OSVDB: The Open Source Vulnerability Database

Creditee: Jun Mao

Known Contact Information:

(as of 2007-05-08)

Known Affiliations:

iDefense Labs (as of 2007-05-08)

Disclosed Vulnerabilities (20):

Disc. Date	OSVDB ID	CVEID	Title
2010-06-16	65518	2010-2063	Samba smbd process.c chain_reply Function SMB1 Packet Chaining Memory Corruption
2009-12-08	60834	2009-2506	Microsoft WordPad / Office Text Converters Word97 File Handling Memory Corruption
2009-11-10	59857	2009-3135	Microsoft Office Word Document Malformed File Information Block (FIB) Parsing Memory Corruption
2009-07-30	56776	2009-1868	Adobe Multiple Products URL Parsing Heap-based Overflow
2009-06-09	56113	2009-1856	Adobe Reader / Acrobat PDF File FlateDecode Filter Parameter Handling Unspecified Overflow
2009-06-09	54932	2009-0228	Microsoft Windows Print Spooler win32spl.dll EnumeratePrintShares Function Remote Overflow
2009-06-09	54934	2009-0230	Microsoft Windows Print Spooler Load Library Crafted RPC Message Arbitrary DLL Loading Privilege Escalation
2009-04-14	53664	2009-0235	Microsoft WordPad Word 97 Text Converter File Handling Overflow
2008-12-09	50610	2008-4261	Microsoft IE EMBED Tag File Name Extension Overflow
2008-12-09	50561	2008-2249	Microsoft Windows GDI WMF Image Parsing Integer Math Overflow
2008-10-14	49077	2008-3477	Microsoft Excel Calendar Object Validation VBA Performance Cache Processing Arbitrary Code Execution
2008-08-12	47395	2008-2245	Microsoft Windows Image Color Management System (MSCMS) mscms.dll InternalOpenColorProfile Function ICM Image File Handling Overflow
2008-05-13	45032	2008-1434	Microsoft Word Document Malformed CSS Handling Memory Corruption Arbitrary Code Execution
2008-04-08	44213	2008-1083	Microsoft Windows GDI (gdi32.dll) EMF File Handling Multiple Overflows
2008-01-15	40896	2008-0032	Apple QuickTime Movie File Malformed Macintosh Resource Record Heap Corruption Arbitrary Code Execution
2007-12-11	39126	2007-3901	Microsoft Windows DirectX SAMI File Parsing Arbitrary Code Execution
2007-08-21	39751	2007-4218 2007-4219	Trend Micro ServerProtect for Windows (SpntSvc.exe) StRpcSrv.dll Multiple Function Remote Overflow
2007-08-21	39752	2007-4218	Trend Micro ServerProtect for Windows (SpntSvc.exe) Stcommon.dll Multiple Function Remote Overflow
2007-08-07	39750	2007-4218	Trend Micro ServerProtect for Windows Agent Service RPCFN_CopyAUSrc Function Remote Overflow
2007-05-08	34388	2007-1202	Microsoft Word RTF Rich Text Properties Parsing Remote Code Execution

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.