7997 matches found
EEYE: Windows VDM Zero Page Race Condition Privilege Escalation
Windows VDM Zero Page Race Condition Privilege Escalation Release Date: April 10, 2007 Date Reported: December 12, 2006 Severity: Medium Local Privilege Escalation to Kernel Systems Affected: Windows NT 4.0 SP6 Windows 2000 SP4 Windows XP SP2 x86 Windows Server 2003 SP2 x86 Overview: eEye Digital...
Memory corruption
Unspecified vulnerability in Microsoft Agent msagent\agentsvr.exe in Windows 2000 SP4, XP SP2, and Server 2003, 2003 SP1, and 2003 SP2 allows remote attackers to execute arbitrary code via crafted URLs, which result in memory corruption...
CVE-2007-1205
Unspecified vulnerability in Microsoft Agent msagent\agentsvr.exe in Windows 2000 SP4, XP SP2, and Server 2003, 2003 SP1, and 2003 SP2 allows remote attackers to execute arbitrary code via crafted URLs, which result in memory corruption...
CVE-2007-1205
Unspecified vulnerability in Microsoft Agent msagent\agentsvr.exe in Windows 2000 SP4, XP SP2, and Server 2003, 2003 SP1, and 2003 SP2 allows remote attackers to execute arbitrary code via crafted URLs, which result in memory corruption...
Race condition
The Virtual DOS Machine VDM in the Windows Kernel in Microsoft Windows NT 4.0; 2000 SP4; XP SP2; Server 2003, 2003 SP1, and 2003 SP2; and Windows Vista before June 2006; uses insecure permissions PAGEREADWRITE for a physical memory view, which allows local users to gain privileges by modifying th...
CVE-2007-1206
CVE-2007-1206 describes a Windows Kernel local privilege elevation due to incorrect permissions on a mapped memory segment (PAGE_READWRITE) for a physical memory view, enabling an unprivileged user to modify the zero page and gain privileges. Affected systems include Windows NT 4.0; 2000 SP4; XP ...
CVE-2007-1205
CVE-2007-1205 is a remote code execution vulnerability in Microsoft Agent (msagent\agentsvr.exe) on Windows 2000 SP4, Windows XP SP2, and Windows Server 2003 SP1/SP2. The flaw arises from how Microsoft Agent handles certain specially crafted URLs, leading to memory corruption and arbitrary code e...
Microsoft Security Bulletin MS07-020 Vulnerability in Microsoft Agent Could Allow Remote Code Execution (932168)
Microsoft Security Bulletin MS07-020 Vulnerability in Microsoft Agent Could Allow Remote Code Execution 932168 Published: April 10, 2007 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating:...
FileCOPA FTP Server <= 1.01 (LIST) Remote Buffer Overflow Exploit (2)
No description provided by source. ============================================================================================= FileCOPA FTP Server = 1.01 LIST Remote Buffer Overflow Exploit2 By Umesh Wanve...
filecopa-101.txt
============================================================================================= FileCOPA FTP Server = 1.01 LIST Remote Buffer Overflow Exploit2 By Umesh Wanve ============================================================================================= Date : 05-04-2007 Tested on...
FileCOPA FTP Server <= 1.01 (LIST) Remote Buffer Overflow Exploit (2)
Exploit for unknown platform in category remote exploits ===================================================================== FileCOPA FTP Server = 1.01 LIST Remote Buffer Overflow Exploit 2 =====================================================================...
FileCOPA FTP Server 1.01 - 'LIST' Remote Buffer Overflow (2)
============================================================================================= FileCOPA FTP Server = 1.01 LIST Remote Buffer Overflow Exploit2 By Umesh Wanve ============================================================================================= Date : 05-04-2007 Tested on...
FileCOPA FTP Server <= 1.01 (LIST) Remote Buffer Overflow Exploit (2)
No description provided by source. ============================================================================================= FileCOPA FTP Server = 1.01 LIST Remote Buffer Overflow Exploit2 By Umesh Wanve...
FileCOPA FTP Server 1.01 - LIST Remote Buffer Overflow (2)
FileCOPA FTP Server 1.01 - LIST Remote Buffer Overflow 2 ============================================================================================= FileCOPA FTP Server = 1.01 LIST Remote Buffer Overflow Exploit2 By Umesh Wanve...
CVE-2007-1211
Unspecified kernel GDI functions in Microsoft Windows 2000 SP4; XP SP2; and Server 2003 Gold, SP1, and SP2 allows user-assisted remote attackers to cause a denial of service possibly persistent restart via a crafted Windows Metafile WMF image that causes an invalid dereference of an offset in a...
Sql injection
Unspecified kernel GDI functions in Microsoft Windows 2000 SP4; XP SP2; and Server 2003 Gold, SP1, and SP2 allows user-assisted remote attackers to cause a denial of service possibly persistent restart via a crafted Windows Metafile WMF image that causes an invalid dereference of an offset in a...
CVE-2007-1213
The TrueType Fonts rasterizer in Microsoft Windows 2000 SP4 allows local users to gain privileges via crafted TrueType fonts, which result in an uninitialized function pointer...
CVE-2007-1213
The TrueType Fonts rasterizer in Microsoft Windows 2000 SP4 allows local users to gain privileges via crafted TrueType fonts, which result in an uninitialized function pointer...
ActSoft DVD-Tools (dvdtools.ocx) Remote Buffer Overflow Exploit
No description provided by source. !-- =============================================================================================== ActSoft DVD-Tools dvdtools.ocx Buffer Overflow Exploit By Umesh Wanve ============================================================================================...
Microsoft Windows动画光标ANI格式处理远程代码执行漏洞
Microsoft Internet Explorer是一款流行的WEB浏览器,Microsoft Windows是一款流行的操作系统。 Microsoft Windows在处理畸形的动画图标文件.ani时存在缓冲区溢出问题,远程攻击者可利用此漏洞以 当前用户进程权限执行任意指令。 Microsoft Windows在处理畸形动画光标文件.ani时没有正确地验证ANI头字段中所指定的大小,可导致基 于栈溢出漏洞。攻击者可以构建恶意WEB页或者包含ANI文件的EMAIL消息来触发,就会触发这个溢出,导致...