91 matches found
MS08-064: Microsoft Windows Virtual Address Descriptors (VAD) Local Privilege Escalation (956841)
The remote host contains a version of the Windows kernel that is vulnerable to a security flaw that could allow a local user to elevate his privileges or to crash it therefore causing a denial of service. Tenable Network Security, Inc. include"compat.inc"; if description scriptid34409;...
Microsoft Windows VAD本地权限提升漏洞（MS08-064）
BUGTRAQ ID: 31675 CVECAN ID: CVE-2008-4036 Microsoft Windows是微软发布的非常流行的操作系统。 Windows的内存管理器处理内存分配和虚拟地址描述符（VAD）的方式中存在一个整数溢出漏洞。如果通过认证的攻击者在受影响的系统上运行特制的程序，此漏洞可能允许权限提升。成功利用此漏洞的攻击者可以在受影响的系统上获得特权提升。攻击者随后可安装程序；查看、更改或删除数据；或者创建拥有完全管理权限的新帐户。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows...
Virtual Address Descriptor Manipulation Elevation of Privilege Vulnerability (956841)
This host is missing important security update according to Microsoft Bulletin MS08-064. OpenVAS Vulnerability Test $Id: secpodms08-064900225.nasl 5934 2017-04-11 12:28:28Z antu123 $ Description: Virtual Address Descriptor Manipulation Elevation of Privilege Vulnerability 956841 Authors: Veerendr...
CVE-2008-4036
Integer overflow in Memory Manager in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows local users to gain privileges via a crafted application that triggers an erroneous decrement of a variable, related to validation of parameters for Virtual...
openSUSE 10 Security Update : tcpdump (tcpdump-4036)
This update fixes a buffer overlow that could be triggered when displaying BGP packets CVE-2007-3798. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update tcpdump-4036. The text description of this...
Information disclosure
Guidance Software EnCase 5.0 allows user-assisted remote attackers to cause a denial of service stack memory consumption and possibly have other unspecified impact via a malformed file, related to "EnCase's file system parsing." NOTE: this information is based upon a vague pre-advisory. It might...
CVE-2007-4194
CVE-2007-4194 concerns Guidance Software EnCase 5.0 and describes user‑assisted remote denial of service via a malformed file, related to EnCase’s file system parsing. The core weakness centers on how EnCase parses certain inputs, potentially causing stack memory consumption and unspecified impac...
CVE-2007-4036
The CVE-2007-4036 entry concerns Guidance Software EnCase. Affected component: EnCase (Desktop/forensics software). The vulnerability involves three user-assisted remote vectors: (1) corrupted Microsoft Exchange database causing an application crash when many options are selected; (2) corrupted N...
eScan Agent Detection
Binary data 4036.prm...
