CVE-2013-1272

CVE-2013-1272 is a race-condition in win32k.sys (kernel-mode driver) that allows local users on affected Windows platforms to gain privileges and read arbitrary kernel memory. The vulnerability affects Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, and Windows 7 (Gold/SP1...

Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (2778344)

This host is missing an important security update according to Microsoft Bulletin MS13-016. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows 'Win32k.sys' CVE-2013-1272 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to gain elevated privileges and to read arbitrary amounts of kernel memory. Technologies Affected Avaya CallPilot 4.0 Avaya CallPilot 4.0.1 Avaya CallPilot 5.0 Avaya...

MS13-016: Vulnerabilities in Windows Kernel-Mode Driver Could Allow Elevation of Privilege (2778344)

The Windows kernel on the remote host has several race condition vulnerabilities. A local attacker could exploit any of these vulnerabilities to elevate privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid64577; scriptversion"1.11"; scriptcvsdate"Date:...

Ubuntu Update for linux USN-1272-1

Ubuntu Update for Linux kernel vulnerabilities USN-1272-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12721.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for linux USN-1272-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

CVE-2011-1272

Summary (CVE-2011-1272) : This vulnerability affects Microsoft Excel and related components (Excel 2002 SP3, 2003 SP3, 2007 SP2; Office 2004/2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; Office Compatibility Pack SP2) and is caused by improper validation of record struct...

MS11-045: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2537146)

The remote Windows host is running a version of Microsoft Excel or Excel Viewer that is affected by several vulnerabilities. If an attacker can trick a user on the affected host into opening a specially crafted Excel file, he or she could leverage this issue to execute arbitrary code subject to t...

CVE-2005-1272

creationtimestamp| type| source ---|---|--- 2010-04-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16403 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/brightstor/sqlagent.rb 2025-02-06 03:13:38+00:00| seen|...

CVE-2010-1272

PHP remote file inclusion vulnerability in includes/tgpinc.php in Gnat-TGP 1.2.20 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENTROOT parameter...

Gentoo Security Advisory GLSA 201001-03 (php)

The remote host is missing updates announced in advisory GLSA 201001-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

SuSE 11 Security Update : PHP5 (SAT Patch Number 1015)

This update fixes the JSON parser CVE-2009-1271 and the zip packer code CVE-2009-1272 in php5. Both bugs can lead to a remote denial of service attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

Mac OS X Multiple Vulnerabilities (Security Update 2009-005)

The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have Security Update 2009-005 applied. This security update contains fixes for the following products : - Alias Manager - CarbonCore - ClamAV - ColorSync - CoreGraphics - CUPS - Flash Player plug-in - ImageIO - Launch...

CVE-2009-1272

The phpzipmakerelativepath function in phpzip.c in PHP 5.2.x before 5.2.9 allows context-dependent attackers to cause a denial of service crash via a ZIP file that contains filenames with relative paths, which is not properly handled during extraction...

CVE-2009-1272

The vulnerability CVE-2009-1272 affects PHP 5.2.x prior to 5.2.9. The php_zip_make_relative_path function in php_zip.c can mishandle ZIP entries containing relative paths during extraction, enabling context-dependent attackers to trigger a crash (DoS). Affected component: PHP’s ZIP extraction log...

CVE-2008-1272

CVE-2008-1272 concerns BM Classifieds (20080309 and earlier) with multiple SQL injection vulnerabilities. The affected facet is the web application’s handling of user-supplied input: the cat parameter to showad.php and the ad parameter to pfriendly.php, which allow remote attackers to execute arb...

CVE-2008-1272

creationtimestamp| type| source ---|---|--- 2008-03-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5223...

Debian Security Advisory DSA 1272-1 (tcpdump)

The remote host is missing an update to tcpdump announced via advisory DSA 1272-1. Moritz Jodeit discovered an off-by-one buffer overflow in tcpdump, a powerful tool for network monitoring and data acquisition, which allows denial of service. OpenVAS Vulnerability Test $Id: deb12721.nasl 6616...

Debian DSA-1272-1 : tcpdump - buffer overflow

Moritz Jodeit discovered an off-by-one buffer overflow in tcpdump, a powerful tool for network monitoring and data acquisition, which allows denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

CVE-2006-1272

MyBB 1.0.3 contains multiple XSS vulnerabilities in member.php, exploitable via the fields aim, yahoo, msn, and website. Root cause: insufficient input sanitization in these fields leading to script or HTML injection, as described across CVE-2006-1272 entries. Document set does not include remedi...

BrightStor ARCserve Backup agent for MS-SQL buffer overflow

Added: 12/20/2005 CVE: CVE-2005-1272 BID: 14453 OSVDB: 18501 Background BrightStor ARCserve Backup is a backup and recovery solution for multiple platforms. Problem A buffer overflow in the backup agent for Microsoft SQL Server allows remote attackers to execute arbitrary commands. Resolution App...