Microsoft plugs gaping holes in IE, Excel, Windows

Microsoft today released its April batch of security patches: 8 bulletins with patches for at least 20 documented holes in popular software products. The most serious of the flaws could lead to remote code execution attacks that give a malicious hacker complete ownership of a vulnerable machine...

Microsoft IIS RCE Vulnerability (MS03-022) - Active Check

Microsoft IIS is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2009 Christian Eric Edjenguele Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE =...

Microsoft preps patches for Windows holes

According to a Patch Tuesday advance notice from Microsoft, there will be three security bulletins released on March 10, one rated critical. The other two bulletins are rated “important” and can expose Windows users to spoofing attacks. All supported versions of Windows will be affected by next...

WordPad and Office Text Converter Memory Corruption Vulnerability (960477)

This host is missing a critical security update according to Microsoft Bulletin MS09-010. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS07-022: Vulnerability in Windows Kernel Could Allow Elevation of Privilege (931784)

The remote host contains a version of the Windows kernel that is vulnerable to a security flaw which could allow a local user to elevate privileges or to crash it therefore causing a denial of service. Tenable Network Security, Inc. include"compat.inc"; if description scriptid25025;...

MS Windows spoolss GetPrinterData() Remote DoS Exploit (0day)

Exploit for unknown platform in category dos / poc ============================================================= MS Windows spoolss GetPrinterData Remote DoS Exploit 0day ============================================================= !/usr/bin/python MS Windows spoolss GetPrinterData 0day Memory...

[Full-disclosure] Microsoft Excel Array Index Error Remote Code Execution

Microsoft Excel Array Index Error Remote Code Execution By Sowhat of Nevis Labs 2006.07.11 http://www.nevisnetworks.com http://secway.org/advisory/AD20060711.txt Vendor Microsoft Inc. Products affected: Microsoft Office 2000 Service Pack 3 Microsoft Office XP Service Pack 3 Microsoft Office 2003...

MS06-032: Vulnerability in TCP/IP Could Allow Remote Code Execution (917953)

The remote version of Windows contains a version of the TCP/IP protocol that is vulnerable to a buffer overflow attack. An attacker may exploit these flaws to execute code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid21694; scriptversion"1.33";...

[[email protected]: Macromedia Security Bulletins]

Macromedia Security Bulletins: - Contribute Publishing Server - Flash Communication Server - Breeze Communication Server and Breeze Live Server MPSB05-08 Contribute Publishing Server Password Encryption Summary: Macromedia Contribute Publishing Server CPS 1.11 includes a security update that...

Vulnerability in Authenticode Verification Could Allow Remote Code Execution (823182)

There is a vulnerability in Authenticode that, under certain low memory conditions, could allow an ActiveX control to download and install without presenting the user with an approval dialog. SPDX-FileCopyrightText: 2003 Jeff Adams Some text descriptions might be excerpted from a referenced...

Buffer Overrun in Messenger Service (828035)

A security vulnerability exists in the Messenger Service that could allow arbitrary code execution on an affected system. This plugin determined by reading the remote registry that the patch MS03-043 has not been applied. SPDX-FileCopyrightText: 2003 Jeff Adams Some text descriptions might be...

Opening Group Policy Files (Q318089)

Windows 2000 allows local users to prevent the application of new group policy settings by opening Group Policy files with exclusive-read access. Attacker could block application of Group Policy Affected Software: Microsoft Windows 2000 Server Microsoft Windows 2000 Advanced Server Microsoft...

Microsoft IIS IDA/IDQ Path Disclosure Vulnerability (MS00-006) - Active Check

IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions. SPDX-FileCopyrightText: 2000 Filipe Custodio Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Exchange 2000 Exhaust CPU Resources (Q320436)

Malformed Mail Attribute can Cause Exchange 2000 to Exhaust CPU Resources Q320436 SPDX-FileCopyrightText: 2002 Michael Scheidell Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Vulnerability in RPC Runtime Library Could Allow Information Disclosure and Denial of Service (873350)

An information disclosure and denial of service vulnerability exists when the RPC Runtime Library processes specially crafted messages. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holder...

Unchecked Buffer in XP Redirector (Q810577)

The remote host is vulnerable to a flaw in the RPC redirector which can allow a local attacker to run code of its choice with the SYSTEM privileges. OpenVAS Vulnerability Test $Id: smbntms03-005.nasl 6040 2017-04-27 09:02:38Z teissa $ Description: Unchecked Buffer in XP Redirector Q810577 Authors...

Vulnerability in RPC Runtime Library Could Allow Information Disclosure and Denial of Service (873350)

An information disclosure and denial of service vulnerability exists when the RPC Runtime Library processes specially crafted messages. An attacker who successfully exploited this vulnerability could potentially read portions of active memory or cause the affected system to stop responding. OpenV...

XML Core Services patch (Q318203)

XMLHTTP Control Can Allow Access to Local Files. SPDX-FileCopyrightText: 2002 Michael Scheidell Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

US-CERT Technical Cyber Security Alert TA04-104A -- Multiple Vulnerabilities in Microsoft Products

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiple Vulnerabilities in Microsoft Products Original release date: April 13, 2004 Last revised: -- Source: US-CERT Systems Affected Microsoft Windows Operating Systems Microsoft Windows Remote Procedure Call RPC and Distributed Component Object Mod...

hp_bof.txt

Subject: [email protected]: Security Bulletins Digest To: [email protected] [email protected] Content-Type: text/plain; charset=us-ascii PGP Signature Status: unknown Signer: Unknown, Key ID xBE7497F1 Signed: 9/9/99 6:01:14 AM Verified: 9/13/99...