Integer overflow

Integer overflow in Microsoft Paint in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted JPEG .JPG file, aka "MS Paint Integer Overflow Vulnerability."...

Stack overflow

Stack-based buffer overflow in Microsoft Office PowerPoint 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "Office PowerPoint Viewer TextCharsAtom Record Stack Overflow Vulnerability."...

Memory corruption

The SMB client implementation in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly validate response fields, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted response, aka "SMB Client Pool Corruption...

Heap overflow

Heap-based buffer overflow in DirectShow in Microsoft DirectX, as used in the AVI Filter on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2, and in Quartz on Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server...

CVE-2010-0252

The Microsoft Data Analyzer ActiveX control aka the Office Excel ActiveX control for Data Analysis in max3activex.dll in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remot...

CVE-2010-0028

Integer overflow in Microsoft Paint in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted JPEG .JPG file, aka "MS Paint Integer Overflow Vulnerability."...

Microsoft Client/Server Run-time Subsystem Privilege Elevation Vulnerability (978037)

This host is missing a critical security update according to Microsoft Bulletin MS10-011. OpenVAS Vulnerability Test $Id: secpodms10-011.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft Client/Server Run-time Subsystem Privilege Elevation Vulnerability 978037 Authors: Antu Sanadi Copyright: Copyrig...

Microsoft SMB Client Remote Code Execution Vulnerabilities (978251)

This host is missing a critical security update according to Microsoft Bulletin MS10-006. OpenVAS Vulnerability Test $Id: secpodms10-006.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft SMB Client Remote Code Execution Vulnerabilities 978251 Authors: Antu Sanadi Updated By: Madhuri D on...

Microsoft DirectShow Remote Code Execution Vulnerability (977935)

This host is missing a critical security update according to Microsoft Bulletin MS10-013. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Security Bulletin MS10-005 - Moderate Vulnerability in Microsoft Paint Could Allow Remote Code Execution (978706)

Microsoft Security Bulletin MS10-005 - Moderate Vulnerability in Microsoft Paint Could Allow Remote Code Execution 978706 Published: February 09, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Microsoft Paint. The...

Microsoft Paint Remote Code Execution Vulnerability (978706)

This host is missing a critical security update according to Microsoft Bulletin MS10-005. OpenVAS Vulnerability Test $Id: secpodms10-005.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft Paint Remote Code Execution Vulnerability 978706 Authors: Madhuri D Copyright: Copyright c 2010 SecPod,...

Microsoft Security Bulletin MS10-011 - Important Vulnerability in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege (978037)

Microsoft Security Bulletin MS10-011 - Important Vulnerability in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege 978037 Published: February 09, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in...

Microsoft Security Bulletin MS10-007 - Critical Vulnerability in Windows Shell Handler Could Allow Remote Code Execution (975713)

Microsoft Security Bulletin MS10-007 - Critical Vulnerability in Windows Shell Handler Could Allow Remote Code Execution 975713 Published: February 09, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Microsoft Windows 200...

Microsoft Security Bulletin MS10-014 - Important Vulnerability in Kerberos Could Allow Denial of Service (977290)

Microsoft Security Bulletin MS10-014 - Important Vulnerability in Kerberos Could Allow Denial of Service 977290 Published: February 09, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability...

stratsec Security Advisory SS-2010-003 - Microsoft SMB Client Pool Overflow

=============================================================================== Stratsec Security Advisory: SS-2010-003 =============================================================================== Title: Microsoft SMB Client Pool Overflow MS10-006 Version: 1.0 Issue type: Pool overflow Affecte...

Microsoft Kerberos Denial of Service Vulnerability (977290)

This host is missing a critical security update according to Microsoft Bulletin MS10-014. OpenVAS Vulnerability Test $Id: secpodms10-014.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft Kerberos Denial of Service Vulnerability 977290 Authors: Antu Sanadi Updated by : Madhuri D on 2010-01-10 - To...

Microsoft Client/Server Run-time Subsystem Privilege Elevation Vulnerability (978037)

This host is missing a critical security update according to Microsoft Bulletin MS10-011. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Kerberos Denial of Service Vulnerability (977290)

This host is missing a critical security update according to Microsoft Bulletin MS10-014. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Security Update for Microsoft Office Outlook 2003 (KB973705)

A security vulnerability exists in Microsoft Office Outlook 2003 that could allow arbitrary code to run when a maliciously modified web page is opened. This update resolves that vulnerability...

Microsoft Windows SMB Client Pool Corruption Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute code with SYSTEM-level privileges. Failed exploit attempts will likely cause denial-of-service conditions. Technologies Affected Avaya Meeting Exchange - Client...