Microsoft Windows "CreateSizedDIBSECTION()"缩略视图栈缓冲区溢出漏洞

BUGTRAQ ID: 45662 CVE ID: CVE-2010-3970 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows的Windows Graphics Rendering Engine在实现上存在远程栈缓冲区溢出漏洞，远程攻击者可利用此漏洞通过诱使用户访问恶意网页或打开处理恶意Office文档破坏内存执行任意代码或造成拒绝服务。 Microsoft Windows XP Professional Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsof...

HP-UX Update for Apache Running Tomcat Servlet Engine HPSBUX02579

Check for the Version of Apache Running Tomcat Servlet Engine OpenVAS Vulnerability Test HP-UX Update for Apache Running Tomcat Servlet Engine HPSBUX02579 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

HP-UX Update for Apache Running Tomcat Servlet Engine HPSBUX02579

The remote host is missing an update for the Apache Running Tomcat Servlet Engine packages announced via the referenced advisory. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Sql injection

Multiple SQL injection vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to execute arbitrary SQL commands via the 1 article parameter to kb.asp, 2 specific parameter to cart.asp, 3 countrycode parameter to contact.asp, and the 4 srch parameter to search.asp. NOTE: the article...

SuSE 10 Security Update : kdenetwork (ZYPP Patch Number 7245)

This update of kdenetwork fixes several bugs, the security related issues are : - CWE-119 The included libgadu version allowed remote servers to cause a denial of service crash via a buffer over-read. CVE-2008-4776: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P Non-security issues : - kopete...

Stack overflow

Stack-based buffer overflow in the CreateSizedDIBSECTION function in shimgvw.dll in the Windows Shell graphics processor aka graphics rendering engine in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary...

Heap overflow

Heap-based buffer overflow in the CrystalReports12.CrystalPrintControl.1 ActiveX control in PrintControl.dll 12.3.2.753 in SAP Crystal Reports 2008 SP3 Fix Pack 3.2 allows remote attackers to execute arbitrary code via a long ServerResourceVersion property value...

SAP Crystal Reports PrintControl.dll ServerResourceVersion buffer overflow

Added: 12/22/2010 CVE: CVE-2010-2590 BID: 45387 OSVDB: 69917 Background SAP Crystal Reports allows developers to design interactive reports from virtually any data source. Problem A buffer overflow vulnerability in the PrintControl.dll ActiveX control allows command execution when a user loads a...

RHEL 6 : mod_auth_mysql (RHSA-2010:1002)

An updated modauthmysql package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

Microsoft Windows IPsec Policy Processing Information Disclosure Vulnerability (953733)

This host is missing a critical security update according to Microsoft Bulletin MS08-047. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows "Win32k.sys" 驱动程序多个安全漏洞(MS10-098)

CVE ID: CVE-2010-3943,CVE-2010-3944,CVE-2010-3939,CVE-2010-3940,CVE-2010-3941,CVE-2010-3942 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows在实现上存在多个漏洞，本地攻击者可利用这些漏洞导致拒绝服务或提升自己的权限。 此漏洞源于： 1）"win32k.sys"驱动程序在从用户模式复制数据时存在内存分配错误，导致在内核中执行任意代码； 2）"win32k.sys"驱动程序在处理PFE对象时存在双重释放错误，导致在内核中执行任意代码；...

Microsoft Windows "Win32k.sys" 双重释放本地权限提升漏洞(MS10-098)

BUGTRAQ ID: 45287 CVE ID: CVE-2010-3941 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows的Win32k.sys驱动实现上存在双重释放漏洞，本地攻击者可利用此漏洞以内核级别的权限执行任意代码，从而完全控制受影响的计算机。 Microsoft Windows XP Microsoft Vista Microsoft Server 2008 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS10-098）以及相应补丁:...

Windows Win32k Pointer Dereference

/ MS10-098 CVE-2010-3944 Microsoft Windows Win32k pointer dereferencement -------------------- Affected Software ------------------------ Microsoft Windows 7 / 2008 -------------------- Consequences ----------------------- An unprivileged user may be able to cause a bugcheck, or possibly execute...

Microsoft Data Analyzer 'max3activex.dll' ActiveX控件远程代码执行漏洞

Bugraq ID: 38045 CVE ID：CVE-2010-0252 CNCVE ID：CNCVE-20100252 Microsoft Data Analyzer是一款用于Microsoft Office的数据分析软件。 Microsoft Data Analyzer ActiveX control max3activex.dll存在一个未明错误，构建恶意WEB页，诱使用户访问，可导致系统状态破坏，执行任意代码。 Microsoft Windows XP Tablet PC Edition SP3 Microsoft Windows XP Tablet PC Edition SP...

CVE-2010-3965

Untrusted search path vulnerability in Windows Media Encoder 9 on Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrat...

CVE-2010-3957

Double free vulnerability in the OpenType Font OTF driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a crafted OpenType font, aka "OpenType Font Double Free...

CVE-2010-3338

The Windows Task Scheduler in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly determine the security context of scheduled tasks, which allows local users to gain privileges via a crafted application, aka "Task Scheduler Vulnerability."...

Double free

Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a crafted application, aka "Win32k PFE Pointer...

Design/Logic Flaw

Untrusted search path vulnerability in Microsoft Windows Server 2008 R2 and Windows 7, when BranchCache is supported, allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains an EML file, an RSS file, or a WPOST...

Double free

Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold and SP2, and Windows 7 allows local users to gain privileges via a crafted application, aka "Win32k Double Free...