97 matches found
CVE-2013-1257
Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kerne...
CVE-2013-1257
The CVE-2013-1257 issue is a race condition in the Windows kernel‑mode driver win32k.sys that affects multiple Windows variants (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, and Windows 7 SP0/SP1). The underlying vulnerability allows local attackers to escalate privileges and r...
Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (2778344)
This host is missing an important security update according to Microsoft Bulletin MS13-016. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MS13-016: Vulnerabilities in Windows Kernel-Mode Driver Could Allow Elevation of Privilege (2778344)
The Windows kernel on the remote host has several race condition vulnerabilities. A local attacker could exploit any of these vulnerabilities to elevate privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid64577; scriptversion"1.11"; scriptcvsdate"Date:...
Fedora Update for libexif FEDORA-2013-1257
Check for the Version of libexif OpenVAS Vulnerability Test Fedora Update for libexif FEDORA-2013-1257 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
pidgin OTR information leakage
Pidgin transmits OTR off-the-record conversations over DBUS in plaintext. This makes it possible for attackers that have gained user-level access on a host, to listen in on private conversations associated with the victim account. Pidgin is a popular Instant Messenger application that runs on a...
CVE-2012-1257
creationtimestamp| type| source ---|---|--- 2012-02-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36884...
libpurple 2.8.10 - OTR Information Disclosure
libpurple 2.8.10 - OTR Information Disclosure source: https://www.securityfocus.com/bid/52175/info libpurple is prone to an information-disclosure vulnerability. Successful exploits may allow attackers to obtain potentially sensitive information that may aid in other attacks. The following produc...
Microsoft Internet Explorer Multiple Vulnerabilities (2559049)
This host is missing a critical security update according to Microsoft Bulletin MS11-057. OpenVAS Vulnerability Test $Id: secpodms11-057.nasl 6526 2017-07-05 05:43:52Z cfischer $ Microsoft Internet Explorer Multiple Vulnerabilities 2559049 Authors: Rachana Shetty Copyright: Copyright c 2011 SecPo...
CVE-2011-1257
Microsoft Internet Explorer 6–8 are affected by a race condition in window.open, which can allow remote code execution or memory corruption when a user visits a malicious page. The vulnerability is addressed by MS11-057 (Cumulative Security Update for Internet Explorer, Aug 9, 2011). OpenVAS entr...
CVE-2011-1257
Race condition in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via vectors involving access to an object, aka "Window Open Race Condition Vulnerability."...
Fwd: {Lostmonґs Group} Internet Explorer 6, 7 and 8 Window.open race condition Vulnerability
Internet Explorer 6, 7 and 8 Window.open race condition Vulnerability Vendor URL: http://www.microsoft.com Advisore: http://lostmon.blogspot.com/2011/08/internet-explorer-6-7-and-8-windowopen.html Coordinate Dislcosure: YES exploit available: Private CVE-2011-1257 and MS011-57 Microsoft Internet...
MS11-057: Critical Cumulative Security Update for Internet Explorer (2559049)
The remote host is missing Internet Explorer IE Security Update 2559049. The installed version of IE is affected by several vulnerabilities that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid55787...
Cisco Catalyst 6000, 6500 Series and Cisco 7600 Series NAM (Network Analysis Module) Vulnerability
Cisco Catalyst 6000, 6500 series and Cisco 7600 series that have a Network Analysis Module installed are affected by a vulnerability, which could allow an attacker to gain complete control of the system. Only Cisco Catalyst systems that have a NAM on them are affected. This vulnerability affects...
CVE-2010-1257
Cross-site scripting XSS vulnerability in the toStaticHTML API, as used in Microsoft Office InfoPath 2003 SP3, 2007 SP1, and 2007 SP2; Office SharePoint Server 2007 SP1 and SP2; SharePoint Services 3.0 SP1 and SP2; and Internet Explorer 8 allows remote attackers to inject arbitrary web script or...
CVE-2010-1257
CVE-2010-1257 is described as an XSS flaw in the toStaticHTML API affecting InfoPath 2003/2007, SharePoint products, and IE8. Public docs here identify IE vulnerabilities addressed by MS10-035 (Internet Explorer cumulative security update) that resolves remote code execution/related issues. The C...
Internet Explorer toStaticHTML Information Disclosure (MS10-035; CVE-2010-1257)
An information disclosure vulnerability has been reported in Internet Explorer. The vulnerability is due to the way IInternet Explorer handles content using specific strings when sanitizing HTML. To trigger this issue, an attacker may create a malicious web page that will cause Internet Explorer ...
Magic ISO Maker Buffer Overflow Vulnerability
This host is running Magic ISO Maker and is prone to Heap-Based Buffer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: gbmagicisomakerbofvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ Magic ISO Maker Buffer Overflow Vulnerability Authors: Sujit Ghosal Copyright: Copyright c 2009 Greenbone...
CVE-2009-1257
CVE-2009-1257 describes a heap-based buffer overflow in Magic ISO Maker 5.5 build 274 (0274) that can be triggered by a crafted CCD file. This vulnerability permits remote attackers to cause a crash (DoS) or potentially execute arbitrary code. Public records consistently identify the affected pro...