Carsten H. Eiram

A stack-based buffer overflow issue exists in the way window titles are managed in applications written using the Microsoft Foundation Class (MFC) Library. This issue allows context-dependent attackers to execute arbitrary code via a long window title. The vulnerability can be exploited if a remote attacker can influence the window title of any window in an MFC application, potentially allowing the attacker to run arbitrary code in the security context of the current user.

A remote code execution issue exists in the way Microsoft Excel handles specially crafted Lotus 1-2-3 workbook files (.wk3). This allows remote attackers to execute arbitrary code. An attacker who successfully exploits this issue could take complete control of an affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

A remote code execution issue exists due to improper validation of record information in Microsoft Excel, allowing attackers to execute arbitrary code via a crafted Excel document. This could enable an attacker to take complete control of an affected system, install programs, view, change, or delete data, or create new accounts with full user rights.

A remote code execution issue exists in Microsoft Office Excel, allowing attackers to execute arbitrary code via a crafted Excel file with a malformed record object. This could enable an attacker to take complete control of an affected system, install programs, view, change, or delete data, or create new accounts with full user rights.

The issue allows remote attackers to execute arbitrary code via an Excel file with a Shared String Table (SST) record containing a numeric field that specifies an invalid number of unique strings, triggering a heap-based buffer overflow. This could enable an attacker to take complete control of an affected system, allowing them to install programs, view, change, or delete data, or create new accounts with full user rights.

The issue is related to the handling of specially crafted PowerPoint files, which can trigger memory corruption due to a large amount of data associated with unspecified atoms. This can lead to remote code execution. An attacker could exploit this by creating a specially crafted PowerPoint file that could be included as an e-mail attachment or hosted on a specially crafted or compromised Web site.

The issue concerns multiple cross-site scripting (XSS) vulnerabilities in the booking3.php file of the Mole Group Ticket Booking Script. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via several parameters, including `name`, `address1`, `address2`, `county`, `postcode`, `email`, `phone`, and `mobile`, which are passed to booking2.php.