ZDI: Published Advisories

ZDI-09-085: Hewlett-Packard Operations Manager Server Backdoor Account Code Execution Vulnerability

Fri, 20 Nov 2009 12:00:00 +0000

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard Operations Manager. Authentication is not required to exploit this vulnerability.

ZDI-09-084: Apple Quicktime FIRE Codec Heap Buffer Overflow Vulnerability

Tue, 02 Jun 2009 12:00:00 +0000

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

ZDI-09-083: Microsoft Excel Shared Feature Header Pointer Offset Memory Corruption Vulnerability

Tue, 10 Nov 2009 12:00:00 +0000

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in that the target must open a malicious spreadsheet.

ZDI-09-082: Microsoft Office Excel PivotTable Cache Record Parsing Memory Corruption Vulnerability

Tue, 10 Nov 2009 12:00:00 +0000

ZDI-09-081: Hewlett-Packard Power Manager Administration Web Server Stack Overflow Vulnerability

Thu, 05 Nov 2009 12:00:00 +0000

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard Power Manager. Authentication is not required to exploit this vulnerability.

ZDI-09-080: Sun Java Runtime Environment JPEGImageReader Heap Overflow Vulnerability