CVE-2017-0079

The kernel-mode drivers in Windows 8.1; Windows Server 2012 R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is different from those described in...

CVE-2017-0079

Technical details for CVE-2017-0079 are not publicly available in the provided documents; monitor for updates.

MS17-018: Security Update for Windows Kernel-Mode Drivers (4013083)

The remote Windows host is missing a security update. It is, therefore, affected by multiple elevation of privilege vulnerabilities in the Windows kernel-mode driver due to improper handling of objects in memory. A local attacker can exploit this, via a specially crafted application, to run...

Microsoft Windows Kernel 'Win32k.sys' CVE-2017-0079 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsof...

CVE-2016-0079

creationtimestamp| type| source ---|---|--- 2016-10-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40608...

CVE-2016-0079

CVE-2016-0079 affects Windows 10 (versions Gold, 1511, 1607) where the Windows Kernel API improperly allows a locally authenticated user to access sensitive registry information, enabling local privilege escalation. The root cause is a kernel API design/implementation flaw that permits access to ...

Microsoft Windows Registry Multiple Vulnerabilities (3193227)

This host is missing an important security update according to Microsoft Bulletin MS16-124 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Kernel Local Elevation of Privilege (MS16-124: CVE-2016-0079)

An elevation of privilege vulnerability exists in Microsoft Windows. The vulnerability is due to the way Windows kernel API improperly allows a user to access sensitive registry information. A remote attacker can exploit this vulnerability by enticing a user to run a specially crafted executable...

Oracle: Security Advisory (ELSA-2012-0079)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-0079

Microsoft Windows Remote Desktop Protocol (RDP) Denial of Service (CVE-2015-0079) affects Windows 7 SP1, Windows 8/8.1, and Windows Server 2012/2012 R2. The root cause is failure to properly free memory when multiple RDP sessions are established, allowing remote, unauthenticated attackers to exha...

Microsoft Windows Remote Desktop Protocol Denial of Service (MS15-030; CVE-2015-0079)

A denial of service vulnerability exists in Microsoft Windows Remote Desktop Protocol RDP. The vulnerability is caused when RDP does not properly handle objects in memory. A remote attacker can exploit this issue by exhausting the system memory by creating multiple RDP sessions...

MS15-030: Vulnerability in Remote Desktop Protocol Could Allow Denial of Service (3039976)

The remote Windows host is affected by a vulnerability due to a failure by the Remote Desktop Protocol RDP to properly free objects in memory. A remote, unauthenticated attacker, by creating multiple RDP sessions, can exploit this to exhaust the system memory and cause a denial of service. C...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-4457)

Mozilla Firefox was updated to the 4.0.1 security release. MFSA 2011-12: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances,...

CVE-2014-0079

The CVE-2014-0079 issue affects Zarafa’s ValidateUserLogon path in provider/libserver/ECSession.cpp, enabling remote denial of service (crash) via a NULL password pointer. Affected products/versions identified in sources include Zarafa 7.1.8, 6.20.0 and earlier. Public disclosures and advisories ...

CVE-2014-0079

The ValidateUserLogon function in provider/libserver/ECSession.cpp in Zarafa 7.1.8, 6.20.0, and earlier, when using certain build conditions, allows remote attackers to cause a denial of service crash via vectors related to "a NULL pointer of the password."...

Mandriva Linux Security Advisory : zarafa (MDVSA-2014:044)

Robert Scheck discovered multiple vulnerabilities in Zarafa that could allow a remote unauthenticated attacker to crash the zarafa-server daemon, preventing access to any other legitimate Zarafa users CVE-2014-0037, CVE-2014-0079. The updated packages have been upgraded to the 7.1.8 version which...

Fedora Update for zarafa FEDORA-2014-1900

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for zarafa FEDORA-2014-1883

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ScozBook auth.php adminname Parameter SQL Injection - Ver2 (CVE-2006-0079)

An SQL injection vulnerability has been reported in ScozNet ScozBook BETA. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

Oracle Linux 5 / 6 : firefox (ELSA-2012-0079)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0079 advisory. firefox: 3.6.26-1.0.1.el62 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat ones 3.6.26-1 - Update to 3.6.26 xulrunner:...