CVE-2013-1262

CVE-2013-1262 describes a race condition in the Windows kernel surface, specifically the win32k.sys kernel-mode driver. The vulnerability allows local attackers to gain privileges and read arbitrary kernel memory locations through a crafted application. Affected products include various Windows e...

CVE-2013-1262

Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kerne...

Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (2778344)

This host is missing an important security update according to Microsoft Bulletin MS13-016. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows 'Win32k.sys' CVE-2013-1262 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to gain elevated privileges and to read arbitrary amounts of kernel memory. Technologies Affected Avaya CallPilot 4.0 Avaya CallPilot 4.0.1 Avaya CallPilot 5.0 Avaya...

MS13-016: Vulnerabilities in Windows Kernel-Mode Driver Could Allow Elevation of Privilege (2778344)

The Windows kernel on the remote host has several race condition vulnerabilities. A local attacker could exploit any of these vulnerabilities to elevate privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid64577; scriptversion"1.11"; scriptcvsdate"Date:...

Scientific Linux Security Update : squirrelmail on SL5.x, SL4.x, SL3.x i386/x86_64

Several HTML filtering bugs were discovered in SquirrelMail. An attacker could inject arbitrary JavaScript leading to cross-site scripting attacks by sending an e-mail viewed by a user within SquirrelMail. CVE-2007-1262 Squirrelmail did not sufficiently check arguments to IMG tags in HTML e-mail...

Ubuntu: Security Advisory (USN-1262-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-1262

Cross-site scripting XSS vulnerability in cgi-bin/mt/mt-wizard.cgi in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13, when the product is incompletely installed, allows remote attackers to inject arbitrary web script or HTML via the dbuser parameter, a different vulnerability th...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allow remote attackers to inject arbitrary web script or HTML via vectors involving templates, a different issue than CVE-2012-1262...

CVE-2012-1262

CVE-2012-1262 is a cross-site scripting (XSS) vulnerability in Movable Type’s cgi-bin/mt/mt-wizard.cgi. It affects Movable Type releases prior to 4.38, 5.0x prior to 5.07, and 5.1x prior to 5.13 when the product is incompletely installed. The issue allows remote attackers to inject arbitrary web ...

Movable Type Publishing Platform Cross Site Scripting

Trustwave's SpiderLabs Security Advisory TWSL2012-003: Cross-Site Scripting Vulnerability in Movable Type Publishing Platform https://www.trustwave.com/spiderlabs/advisories/TWSL2012-003.txt Published: 2012-02-24 Version: 1.0 Vendor: Six Apart http://movabletype.org/ Product: Movable Type Version...

Fortinet FortiClient Crafted VPN Connection Name Handling Local Format String

FortiClient, a client-based software solution intended to provide security features for enterprise computers and mobile devices, is installed on the remote Windows host. The installed version does not properly handle format string specifiers within a VPN connection name. A local user may be able ...

ZDI-11-196: Microsoft Internet Explorer HTTP 302 Redirect Remote Code Execution Vulnerability

ZDI-11-196: Microsoft Internet Explorer HTTP 302 Redirect Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-196 June 14, 2011 -- CVE ID: CVE-2011-1262 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Microsoft -- Affected Products: Microsoft...

CVE-2011-1262

CVE-2011-1262 affects Microsoft Internet Explorer 7–9. The flaw arises in how IE handles HTTP 302 redirects to CDL protocols, where a reference counter for a transaction object can be corrupted, causing a use-after-free that enables remote code execution. The vulnerability is described as memory ...

Microsoft Internet Explorer HTTP重定向未初始化内存远程代码执行漏洞

Bugtraq ID: 48211 CVE ID：CVE-2011-1262 Microsoft Internet Explorer是一款微软开发的WEB浏览器。 Internet Explorer处理HTTP 302重定向到CDL协议存在缺陷。当Internet Explorer判断哪个负责处理协议重定向时，未能维护一个正确的用于事务对象的引用计数器，结果可导致释放后使用漏洞，可以以应用程序上下文执行任意代码 Microsoft Internet Explorer 9 Microsoft Internet Explorer 8 Microsoft Internet Explorer 7...

Internet Explorer Redirect CDL Protocol Memory Corruption (MS11-050; CVE-2011-1262)

A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due to a memory corruption error in Internet Explorer when handling CDL protocol. Successful exploitation of this vulnerability will crash the browser, and may allow execution of arbitrary code on t...

Microsoft IE CStyleSheet对象释放后使用漏洞（MS10-035）

BUGTRAQ ID: 40417 CVE ID: CVE-2010-1262 Internet Explorer是Windows操作系统中默认捆绑的web浏览器。 Internet Explorer对CStyleSheet对象支持的实现方式中存在释放后使用漏洞。在创建样式表数组时，其中会包含有对其根容器的引用。如果所创建的样式表不属于标记中元素，则在销毁元素时也会释放根容器。之后应用再试图使用样式表时就会使用无效的指针，导致以当前用户权限执行任意代码。 Microsoft Internet Explorer 8.0 Microsoft Internet Explorer 7.0...

CVE-2010-1262

CVE-2010-1262 affects Microsoft Internet Explorer 6 SP1/SP2, 7, and 8, allowing remote code execution through memory corruption involving the CStyleSheet object and a free of the root container. The issue was addressed by MS10-035, a cumulative security update for Internet Explorer, which resolve...

F-Secure Products Malware Detection Bypass Vulnerability (Windows)

This host is installed with F-Secure Product and is prone to Malware Detection Bypass Vulnerability. OpenVAS Vulnerability Test $Id: secpodfsecureprdtssecbypassvulnwin.nasl 5369 2017-02-20 14:48:07Z cfi $ F-Secure Products Malware Detection Bypass Vulnerability Windows Authors: Sharath S Copyrigh...

CVE-2009-1262

Fortinet FortiClient 3.0.614 (and possibly earlier) contains a local format-string vulnerability in the handling of VPN connection names. The flaw allows a local user to read and write arbitrary memory with SYSTEM privileges by supplying crafted format specifiers, enabling code execution under SY...