101 matches found
CVE-2011-1985
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which allows local users to gain privileges or cause a denial of...
CVE-2011-1985
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which allows local users to gain privileges or cause a denial of...
Microsoft Windows Kernel Win32k.sys本地权限提升漏洞(MS11-077)(CVE-2011-1985)
BUGTRAQ ID: 49968 CVE ID: CVE-2011-1985 Microsoft Windows是流行的计算机操作系统。 Windows Kernel在Win32k.sys的实现上存在本地权限提升漏洞，远程攻击者可利用此漏洞以内核权限执行任意代码，导致完全控制受影响计算机。 Microsoft Windows XP Microsoft Windows Server Microsoft Vista Microsoft Windows 7 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS11-077）以及相应补丁:...
MS11-077: Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (2567053)
The remote host is running a version of the Windows kernel that is affected by the following vulnerabilities : - A NULL pointer deference that could allow privilege escalation. CVE-2011-1985 - A DoS caused by processing a specially crafted TrueType font file. CVE-2011-2002 - A code execution...
CVE-2010-1985
Multiple cross-site scripting XSS vulnerabilities in the administrative user interface in Six Apart Movable Type 5.0 and 5.01 allow remote attackers to inject arbitrary web script or HTML via unknown vectors...
CVE-2010-1985
CVE-2010-1985 concerns multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface of Six Apart Movable Type 5.0 and 5.01. The issues allow remote attackers to inject arbitrary web script or HTML via unknown vectors, potentially impacting users of Movable Type Open So...
CVE-2010-1985
Multiple cross-site scripting XSS vulnerabilities in the administrative user interface in Six Apart Movable Type 5.0 and 5.01 allow remote attackers to inject arbitrary web script or HTML via unknown vectors...
CVE-2009-1985
CVE-2009-1985 is listed in the Oracle October 2009 CPU as affecting Oracle Database components (9.2.0.8/9.2.0.8DV, 10.1.0.5, 10.2.0.4) with a vulnerability in the Network Authentication area. The Oracle Risk Matrix attributes a remote, unauthenticated exploit (Network access) with a CVSS v2 base ...
CVE-2008-1985
Cross-site scripting XSS vulnerability in base.php in DigitalHive 2.0 RC2 allows remote attackers to inject arbitrary web script or HTML via the mt parameter, possibly related to membres.php...
CVE-2008-1985
This CVE concerns DigitalHive 2.0 RC2 with a Cross-site scripting (XSS) vulnerability in base.php, exploitable via the mt parameter and possibly related to membres.php. The NVD assessment assigns a CVSS v2 base score 4.3 (Medium), with network attack vector, no authentication required, and partia...
CVE-2007-1985
The CVE-2007-1985 entries describe multiple PHP remote file inclusion vulnerabilities in phpexplorator.php (phpexplorator 2.0). An attacker can supply a URL via the cmd or lang_path parameters to PHP scripts, enabling remote code execution. The impact is arbitrary PHP code execution with partial ...
CVE-2007-1985
Multiple PHP remote file inclusion vulnerabilities in phpexplorator.php in phpexplorator 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 cmd or 2 langpath parameter...
Mac OS X Multiple Vulnerabilities (Security Update 2006-003)
The remote host is running Apple Mac OS X, but lacks Security Update 2006-003. This security update contains fixes for the following applications : AppKit ImageIO BOM CFNetwork ClamAV Mac OS X Server only CoreFoundation CoreGraphics Finder FTPServer Flash Player KeyCHain LaunchServices libcurl Ma...
CVE-2006-1985
CVE-2006-1985: Heap-based buffer overflow in BOM BOMArchiveHelper (Mac OS X 10.4.6 and earlier) allows user-assisted arbitrary-code execution via crafted archives with long path names, triggering BOMStackPop. Documented impact and vulnerable component are described; no remediation details are pro...
Immunity Canvas: MS05_046
Name| ms05046 ---|--- CVE| CVE-2005-1985 Exploit Pack| CANVAS Description| Microsoft Netware Service RPC Overflow Notes| References: http://www.microsoft.com/technet/security/Bulletin/MS05-046.mspx CVE Name: CVE-2005-1985 VENDOR: Microsoft MSADV: MS05-046 Repeatability: One shot Note: Date public...
CVE-2005-1985
Summary : CVE-2005-1985 describes a remote code execution vulnerability in the Microsoft Windows Client Service for NetWare (CSNW/Gateway Service for NetWare). Affected products/versions : Windows 2000 SP4, Windows XP SP1/SP2, and Windows Server 2003 SP1 and earlier, where CSNW is installed (by d...
Microsoft NetWare Client Service Crafted Message Code Execution (MS05-046; CVE-2005-1985)
Microsoft's Client Service for Netware provides connectivity infrastructure for Novel Netware systems. A vulnerability was detected in the Client Service for NetWare service for several Microsoft Windows operating systems that can allow remote attackers to execute arbitrary code via a crafted...
CVE-2002-1985
CVE-2002-1985 concerns iSMTP 5.0.1. The remote denial of service arises from processing an excessively long MAIL FROM command, with a potential buffer overflow cited in multiple sources. The documents do not specify the exact root cause details (e.g., internal buffer size, parsing flow) or the af...
CVE-2004-1985
CVE-2004-1985 describes a cross-site scripting (XSS) vulnerability in Coppermine Photo Gallery 1.2.2b, specifically in menu.inc.php via the CPG_URL parameter. The issue allows remote attackers to inject arbitrary HTML or script. The provided sources (NVD/CVELIST) confirm the affected product/vers...