CVE-2011-1889

CVE-2011-1889 affects Microsoft Forefront Threat Management Gateway (TMG) 2010. The vulnerability is in the NSPLookupServiceNext function of the TMG Firewall Client Winsock provider, due to a memory corruption/bounds-checking flaw that enables remote code execution. Exploitation involved remote a...

CVE-2011-1889

The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway TMG 2010 allows remote attackers to execute arbitrary code via vectors involving unspecified requests, aka "TMG Firewall Client Memory Corruption Vulnerability."...

CVE-2011-1889: Improper Restriction of Operations within the Bounds of a Memory Buffer

The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway TMG 2010 allows remote attackers to execute arbitrary code via vectors involving unspecified requests, aka "TMG Firewall Client Memory Corruption Vulnerability."...

CVE-2011-1889

The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway TMG 2010 allows remote attackers to execute arbitrary code via vectors involving unspecified requests, aka “TMG Firewall Client Memory Corruption Vulnerability.” Recent assessments: Assessed Attacker...

Microsoft Forefront Threat Management Gateway (TMG)防火墙客户端内存破坏漏洞

Bugtraq ID: 48181 CVE ID：CVE-2011-1889 Microsoft Forefront Threat Management Gateway可以安装在DirectAccess服务器上，提供额外保护和其他Forefront TMG功能。 NSPLookupServiceNext函数存在一个边界错误，提交通过TMG防火墙客户端的特殊请求可破坏内存，成功利用漏洞可执行任意代码。 Microsoft Forefront Threat Management Gateway 2010 Client 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息：...

Microsoft Forefront Threat Management Gateway Firewall Client memory corruption

Buffer overflow in NSPLookupServiceNext...

MS Windows Threat Management Gateway Firewall Client Remote Code Execution Vulnerability (2520426)

This host is missing a critical security update according to Microsoft Bulletin MS11-040 OpenVAS Vulnerability Test $Id: secpodms11-040.nasl 5362 2017-02-20 12:46:39Z cfi $ MS Windows Threat Management Gateway Firewall Client Remote Code Execution Vulnerability 2520426 Authors: Antu Sanadi...

Microsoft Windows Threat Management Gateway Firewall Client Remote Code Execution Vulnerability (2520426)

This host is missing a critical security update according to Microsoft Bulletin MS11-040 SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Forefront Threat Management Gateway (TMG) Firewall Client Memory Corruption Vulnerability

Description Microsoft Forefront Threat Management Gateway TMG Firewall client is prone to a memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed attacks may cause a denial-of-service condition...

MS11-040: Vulnerability in Threat Management Gateway Firewall Client could cause remote code execution: June 14, 2011

Resolves a vulnerability in the Microsoft Forefront Threat Management Gateway 2010 Client that could allow remote code execution if a malicious user leverages a client to make specific requests on a system on which the TMG firewall client is used.This security update and the vulnerability that is...

Microsoft Forefront UAG Signurl.asp Cross-Site Scripting (MS10-089; CVE-2010-3936)

Microsoft Forefront Unified Access Gateway UAG is designed to provide secure remote access to corporate resources for employees, partners and vendors from both managed and unmanaged PCs and mobile devices. UAG provides a variety of connection options including SSL VPN, Microsoft DirectAccess and...

Microsoft Forefront Endpoint Protection / System Center Endpoint Protection / Anti-malware Client Detection and Status

Microsoft Forefront Endpoint Protection, or another antimalware product from Microsoft, is installed on the remote host. However, there is a problem with the installation; either its services are not running or its engine and/or virus definitions are out of date. C Tenable Network Security, Inc...

Microsoft Products Malware Protection Engine权限提升漏洞

BUGTRAQ ID: 46540 CVE ID: CVE-2011-0037 Microsoft Malware Protection Engine是微软反恶意软件产品的一部分。 Malware Protection Engine产品的实现上存在设计问题，本地攻击者可利用此漏洞提升权限。 此漏洞源于Microsoft Malware Protection Engine在扫描时的错误，可通过设置注册表项的特制值提升权限。 Microsoft Microsoft Forefront Endpoint Protection 2010 Microsoft Microsoft Forefront...

Code injection

Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool MSRT, Windows Defender, Security Essentials, Forefront Client Security, Forefront Endpoint Protection 2010, and Windows Live OneCare, allows local users to gain privileges via a crafted val...

CVE-2011-0037

CVE-2011-0037 affects Microsoft Malware Protection Engine (MMPE) prior to 1.1.6603.0, used in MSRT, Windows Defender, Security Essentials, Forefront products, and related tools. The vulnerability allows local privilege escalation through a crafted value of an unspecified user registry key. The do...

PT-2011-2034

Name of the Vulnerable Software and Affected Versions Microsoft Malware Protection Engine versions prior to 1.1.6603.0 Microsoft Malicious Software Removal Tool MSRT affected versions not specified Windows Defender affected versions not specified Security Essentials affected versions not specifie...

Microsoft Issues Fix for Bug in Malware Protection Engine

Microsoft has issued an update to its core malware protection engine that fixes a bug that could allow an attacker to gain LocalSystem privileges on a vulnerable machine if a specific set of odd conditions exist. The vulnerability in the Microsoft Malware Protection Engine is a privilege-escalati...

Microsoft security update stamps out 11 product vulnerabilities

Microsoft security update stamps out 11 product vulnerabilities American software heavyweight Microsoft Corp. has this week rolled out three security bulletins for Windows, addressing a total of 11 vulnerabilities targeting potential exploits in platforms ranging from Microsoft Office to Forefron...

CVE-2010-2734

Cross-site scripting XSS vulnerability in the mobile portal in Microsoft Forefront Unified Access Gateway UAG 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "XSS Issue on UAG Mobile Portal Website in Forefron...

CVE-2010-3936

Cross-site scripting XSS vulnerability in Signurl.asp in Microsoft Forefront Unified Access Gateway UAG 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "XSS in Signurl.asp Vulnerability."...