Vulnerabilities > Critical

DATE CVE VULNERABILITY TITLE RISK
2013-09-11 CVE-2013-3203 Buffer Errors vulnerability in Microsoft Internet Explorer 10/9
Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3201, CVE-2013-3206, CVE-2013-3207, and CVE-2013-3209.
network
microsoft CWE-119
critical
9.3
2013-09-11 CVE-2013-3202 Buffer Errors vulnerability in Microsoft Internet Explorer 10
Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
network
microsoft CWE-119
critical
9.3
2013-09-11 CVE-2013-3201 Buffer Errors vulnerability in Microsoft Internet Explorer 10/9
Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3203, CVE-2013-3206, CVE-2013-3207, and CVE-2013-3209.
network
microsoft CWE-119
critical
9.3
2013-09-11 CVE-2013-3158 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Microsoft Excel 2003/2007
Microsoft Excel 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
network
microsoft CWE-119
critical
9.3
2013-09-11 CVE-2013-3157 Buffer Errors vulnerability in Microsoft Access 2007/2010/2013
Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Access file, aka "Access Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3155.
network
microsoft CWE-119
critical
9.3
2013-09-11 CVE-2013-3156 Buffer Errors vulnerability in Microsoft Access 2007/2010/2013
Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Access file, aka "Access File Format Memory Corruption Vulnerability."
network
microsoft CWE-119
critical
9.3
2013-09-11 CVE-2013-3155 Buffer Errors vulnerability in Microsoft Access 2007/2010/2013
Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Access file, aka "Access Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3157.
network
microsoft CWE-119
critical
9.3
2013-09-11 CVE-2013-1330 Improper Input Validation vulnerability in Microsoft products
The default configuration of Microsoft SharePoint Portal Server 2003 SP3, SharePoint Server 2007 SP3 and 2010 SP1 and SP2, and Office Web Apps 2010 does not set the EnableViewStateMac attribute, which allows remote attackers to execute arbitrary code by leveraging an unassigned workflow, aka "MAC Disabled Vulnerability."
network
low complexity
microsoft CWE-20
critical
10.0
2013-09-10 CVE-2013-3934 Buffer Errors vulnerability in Kingsoft Office 2012 and Writer 2012
Stack-based buffer overflow in Kingsoft Writer 2012 8.1.0.3030, as used in Kingsoft Office 2013 before 9.1.0.4256, allows remote attackers to execute arbitrary code via a long font name in a WPS file.
network
kingsoft CWE-119
critical
9.3
2013-09-10 CVE-2013-4983 OS Command Injection vulnerability in Sophos web Appliance Firmware
The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter to end-user/index.php.
network
low complexity
sophos CWE-78
critical
10.0