30337 matches found
Microsoft Windows Client/Server Run-time Subsystem Privilege Escalation Vulnerability (2567680)
This host is missing a critical security update according to Microsoft Bulletin MS11-063. OpenVAS Vulnerability Test $Id: secpodms11-063.nasl 8724 2018-02-08 15:02:56Z cfischer $ Microsoft Windows Client/Server Run-time Subsystem Privilege Escalation Vulnerability 2567680 Authors: Antu Sanadi...
CVE-2011-1967
Winsrv.dll in the Client/Server Run-time Subsystem aka CSRSS in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly check permissions for sending inter-process...
CVE-2011-1965
Tcpip.sys in the TCP/IP stack in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 does not properly implement URL-based QoS, which allows remote attackers to cause a denial of service reboot via a crafted URL to a web server, aka "TCP/IP QOS Denial of Service Vulnerability."...
CVE-2011-1966
The DNS server in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 does not properly handle NAPTR queries that trigger recursive processing, which allows remote attackers to execute arbitrary code via a crafted query, aka "DNS NAPTR Query Vulnerability."...
CVE-2011-1970
The DNS server in Microsoft Windows Server 2003 SP2 and Windows Server 2008 SP2, R2, and R2 SP1 does not properly initialize memory, which allows remote attackers to cause a denial of service service outage via a query for a nonexistent domain, aka "DNS Uninitialized Memory Corruption...
CVE-2011-1263
Cross-site scripting XSS vulnerability in the logon page in Remote Desktop Web Access RD Web Access in Microsoft Windows Server 2008 R2 and R2 SP1 allows remote attackers to inject arbitrary web script or HTML via the URI, aka "Remote Desktop Web Access Vulnerability."...
CVE-2011-1871
Tcpip.sys in the TCP/IP stack in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service reboot via a series of crafted ICMP messages, aka "ICMP Denial of Service Vulnerability."...
Denial of service
Tcpip.sys in the TCP/IP stack in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 does not properly implement URL-based QoS, which allows remote attackers to cause a denial of service reboot via a crafted URL to a web server, aka "TCP/IP QOS Denial of Service Vulnerability."...
Design/Logic Flaw
The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly parse file metadata, which allows local users to cause a denial of service reboot via a crafted file, aka "Windows Kernel Metadata Parsing DOS Vulnerability."...
CVE-2011-1263
The CVE describes a cross-site scripting (XSS) vulnerability in the logon page of Remote Desktop Web Access (RD Web Access) on Microsoft Windows Server 2008 R2 and R2 SP1. The issue arises from insufficient input sanitization in the login URI, allowing remote attackers to inject arbitrary HTML/ J...
CVE-2011-1971
The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly parse file metadata, which allows local users to cause a denial of service reboot via a crafted file, aka "Windows Kernel Metadata Parsing DOS Vulnerability."...
CVE-2011-1965
CVE-2011-1965 corresponds to a denial-of-service vulnerability in the Windows TCP/IP stack (Tcpip.sys) where URL-based QoS handling could be abused to reboot the host. Affected products include Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1. The root cause is improper handling of UR...
CVE-2011-1966
The CVE-2011-1966 issue affects Microsoft Windows DNS Server on Windows Server 2008 SP2, R2, and R2 SP1, where the DNS server mishandles NAPTR queries that trigger recursive processing. The root cause is a memory corruption vulnerability exploitable via specially crafted NAPTR queries, which can ...
CVE-2011-1966
The DNS server in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 does not properly handle NAPTR queries that trigger recursive processing, which allows remote attackers to execute arbitrary code via a crafted query, aka "DNS NAPTR Query Vulnerability."...
CVE-2011-1975
The CVE-2011-1975 entry describes an Untrusted search path vulnerability in the Data Access Tracing component of Windows Data Access Components (MDAC) 6.0. A local attacker could gain privileges by placing a Trojan horse DLL in the current working directory, demonstrated via a crafted Excel (.xls...
CVE-2011-1871
CVE-2011-1871 affects the Windows TCP/IP stack (Tcpip.sys) on Windows Vista SP2, Windows Server 2008 SP2/R2 and Windows 7 SP1. A remote attacker can send crafted ICMP messages to cause a denial of service (reboot). The vulnerability is addressed by MS11-064; apply the Microsoft patch to mitigate....
CVE-2011-1967
Winsrv.dll in the Client/Server Run-time Subsystem aka CSRSS in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly check permissions for sending inter-process...
PT-2011-3513 · Microsoft · Windows Vista Sp2 +5
Name of the Vulnerable Software and Affected Versions: Windows Vista SP2 Windows Server 2008 SP2 Windows Server 2008 R2 Windows Server 2008 R2 SP1 Windows 7 Gold Windows 7 SP1 Description: A denial of service issue exists due to improper parsing of file metadata by the kernel. This allows local...
Microsoft Remote Desktop Web Access 跨站脚本漏洞
Bugtraq ID: 49040 CVE ID：CVE-2011-1263 Microsoft Windows是一款流行的操作系统。 传递给远程桌面WEB访问登录页面的部分输入在返回用户之前缺少过滤，这可导致跨站脚本攻击，可在目标用户浏览器上执行任意HTML和脚本代码。 Microsoft Windows Server 2008 R2 x64 Microsoft Windows Server 2008 R2 for x64-based Systems SP1 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息：...
PT-2011-3509 · Microsoft · Windows Server 2003 +5
Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows 7 versions Gold through SP1 Description: T...