Microsoft Word未明安全漏洞

Microsoft Word是一款流行的办公文字处理软件。 Microsoft Word存在一个未明错误，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 攻击者必须构建恶意WORD文件，诱使用户打开来触发，目前没有详细漏洞细节提供。 Microsoft Word X for Mac Microsoft Word 2004 for Mac 0 Microsoft Word 2003 Viewer Microsoft Word 2003 + Microsoft Office 2003 SP1 + Microsoft Office 2003 Microsoft Word 2002 SP...

Mysteriously replaced Windows XP user password-vulnerability warning-the black bar safety net

Windows XP startup scriptstartup scriptsis a computer in the login screen to appear before running the batch file, which functions similar to the Windows 9×and DOS automatically executed batch file, the autoexec. bat. Using this feature, you can write a batch file to re-set the user password, and...

Microsoft Internet Explorer MSOE.DLL拒绝服务漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer实例化msoe.dll COM对象存在问题，远程攻击者可以利用漏洞进行内存破坏攻击，可能以进程权限执行任意指令。 当Microsoft Internet Explorer尝试以ActiveX控件实例化msoe.dll COM对象，可能破坏系统内存造成拒绝服务，可能导致任意代码执行。 Microsoft Internet Explorer 6.0 SP2 Microsoft Internet Explorer 6.0 SP1 Microsoft...

Microsoft Internet Explorer CHTSKDIC.DLL拒绝服务漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer实例化CHTSKDIC.DLL COM对象存在问题，远程攻击者可以利用漏洞进行内存破坏攻击，可能以进程权限执行任意指令。 当Microsoft Internet Explorer尝试以ActiveX控件实例化CHTSKDIC.DLLMicrosoft IME COM对象，可能破坏系统内存造成拒绝服务，可能导致任意代码执行。 Microsoft Internet Explorer 6.0 SP2 Microsoft Internet Explorer 6....

Microsoft Windows Help存在多个漏洞

Microsoft Help WINHLP32.EXE处理.hlp文件存在多个远程代码执行和拒绝服务问题。 攻击者可以在WEB页上防止恶意帮助文件，或者通过EMAIL附件形式发送，诱使用户打开来触发此漏洞，成功利用此漏洞可以以进程权限执行任意指令。 Microsoft Windows XP Tablet PC Edition SP2 Microsoft Windows XP Tablet PC Edition SP1 Microsoft Windows XP Tablet PC Edition Microsoft Windows XP Professional x64 Edition...

Microsoft Internet Explorer IMSKDIC.DLL拒绝服务漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer实例化IMSKDIC.DLL COM对象存在问题，远程攻击者可以利用漏洞进行内存破坏攻击，可能以进程权限执行任意指令。 当Microsoft Internet Explorer尝试以ActiveX控件实例化IMSKDIC.DLLMicrosoft IME COM对象，可能破坏系统内存造成拒绝服务，可能导致任意代码执行。 Microsoft Internet Explorer 6.0 SP2 Microsoft Internet Explorer 6.0...

[NT] Conxint FTP MKD DIR and GET Directory Transversal

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Mysteriously replaced XP user password-vulnerability warning-the black bar safety net

Windows XP startup scriptstartup scriptsis a computer in the login screen to appear before running the batch file, which functions similar to the Windows 9×and DOS automatically executed batch file, the autoexec . bat. Using this feature, you can write a batch file to re-set the user password, an...

Solaris 8 (sparc) : 108652-98

X11 6.4.1: Xsun patch. Date this patch was last updated by Sun : May/04/06 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Microsoft Windows Shell COM对象处理远程代码执行漏洞（MS06-015）

Microsoft Windows是微软发布的非常流行的操作系统。 Windows资源管理器处理COM对象的方式存在远程代码执行漏洞，成功利用这个漏洞的攻击者可以完全控制受影响系统。 攻击者必须诱骗用户访问强制到远程文件服务器连接的站点，然后这个远程文件服务器就可以导致Windows资源管理器失效，可能允许代码执行。 Microsoft Windows XP SP2 Microsoft Windows XP SP1 Microsoft Windows Server 2003 SP1 Microsoft Windows Server 2003 Microsoft Windows ME...

Microsoft MDAC RDS.Dataspace ActiveX控件远程代码执行漏洞（MS06-014）

Microsoft Windows是微软发布的非常流行的操作系统。 Windows的RDS.Dataspace ActiveX实现上存在漏洞，远程攻击者可能利用此漏洞在获取主机的控制。 在某些情况下，MDAC所捆绑的RDS.Dataspace ActiveX控件无法确保能够进行安全的交互，导致远程代码执行漏洞，成功利用这个漏洞的攻击者可以完全控制受影响的系统。 Microsoft Windows XP SP2 Microsoft Windows XP SP1 Microsoft Windows Server 2003 SP1 Microsoft Windows Server 2003...

Microsoft Windows Internet Explorer地址栏伪造漏洞(MS04-038)

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer处理部分URL时存在问题，远程攻击者可以利用这个漏洞伪造地址，欺骗用户。 在双字节字符设置系统中的Microsoft Internet Explorer处理部分URL存在问题，攻击者可以导致不正确的URL列在地址栏中，而非实际用户要访问的URL，造成一定的欺骗，可能导致用户访问恶意站点，泄露敏感信息。 Microsoft Internet Explorer 6.0SP1 Microsoft Internet Explorer 5.5SP2 Microso...

The Trojan part of the hidden technology hidden technology disclosure-vulnerability warning-the black bar safety net

My friend introduced to this forum, it is rare to discuss the atmosphere of such a good Forum here mentioned a lot of new knowledge, used to think I here a collection of this post is more full of some of the Trojan horse technique, really did not expect, turned out to be hiding the connection...

msieDoS.txt

Microsoft Internet Explorer Content-Type Denial Of Service Vulnerability -\Vulnerable: Microsoft Internet Explorer 6.0 SP2 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft...

SYMSA-2006-004: Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID : SYMSA-2006-004 Advisory Title: Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution Author : Peter Ferrie / [email protected]...

Buffer overflow

Buffer overflow in the ART Image Rendering component jgdw400.dll in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Windows 98 and Me allows remote attackers to execute arbitrary code via a crafted ART image that causes heap corruption...

CVE-2006-2378

Buffer overflow in the ART Image Rendering component jgdw400.dll in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Windows 98 and Me allows remote attackers to execute arbitrary code via a crafted ART image that causes heap corruption...

Memory corruption

Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003, Windows 98 and Windows Me, will "release objects early" in certain cases, which results in memory corruption and allows remote attackers to execute arbitrary code...

CVE-2006-2378

CVE-2006-2378 is a heap-based buffer overflow in the ART Image Rendering component (jgdw400.dll) used by AOL ART images in Microsoft Windows XP (SP1/SP2), Windows Server 2003 (SP1), and older/related OSes (including 98/Me). A crafted ART image can cause heap corruption, enabling remote code execu...

Microsoft DXImageTransform.Microsoft.Light ActiveX Control Remote Code Execution Vulnerability

Description The DXImageTransform.Microsoft.Light ActiveX control is prone to remote code execution. An attacker could exploit this issue to execute code in the context of the user visiting a malicious web page. Technologies Affected Microsoft Internet Explorer 5.0.1 Microsoft Internet Explorer...