10084 matches found
Double free
Double free vulnerability in the Workstation service in Microsoft Windows allows remote authenticated users to gain privileges via a crafted RPC message to a Windows XP SP2 or SP3 or Server 2003 SP2 system, or cause a denial of service via a crafted RPC message to a Vista Gold, SP1, or SP2 or...
Integer overflow
Integer overflow in Avifil32.dll in the Windows Media file handling functionality in Microsoft Windows allows remote attackers to execute arbitrary code on a Windows 2000 SP4 system via a crafted AVI file, or cause a denial of service on a Windows XP SP2 or SP3, Server 2003 SP2, Vista Gold, SP1, ...
CVE-2009-2496
CVE-2009-2496 : Heap-based/heap corruption vulnerability in the OWC10.Spreadsheet ActiveX control of Microsoft Office Web Components. Exploitation requires a user to load a malicious web page and trigger a specific sequence of method calls, leading to remote code execution. Affected products incl...
CVE-2009-1534
CVE-2009-1534 : Buffer overflow in the Office Web Components ActiveX Control used by Microsoft Office Web Components across multiple products (Office XP/2000 Web Components SP3, BizTalk Server 2002, Visual Studio .NET 2003 SP1) enables remote code execution via crafted property values. The issue ...
MS Windows 2003 (EOT File) BSOD Crash Exploit
No description provided by source. MS Windows 2003 EOT File BSOD Crash Exploit author: webDEViL http://milw0rm.com/sploits/2009-wwbsod.zip http://sebug.net/local/2009-exploits/0908-exploits/2009-wwbsod.zip...
ZDI-09-053: Microsoft Windows WINS Service Heap Overflow Vulnerability
ZDI-09-053: Microsoft Windows WINS Service Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-053 August 11, 2009 -- CVE ID: CVE-2009-1923 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Windows 2003 SP2 Microsoft Windows 2000 SP4 -- TippingPointTM IPS...
Microsoft Windows畸形AVI文件解析多个代码执行漏洞（MS09-038）
BUGTRAQ ID: 35970,35967 CVECAN ID: CVE-2009-1546,CVE-2009-1545 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows处理特制AVI格式文件的方式中存在整数溢出和指针引用错误。如果用户打开了特制的AVI文件，这些漏洞可能允许执行代码。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windows...
[PT-2008-09] Microsoft Windows MSMQ Privilege Escalation Vulnerability
---------------------------------------------------------------------- PT-2008-09 Positive Technologies Security Advisory Microsoft Windows MSMQ Privilege Escalation Vulnerability ---------------------------------------------------------------------- --- Affected Software Microsoft Windows 2000...
Microsoft Windows Telnet NTLM凭据反射绕过认证漏洞（MS09-042）
BUGTRAQ ID: 35993 CVECAN ID: CVE-2009-1930 Microsoft Windows是微软发布的非常流行的操作系统。 Telnet协议未正确地选择加入NTLM凭据反射保护以确保用户凭据不被反射回来并供用户使用。如果用户受骗连接到了恶意的Telnet服务器，就可能导致反射NTLM凭据并以当前用户的权限获得系统访问。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windo...
Microsoft Windows AVI Media File Parsing Vulnerabilities (971557)
This host is missing a critical security update according to Microsoft Bulletin MS09-038. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MS09-039: Vulnerabilities in WINS Could Allow Remote Code Execution (969883)
The remote host has a Windows WINS server installed. The remote version of this server contains two vulnerabilities that may allow an attacker to execute arbitrary code on the remote system : - A heap overflow vulnerability can be exploited by any attacker. - A integer overflow vulnerability can ...
Microsoft Windows Kernel win32k.sys Privilege Escalation Vulnerability
Windows XP/2003 is prone to Privilege Escalation vulnerability. OpenVAS Vulnerability Test $Id: gbmswinkernelwin32ksysprivescvuln.nasl 5363 2017-02-20 13:07:22Z cfi $ Microsoft Windows Kernel 'win32k.sys' Privilege Escalation Vulnerability Authors: Sharath S Copyright: Copyright c 2009 Greenbone...
MS09-041: Vulnerability in Workstation Service Could Allow Elevation of Privilege (971657)
The remote host contains a version of the 'Workstation' service that contains a memory corruption vulnerability that might allow an attacker with valid credentials to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid40560;...
Microsoft Windows Embedded OpenType Font Engine Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability that may affect the Embedded OpenType font engine. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will completely compromise affected computers...
Microsoft Security Bulletin MS09-039 - Critical Vulnerabilities in WINS Could Allow Remote Code Execution (969883)
Microsoft Security Bulletin MS09-039 - Critical Vulnerabilities in WINS Could Allow Remote Code Execution 969883 Published: August 11, 2009 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in the Windows Internet Name Service...
MS Windows 2003 (EOT File) BSOD Crash Exploit
Exploit for unknown platform in category dos / poc ============================================= MS Windows 2003 EOT File BSOD Crash Exploit ============================================= MS Windows 2003 EOT File BSOD Crash Exploit author: webDEViL http://inj3ct0r.com/sploits/6962.zip 0day.today...
Microsoft Windows WINS Server Network Packet Remote Heap Buffer Overflow Vulnerability
Description The Microsoft Windows WINS Server is prone to a remote heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges...
Microsoft Security Bulletin MS09-042 - Important Vulnerability in Telnet Could Allow Remote Code Execution (960859)
Microsoft Security Bulletin MS09-042 - Important Vulnerability in Telnet Could Allow Remote Code Execution 960859 Published: August 11, 2009 Version: 1.0 General Information Executive Summary This security update resolves a publicly disclosed vulnerability in the Microsoft Telnet service. The...
MS09-043: Description of the security update for Office 2003 Web Components and Office XP Web Components in Office 2003: August 11, 2009
None None...
Microsoft Windows Kernel win32k.sys Privilege Escalation Vulnerability
Windows XP/2003 is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...