 · Published 2008-12-10 · No fix listed CWE-119
Priority HIGH 71
Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Micro…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.72368 · Published 2004-06-11 · No fix listed
Priority HIGH 71
Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM fiel…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.49024 · Published 2004-09-17 · No fix listed
Priority HIGH 68
Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM obj…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.63246 · Published 2005-08-19 · No fix listed CWE-119
Priority HIGH 66
The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vist…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.36608 · Published 2009-07-29 · No fix listed CWE-457
Priority HIGH 66
The MFC component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 and Visual Studio .NET 2000, 2002 SP1, 2003, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code via an RTF file with a malfo…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.36732 · Published 2007-02-13 · No fix listed CWE-94
Priority HIGH 66
Stack-based buffer overflow in Visual Studio Crystal Reports for Microsoft Visual Studio .NET 2002 and 2002 SP1, .NET 2003 and 2003 SP1, and 2005 and 2005 SP1 (formerly Business Objects Crystal Reports XI Professional) a…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.54027 · Published 2006-11-28 · No fix listed CWE-119
Priority MEDIUM 63
Heap-based buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 20…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.29462 · Published 2009-08-12 · No fix listed CWE-119
Priority MEDIUM 63
Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via vectors related to DataSource that trigger memory corruption, a…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.28734 · Published 2008-03-11 · No fix listed CWE-94
Priority MEDIUM 62
Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office W…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.26715 · Published 2009-10-14 · No fix listed CWE-119
Priority MEDIUM 61
Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5; Silverlight 5 before 5.1.20513.0; win32k.sys in the kernel-mode drivers, and GDI+, DirectWrite, and Journal, in Windows XP SP2 and SP3, Windows Server 2003 SP2, W…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.32378 · Published 2013-07-10 · No fix listed CWE-94
Priority MEDIUM 61
Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.23647 · Published 2009-10-14 · No fix listed CWE-189
Priority MEDIUM 60
Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.23461 · Published 2009-10-14 · No fix listed CWE-189
Priority MEDIUM 60
GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Windows Server 2003 SP2, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word V…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.22205 · Published 2009-10-14 · No fix listed CWE-94
Priority MEDIUM 60
Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Microsoft Visual Studio 2005 allows remote attackers to bypass Internet zone restricti…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.45595 · Published 2006-11-01 · No fix listed
Priority MEDIUM 59
GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to execute arbitrary code via a crafted Office document that triggers memory corrupt…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.20452 · Published 2009-10-14 · No fix listed CWE-94
Priority MEDIUM 59
Multiple integer overflows in unspecified APIs in GDI+ in Microsoft .NET Framework 1.1 SP1, .NET Framework 2.0 SP1 and SP2, Windows XP SP2 and SP3, Windows Server 2003 SP2, Vista Gold and SP1, Server 2008 Gold, Office XP…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.20982 · Published 2009-10-14 · No fix listed CWE-189
Priority MEDIUM 57
Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer,…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.22025 · Published 2009-10-14 · No fix listed CWE-120
Priority MEDIUM 57
Multiple integer overflows in the Hierarchical FlexGrid ActiveX control (mshflxgd.ocx) in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allow remote attackers to execute arbitrary code via craf…
CVSS 2.0HIGH 8.5· Network · Low privileges · Interaction — · EPSS 0.2206 · Published 2008-12-10 · No fix listed CWE-189
Priority MEDIUM 57
Stack-based buffer overflow in the AfxOleSetEditMenu function in the MFC component in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 Gold and SP1, and Visual Studio .NET 2002 Gold and SP1, and 2003 Gold and SP1 allo…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.11886 · Published 2007-03-20 · No fix listed
Priority MEDIUM 56
The Charts ActiveX control in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not properly handle errors during access to incorrectly initialized o…
CVSS 2.0HIGH 8.5· Network · Low privileges · Interaction — · EPSS 0.20976 · Published 2008-12-10 · No fix listed CWE-399
Priority MEDIUM 56
The FlexGrid ActiveX control in Microsoft Visual Basic 6.0, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, Office FrontPage 2002 SP3, and Office Project 2003 SP3 does not properly handle errors during access to incorrectly i…
CVSS 2.0HIGH 8.5· Network · Low privileges · Interaction — · EPSS 0.20976 · Published 2008-12-10 · No fix listed CWE-399
Priority MEDIUM 56
The DataGrid ActiveX control in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not properly handle errors during access to incorrectly initialized objects, which allows remote attackers to…
CVSS 2.0HIGH 8.5· Network · Low privileges · Interaction — · EPSS 0.20976 · Published 2008-12-10 · No fix listed CWE-264
Priority MEDIUM 54
The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1 does not properly enforce string termination, which…
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.343 · Published 2009-07-29 · No fix listed CWE-126
Load more