CVE-2005-3235

CVE-2005-3235 concerns multiple interpretation errors in unspecified versions of Proland Protector Plus 2000 Antivirus, enabling remote attackers to bypass virus detection via a malicious executable embedded in a specially crafted RAR file with malformed central and local headers. The same crafte...

Microsoft Security Bulletin MS05-051 Vulnerabilities in MSDTC and COM+ Could Allow Remote Code Execution (902400)

Microsoft Security Bulletin MS05-051 Vulnerabilities in MSDTC and COM+ Could Allow Remote Code Execution 902400 Published: October 11, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Ratin...

Microsoft Distributed Transaction Coordinator service memory corruption

Memory corruption as a result of integer overflow with anonymous remote access Windows 2000 and authenticated access under Windows XP/2003...

[SEC-1 Advisory] GFI MailSecurity 8.1 Web Module Buffer Overflow

SEC-1 LTD. www.sec-1.com Security Advisory Advisory Name: GFI MailSecurity 8.1 Web Module Buffer Overflow Release Date: 12/October/2005 Application: GFI MailSecurity For SMTP version 8.1 Platform: Verified on Windows 2000 Server Severity: Remote Code Execution Author: Gary O'leary-Steele Vendor...

[EEYEB20050708] Microsoft Distributed Transaction Coordinator Memory Modification Vulnerability

Microsoft Distributed Transaction Coordinator Memory Modification Vulnerability Release Date: October 11, 2005 Date Reported: July 8, 2005 Severity: High Remote Code Execution Vendor: Microsoft Systems Affected: Windows 2000 Server SP0 - SP4 - Vulnerable - Anonymous remotely exploitable by defaul...

Microsoft Security Bulletin MS05-048 Vulnerability in the Microsoft Collaboration Data Objects Could Allow Remote Code Execution (907245)

Microsoft Security Bulletin MS05-048 Vulnerability in the Microsoft Collaboration Data Objects Could Allow Remote Code Execution 907245 Published: October 11, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows or Microsoft Exchange Server Impact of...

Microsoft Security Bulletin MS05-045 Vulnerability in Network Connection Manager Could Allow Denial of Service (905414)

Microsoft Security Bulletin MS05-045 Vulnerability in Network Connection Manager Could Allow Denial of Service 905414 Published: October 11, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Denial of Service Maximum Severity...

[EEYEB20050803] - Windows UMPNPMGR wsprintfW Stack Buffer Overflow Vulnerability

Windows UMPNPMGR wsprintfW Stack Buffer Overflow Vulnerability Release Date: October 11, 2005 Date Reported: August 3, 2005 Severity: High Remote Code Execution with Authentication Medium Privilege Escalation to SYSTEM Vendor: Microsoft Systems Affected: Windows NT 4.0 Windows 2000 Windows XP eEy...

Microsoft Security Bulletin MS05-046 Vulnerability in the Client Service for NetWare Could Allow Remote Code Execution (899589)

Microsoft Security Bulletin MS05-046 Vulnerability in the Client Service for NetWare Could Allow Remote Code Execution 899589 Published: October 11, 2005 Version: 1.0 Summary Who should read this document: Customers who use the Client or Gateway Service for NetWare Impact of Vulnerability: Remote...

Microsoft Security Bulletin MS05-049 Vulnerabilities in Windows Shell Could Allow Remote Code Execution (900725)

Microsoft Security Bulletin MS05-049 Vulnerabilities in Windows Shell Could Allow Remote Code Execution 900725 Published: October 11, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating...

Microsoft Distributed Transaction Coordinator vulnerable to buffer overflow via specially crafted network message

Overview Microsoft Distributed Transaction Coordinator MSDTC may be vulnerable to a flaw that allows remote unauthenticated attackers to execute arbitrary code. Description The Microsoft Distributed Transaction Coordinator MSDTC is described by Microsoft as "distributed transaction facility for...

Microsoft MSDTC COM+ Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a vulnerability in the COM+ Component Object Model functionality of the MSDTC Microsoft Distribution Transaction Coordinator service. This issue may permit remote and local attackers to execute arbitrary code in the context of the service. This issue may ...

Microsoft Plug and Play fails to properly validate user supplied data

Overview Microsoft Plug and Play contains a flaw in message buffer handling that may result in local or remote arbitrary code execution or a denial-of-service condition. Description The following is from the Microsoft Plug and Play description: Plug and Play PnP allows the operating system to...

Microsoft MSDTC TIP Denial Of Service Vulnerability

Description The Microsoft Windows MSDTC Microsoft Distribution Transaction Coordinator service is prone to a denial of service vulnerability. The vulnerability exists in the TIP Transaction Internet Protocol functionality that is provided by MSDTC. This vulnerability may be exploited by a remote...

MS05-050: Vulnerability in DirectShow Could Allow Remote Code Execution (904706)

The remote host contains a version of DirectX that is vulnerable to a remote code execution flaw. To exploit this flaw, an attacker would need to send a specially malformed .avi file to a user on the remote host and have him open it. C Tenable Network Security, Inc. include"compat.inc"; if...

MS05-051: Vulnerabilities in MSDTC and COM+ Could Allow Remote Code Execution (902400)

The remote version of Windows contains a version of MSDTC and COM+ that is affected by several remote code execution, local privilege escalation and denial of service vulnerabilities. An attacker may exploit these flaws to obtain the complete control of the remote host. C Tenable Network Security...

MS05-048: Vulnerability in the Microsoft Collaboration Data Objects Could Allow Remote Code Execution (907245)

An unchecked buffer condition could allow an attacker to execute arbitrary code on the remote host. To execute this flaw, an attacker would need to send a malformed message via SMTP to the remote host, either by using the SMTP server if Exchange is installed or by sending an email to a user on th...

Microsoft Windows Malicious Shortcut Handling Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code execution vulnerability when handling a malicious shortcut .lnk file. An attacker can exploit this issue by crafting a malicious file and placing it on a Web site or sending it to a user through email followed by enticing them to open it and...

Microsoft MSDTC TIP Distributed Denial Of Service Vulnerability

Description The Microsoft MSDTC Microsoft Distribution Transaction Coordinator service is prone to a vulnerability that may permit denial of service attacks against the service or facilitate distributed denial of service attacks against other computers. The vulnerability exists in the TIP...

MS05-047: Vulnerability in Plug and Play Could Allow Remote Code Execution and Local Elevation of Privilege (905749)

The remote host contains a version of the Plug and Play service that contains a vulnerability in the way it handles user-supplied data. An authenticated attacker could exploit this flaw by sending a malformed RPC request to the remote service and execute code within the SYSTEM context. C Tenable...