Microsoft Windows 'Win32k.sys' CVE-2013-1275 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to gain elevated privileges and to read arbitrary amounts of kernel memory. Technologies Affected Avaya CallPilot 4.0 Avaya CallPilot 4.0.1 Avaya CallPilot 5.0 Avaya...

MS13-016: Vulnerabilities in Windows Kernel-Mode Driver Could Allow Elevation of Privilege (2778344)

The Windows kernel on the remote host has several race condition vulnerabilities. A local attacker could exploit any of these vulnerabilities to elevate privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid64577; scriptversion"1.11"; scriptcvsdate"Date:...

Ubuntu: Security Advisory (USN-1275-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for linux USN-1275-1

Ubuntu Update for Linux kernel vulnerabilities USN-1275-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12751.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for linux USN-1275-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

CVE-2011-1275

CVE-2011-1275 affects Microsoft Excel components across Windows/macOS environments (Excel 2002 SP3; Office 2004/2008/2011 for Mac; Open XML File Format Converter for Mac). The issue arises from improper validation of record information during Excel file parsing, causing a memory handling error th...

MS11-045: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2537146)

The remote Windows host is running a version of Microsoft Excel or Excel Viewer that is affected by several vulnerabilities. If an attacker can trick a user on the affected host into opening a specially crafted Excel file, he or she could leverage this issue to execute arbitrary code subject to t...

CVE-2010-1275

CVE-2010-1275 concerns a Cross-site scripting (XSS) vulnerability in ShowPost.asp used by BBSXP 2008, exploitable via the ThreadID parameter to inject arbitrary script/HTML. The underlying issue is improper handling/escaping of the ThreadID input, enabling remote script execution. The provided do...

CVE-2009-1275

Apache Tiles 2.1 before 2.1.2, as used in Apache Struts and other products, evaluates Expression Language EL expressions twice in certain circumstances, which allows remote attackers to conduct cross-site scripting XSS attacks or obtain sensitive information via unspecified vectors, related to th...

CVE-2009-1275

Apache Tiles 2.1 before 2.1.2 (as used in Apache Struts and other products) is vulnerable because it evaluates EL expressions twice in certain circumstances, which can enable remote XSS or disclosure of sensitive information via the tiles:putAttribute and tiles:insertTemplate JSP tags. The CVE-20...

CVE-2008-1275

creationtimestamp| type| source ---|---|--- 2008-03-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5235...

CVE-2008-1275

Technical details (affected products, exact vulnerability mechanisms, and remediation) are not publicly provided in the supplied documents. Monitor for updates as new information may be released.

Debian Security Advisory DSA 1275-1 (zope2.7)

The remote host is missing an update to zope2.7 announced via advisory DSA 1275-1. A cross-site scripting vulnerability in zope, a web application server, could allow an attacker to inject arbitrary HTML and/or JavaScript into the victim's web browser. This code would run within the security...

Debian DSA-1275-1 : zope2.7 - XSS

A cross-site scripting vulnerability in zope, a web application server, could allow an attacker to inject arbitrary HTML and/or JavaScript into the victim's web browser. This code would run within the security context of the web browser, potentially allowing the attacker to access private data su...

CentOS 3 / 4 : ImageMagick (CESA-2005:413)

Updated ImageMagick packages that fix a buffer overflow issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. ImageMagickTM is an image display and manipulation tool for the X Window System which can read and write multiple...

CVE-2006-1275

GGZ Gaming Zone 0.0.12 is affected by CVE-2006-1275. The vulnerability allows remote attackers to cause a denial of service (client disconnect) through malformed XML inputs: (1) a trailing apostrophe in the ID attribute of a PLAYER XML tag, (2) a long ID attribute or non-trailing apostrophes that...

CVE-2003-1275

Pocket Internet Explorer (PIE) 3.0 is affected. A remote attacker can crash PIE by triggering a JavaScript function that uses the object.innerHTML function to recursively call itself, causing a denial of service. The provided documents do not specify a firmware/software patch, mitigation, or expl...

Important: Red Hat Security Advisory: ImageMagick security update

Updated ImageMagick packages that fix a buffer overflow issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. ImageMagickTM is an image display and manipulation tool for the X Window System which can read and write multiple...

CVE-2005-1275

CVE-2005-1275: A heap-based buffer overflow in ImageMagick’s ReadPNMImage (pnm.c) allows remote attackers to crash or run arbitrary code by tricking a user into opening a specially crafted PNM file. Affected: ImageMagick 6.2.1 and earlier (as per multiple advisories). Red Hat/CentOS and SUSE/Mand...

CVE-2005-1275

Heap-based buffer overflow in the ReadPNMImage function in pnm.c for ImageMagick 6.2.1 and earlier allows remote attackers to cause a denial of service application crash via a PNM file with a small colors value...

CVE-2004-1275

CVE-2004-1275 describes a buffer overflow in the remove_quote function of convert.c for html2hdml 1.0.3, allowing remote attackers to execute arbitrary code via a crafted HTML file. The vulnerability is evidenced in the NVD/NVD-derived records and CVE listings, with a high-severity CVSS 2.0 base ...