4062 matches found
CVE-2004-0212
CVE-2004-0212 describes a stack-based buffer overflow in the Windows Task Scheduler (mstask) that affects Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0. The vulnerability occurs in how Task Scheduler handles long parameters in .job files, allowing a remote or local attacker to ex...
Microsoft Security Bulletin MS04-021
Microsoft Security Bulletin MS04-021 Security Update for IIS 4.0 841373 Issued: July 13, 2004 Version: 1.0 Summary Who should read this document: Customers who use Microsoft® Windows® NT® 4.0 Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Important Recommendation: Custome...
CVE-2004-0118
The component for the Virtual DOS Machine VDM subsystem in Windows NT 4.0 and Windows 2000 does not properly validate system structures, which allows local users to access protected kernel memory and execute arbitrary code...
CVE-2004-1994
FuseTalk 4.0 allows remote attackers to ban other users via a direct request to banning.cfm...
CVE-2004-0420
CVE-2004-0420 describes a remote code execution in the Windows Shell when a file is spoofed via a CLSID in the filename. The vulnerability affects Windows 98, Me, NT 4.0, 2000, XP, and Server 2003, enabling an attacker who lures a user to a malicious Web page to execute arbitrary code with the us...
CVE-2003-0807
CVE-2003-0807 : A denial-of-service vulnerability in Microsoft Windows where the COM Internet Services (CIS) and RPC over HTTP Proxy components can be overwhelmed by a crafted forwarded response, causing the backend to stop accepting requests. Related connected documents (MS04-012) identify this ...
CVE-2003-0910
The NtSetLdtEntries function in the programming interface for the Local Descriptor Table LDT in Windows NT 4.0 and Windows 2000 allows local attackers to gain access to kernel memory and execute arbitrary code via an expand-down data segment descriptor descriptor that points to protected memory...
CVE-2003-0910
CVE-2003-0910 concerns a privilege-elevation flaw in the Local Descriptor Table (LDT) interface on Windows NT 4.0 and Windows 2000. An attacker must be locally logged on to exploit by creating a malicious LDT entry to gain access to protected memory; Windows XP and Windows Server 2003 are not aff...
CVE-2004-0197
CVE-2004-0197 is a buffer-overrun vulnerability in the Microsoft Jet Database Engine 4.0. The issue allows remote code execution by sending a specially crafted database query to an application that uses Jet, with the attacker gaining the same privileges as the affected process. Microsoft Security...
CVE-2004-0124
CVE-2004-0124 describes an information disclosure flaw in how Microsoft Windows COM object identifiers are created, enabling an attacker to coax a system into opening network ports via specially crafted RPC messages. This is part of MS04-012 RPC/DCOM updates; the impact is described as enabling a...
CVE-2004-0123
CVE-2004-0123 (ASN.1 “Double Free”) affects Windows platforms including NT 4.0, Windows 2000, Windows XP, and Windows Server 2003. The issue is a potential memory-management error caused by a possible double-free condition in the Microsoft ASN.1 Library, which could lead to memory corruption and,...
CVE-2004-0118
CVE-2004-0118 : A local privilege-escalation vulnerability in the Virtual DOS Machine (VDM) subsystem on Windows NT 4.0 and Windows 2000. The issue arises from insufficient validation when referencing memory allocated to VDM, allowing a locally logged-on user to gain kernel/system access and exec...
[Full-Disclosure] EEYE: Windows VDM TIB Local Privilege Escalation
Windows VDM TIB Local Privilege Escalation Release Date: April 13, 2004 Date Reported: February 9, 2004 Severity: Medium Local Privilege Escalation to Kernel Vendor: Microsoft Systems Affected: Windows NT 4.0 Windows 2000 Description: eEye Digital Security has discovered a second local privilege...
Microsoft Windows ASN.1 library contains a memory management vulnerability
Overview Microsoft's ASN.1 library contains a memory management error that could be exploited by a remote attacker to cause a denial-of-service situation, or execute arbitrary code. Description Microsoft's ASN.1 library contains a memory management error, potentially a "double-free" condition. By...
[Full-Disclosure] EEYE: Windows Expand-Down Data Segment Local Privilege Escalation
Windows Expand-Down Data Segment Local Privilege Escalation Release Date: April 13, 2004 Date Reported: November 21, 2003 Severity: Medium Local Privilege Escalation to Kernel Vendor: Microsoft Systems Affected: Windows NT 4.0 Windows 2000 Description: eEye Digital Security has discovered a...
1st Class Mail Server 4.0 1 - general.tagz Cross-Site Scripting
1st Class Mail Server 4.0 1 - general.tagz Cross-Site Scripting source: https://www.securityfocus.com/bid/10089/info Multiple vulnerabilities have been identified in the application that may allow a remote attacker to carry out directory traversal and cross-site scripting attacks. 1st Class Mail...
CVE-2004-0315
The CVE-2004-0315 entry concerns a buffer overflow in Avirt Voice 4.0 . A remote attacker can trigger a vulnerability by sending a long GET request on port 1080 , potentially causing a denial of service and, per the NVD entry, possibly execute arbitrary code . The issue is a network-facing vulner...
CVE-2003-0818
CVE-2003-0818 covers a heap-based overflow in the Microsoft ASN.1 library (MSASN1.DLL) used by Windows components (LSASS.EXE, CRYPT32.DLL) on Windows NT 4.0/2000/XP. The vulnerability affects BER decoding of ASN.1 data, with two vectors: (1) very large length fields overwriting heap data, and (2)...