Security Update for Microsoft Office Excel 2003 (KB955466)

A security vulnerability exists in Microsoft Office Excel 2003 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

PT-2008-5351 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 Description: A buffer underflow issue exists in the Server Message Block SMB protocol, allowing remote attackers to execute...

Microsoft Windows Kernel Window Creation Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers. Technologies Affected H...

Microsoft Security Bulletin MS08-058 - Critical Cumulative Security Update for Internet Explorer (956390)

Microsoft Security Bulletin MS08-058 - Critical Cumulative Security Update for Internet Explorer 956390 Published: October 14, 2008 Version: 1.0 General Information Executive Summary This security update resolves five privately reported vulnerabilities and one publicly disclosed vulnerability. Th...

Microsoft Windows Internet Printing Service Integer Overflow Vulnerability

Description Microsoft Internet Printing Service is prone to an integer-overflow vulnerability. Exploiting this vulnerability allows attackers to execute arbitrary code with system-level privileges. Technologies Affected HP Storage Management Appliance 2.1 Microsoft Windows 2000 Advanced Server...

Microsoft Windows AFD Driver Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability in the Ancillary Function Driver 'afd.sys'. A successful exploit of this vulnerability will let a local attacker completely compromise an affected computer. Technologies Affected Microsoft Windows Server 2003...

PT-2008-5349 · Microsoft · Windows Xp +4

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 versions SP1 through SP2 Microsoft Windows Vista versions Gold through SP1 Microsoft Windows Server 2008 affected versions not specified Description: The issue is...

Microsoft Windows Kernel Memory Corruption Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successfully exploiting this issue will result in the complete compromise of affected...

PT-2008-3745 · Microsoft · Windows Server 2008 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 2000 SP4 through Server 2008 Description: The issue arises from the Windows kernel's failure to properly validate window properties sent from a parent window to a child window during the creation of a new window. Th...

Microsoft Security Bulletin MS08-061 – Important Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (954211)

Microsoft Security Bulletin MS08-061 – Important Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege 954211 Published: October 14, 2008 Version: 1.0 General Information Executive Summary This security update resolves one publicly disclosed and two privately reported vulnerabiliti...

Mircosoft Windows Token Kidnapping本地提权漏洞

CNCAN ID：CNCAN-2008101007 Microsoft Windows是一款流行的操作系统。 漏洞是由于在NetworkService或LocalService上下文运行的代码，可以访问同样是在 NetworkService或LocalService上下文下运行的进程，部分进程允许提升特权到LocalSystem。 对于IIS，默认安装是不受影响的，以Full Trust运行的ASP.NET代码受此漏洞影响，如果权限低于Full Trust，也不受此漏洞影响。同样旧Asp代码不受此漏洞影响，只有ASP.NET才受影响。 针对SQL...

MS Windows Token Kidnapping local provide the right solutions-vulnerability warning-the black bar safety net

Today MS updated security Bulletin This vulnerability is due inNetworkService or LocalService the following code running, you can access the same in the NetworkService or LocalService processes that run under that certain processes allow elevation of privileges for theLocalSystem it. For IIS, the...

MS Win2003 Token Kidnapping Local Exploit PoC-vulnerability warning-the black bar safety net

Neeao: it is said that there have been N many people use to mention the right to success. From: It has been a long time since Token Kidnapping presentation was published so I decided to release a PoC exploit for Win2k3 that alows to execute code under SYSTEM account. Basically if you can run code...

MS Windows 2003 Token Kidnapping Local Exploit PoC

Exploit for unknown platform in category local exploits ================================================== MS Windows 2003 Token Kidnapping Local Exploit PoC ================================================== From http://nomoreroot.blogspot.com/2008/10/windows-2003-poc-exploit-for-token.html It h...

Microsoft Windows Server 2003 - Token Kidnapping Local Privilege Escalation

From http://nomoreroot.blogspot.com/2008/10/windows-2003-poc-exploit-for-token.html It has been a long time since Token Kidnapping presentation http://www.argeniss.com/research/TokenKidnapping.pdf was published so I decided to release a PoC exploit for Win2k3 that alows to execute code under SYST...

Apache终端转义序列过滤漏洞

CVECAN ID: CVE-2003-0083 Apache是一款广泛使用的开放源代码WEB服务程序。 Apache对日志中的转义序列处理存在问题，攻击者可能利用恶意的日志信息在服务器执行任意命令。 Apache无法过滤错误日志中以ASCII（0x1B）序列开始且带有一系列参数的终端转义序列。如果攻击者能够向Apache错误日志中注入转义序列的话，就可能对远程用户发动各种攻击，包括拒绝服务，文件修改和执行任意命令。 Apache Group Apache 1.3.9 Apache Group Apache 1.3.6 Apache Group Apache 1.3.4 Apache...

Microsoft Windows GDI 'EMR_COLORMATCHTOTARGETW' Stack Overflow Vulnerability(MS08-021)

Microsoft Windows is prone to a stack-based overflow vulnerability that resides in the GDI graphics library and can be triggered by a malformed EMF image file. A successful exploit of this vulnerability can allow a remote attacker to completely compromise the affected computer. Research In Motion...

CVE-2008-4409

libxml2 2.7.0 and 2.7.1 does not properly handle "predefined entities definitions" in entities, which allows context-dependent attackers to cause a denial of service memory consumption and application crash, as demonstrated by use of xmllint on a certain XML document, a different vulnerability th...

DATAC RealWin SCADA Server FC_INFOTAG/SET_CONTROL buffer overflow

Added: 10/03/2008 CVE: CVE-2008-4322 BID: 31418 OSVDB: 48606 Background RealWin is a Supervisory Control and Data Acquisition SCADA server which is distributed by DATAC. Problem A buffer overflow vulnerability in RealWin Server allows remote attackers to execute arbitrary commands by sending a...

DATAC RealWin SCADA Server FC_INFOTAG/SET_CONTROL buffer overflow

Added: 10/03/2008 CVE: CVE-2008-4322 BID: 31418 OSVDB: 48606 Background RealWin is a Supervisory Control and Data Acquisition SCADA server which is distributed by DATAC. Problem A buffer overflow vulnerability in RealWin Server allows remote attackers to execute arbitrary commands by sending a...