Design/Logic Flaw

The jsInitRandom function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, uses the current time for seeding of a random number generator, which makes it easier for remote attackers to guess the seed value via a brute-forc...

CVE-2010-3400

CVE-2010-3400 affects Mozilla Firefox 3.5.x before 3.5.10, Firefox 3.6.x before 3.6.4, and SeaMonkey before 2.0.5. The JavaScript Math.random() RNG is seeded with the current time, enabling remote attackers to guess the seed via brute-force. The description does not specify exploits; it indicates...

Code injection

The MPEG-4 codec in the Windows Media codecs in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 does not properly handle crafted media content with MPEG-4 video encoding, which allows remote attackers to execute arbitrary code via a file in an...

CVE-2010-2738

Microsoft Windows/Office Uniscribe (USP10.DLL) vulnerability CVE-2010-2738 involves improper validation of tables in OpenType fonts, leading to remote code execution via crafted web pages or Office documents. Affected components include USP10.DLL across Windows XP SP2/SP3, Server 2003 SP2, Vista ...

PT-2010-1168 · Microsoft +1 · Windows Server 2003 +6

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP SP2 and SP3 Microsoft Windows Server 2003 SP2 Microsoft Windows Vista SP1 and SP2 Microsoft Windows Server 2008 Gold, SP2, and R2 Microsoft Windows 7 Description: The issue arises from the Print Spooler service's failure ...

Microsoft Unicode Scripts Processor and MS Office Could Code Execution Vulnerability (2320113)

This host is missing a critical security update according to Microsoft Bulletin MS10-063. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Security Bulletin MS10-068 - Important Vulnerability in Local Security Authority Subsystem Service Could Allow Elevation of Privilege (983539)

Microsoft Security Bulletin MS10-068 - Important Vulnerability in Local Security Authority Subsystem Service Could Allow Elevation of Privilege 983539 Published: September 14, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability ...

Microsoft Security Bulletin MS10-061 - Critical Vulnerability in Print Spooler Service Could Allow Remote Code Execution (2347290)

Microsoft Security Bulletin MS10-061 - Critical Vulnerability in Print Spooler Service Could Allow Remote Code Execution 2347290 Published: September 14, 2010 Version: 1.0 General Information Executive Summary This security update resolves a publicly disclosed vulnerability in the Print Spooler...

MPEG-4 Codec RCE Vulnerability (975558)

This host is missing a critical security update according to Microsoft Bulletin MS10-062. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Security Bulletin MS10-062 - Critical Vulnerability in MPEG-4 Codec Could Allow Remote Code Execution (975558)

Microsoft Security Bulletin MS10-062 - Critical Vulnerability in MPEG-4 Codec Could Allow Remote Code Execution 975558 Published: September 14, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in MPEG-4 codec. The vulnerabili...

MPEG-4 Codec Remote Code Execution Vulnerability (975558)

This host is missing a critical security update according to Microsoft Bulletin MS10-062. OpenVAS Vulnerability Test $Id: secpodms10-062.nasl 7174 2017-09-18 11:48:08Z asteins $ MPEG-4 Codec Remote Code Execution Vulnerability 975558 Authors: Veerendra G.G Copyright c 2010 SecPod,...

Microsoft Internet Information Services Remote Code Execution Vulnerabilities (2267960)

This host is missing a critical security update according to Microsoft Bulletin MS10-065. OpenVAS Vulnerability Test $Id: secpodms10-065.nasl 6605 2017-07-07 11:22:07Z cfischer $ Microsoft Internet Information Services Remote Code Execution Vulnerabilities 2267960 Authors: Sooraj KS Copyright:...

PT-2010-2546 · Microsoft · Windows Xp +7

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Server 2003 SP2 Microsoft Windows Server 2008 Gold, SP2, and R2 Microsoft Windows XP SP2 and SP3 Microsoft Windows Vista SP2 Microsoft Windows 7 Microsoft Windows Server 2008 Gold, SP2, and R2 Active Directory Application Mo...

VulnCheck KEV: CVE-2010-2729

The Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when printer sharing is enabled, does not properly validate spooler access permissions, which allows remote attackers to...

MS Unicode Scripts Processor and MS Office Could Code Execution Vulnerability (2320113)

This host is missing a critical security update according to Microsoft Bulletin MS10-063. OpenVAS Vulnerability Test $Id: secpodms10-063.nasl 6538 2017-07-05 11:38:27Z cfischer $ MS Unicode Scripts Processor and MS Office Remote Code Execution Vulnerability 2320113 Authors: Antu Sanadi Copyright:...

Microsoft Windows and Office Uniscribe Font Parsing Engine Remote Code Execution Vulnerability

Description Microsoft Windows and Office are prone to a remote code-execution vulnerability when handling crafted font data. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file or webpage. A successful exploit may allow arbitrary code to run in the context...

Microsoft IIS Request Header Buffer Overflow Vulnerability

Description Microsoft IIS is prone to a remote buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. This issue affects IIS 7.5 on Windows 7...

Description of the System Center Virtual Machine Manager 2008 R2 hotfix rollup package: September 14, 2010

None None...

MS10-062: Vulnerability in MPEG-4 Codec Could Allow Remote Code Execution (975558)

The MPEG-4 codec, which is included with Windows Media codecs, contains a buffer overflow vulnerability that can be triggered by a specially crafted media file that uses MPEG-4 video encoding. If an attacker can trick a user on the affected system into opening a specially crafted media file or...

MS10-061: Vulnerability in Print Spooler Service Could Allow Remote Code Execution (2347290) (EMERALDTHREAD)

The version of the Print Spooler service on the remote Windows host is affected by a service impersonation vulnerability that allows an unauthenticated, remote attacker to execute arbitrary code on a Windows XP system to escalate privileges on all other supported Windows systems. EMERALDTHREAD is...