CVE-2002-2127

The CVE-2002-2127 entry concerns Integrity Protection Driver (IPD) versions 1.2 and earlier. The vulnerability arises from IPD blocking access to \Device\PhysicalMemory by name, but an attacker could abuse a symlink to access the device and cause a local privileged process to overwrite kernel mem...

CVE-2005-2127

Microsoft Internet Explorer versions 5.01, 5.5, and 6 are vulnerable to a COM Object Instantiation Memory Corruption vulnerability (CVE-2005-2127 ). The flaw exists because the browser attempts to instantiate certain COM objects (such as Msdds.dll , Mdt2dd.dll , and Shell32.dll ) that are not int...

CVE-2004-2127

CVE-2004-2127 concerns a directory traversal in Web Blog 1.1 that allows remote attackers to read arbitrary files via a .. in the file variable. The affected component is the Web Blog 1.1 application; root cause is improper handling of the file parameter enabling traversal to parent directories. ...

CVE-2004-2127

Directory traversal vulnerability in Web Blog 1.1 allows remote attackers to read arbitrary files via a .. dot dot in the file variable...

CVE-2002-2127

Integrity Protection Driver IPD 1.2 and earlier blocks access to \Device\PhysicalMemory by its name, which could allow local privileged processes to overwrite kernel memory by accessing the device through a symlink...