219 matches found
Microsoft Windows IME Elevation of Privilege Vulnerability
Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in Windows when the Windows Input Method Editor IME incorrectly handles DLL loading. If the IME is not present, there is no impact. A local, authenticated...
August 2, 2016 — KB3176929 (OS Build 14393.10)
None None...
MS15-116: Description of the security update for Pinyin IME 2010: November 10, 2015
None None...
Microsoft Windows multiple security vulnerabilities
OLE code execution, Internet Explorer multiple vulnerabilities, Schannel code execution, XML Core Services code execution, TCP/IP privilege escalation, Windows Audio Service privilege escalation, .NET Framework privilege escalation, RDP restrictions bypass, IIS restrictions bypass, IME privilege...
MS15-020: Description of the security update for Windows text services: March 10, 2015
None None...
Microsoft Office IME (Japanese) Privilege Elevation Vulnerability (2992719)
This host is missing a moderate security update according to Microsoft Bulletin MS14-078. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MS14-078: Vulnerability in IME (Japanese) Could Allow Elevation of Privilege (2992719)
The remote Windows host is affected by a privilege escalation vulnerability in the Microsoft Input Method Editor IME Japanese component that is triggered when loading dictionary files. An attacker can exploit this vulnerability by convincing a user to open a specially crafted file, resulting in a...
Privilege escalation
Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Office 2007 SP3, when IMJPDCT.EXE aka IME for Japanese is installed, allow remote attackers to bypass a sandbox protection mechanism via a crafted PDF document, aka "Microsoft IME Japanese...
CVE-2014-4077
CVE-2014-4077: Microsoft IME (Japanese) privilege escalation via IMJPDCT.EXE, allowing sandbox bypass when processing crafted PDF files. Affected: Windows XP/Vista/2003/2008/7 with Office 2007/2010/2013 suites; exploited in the wild (2014). Mitigation: apply MS14-078 updates. Connected sources co...
CVE-2014-4077
Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Office 2007 SP3, when IMJPDCT.EXE aka IME for Japanese is installed, allow remote attackers to bypass a sandbox protection mechanism via a crafted PDF document, aka "Microsoft IME Japanese...
CVE-2014-4077
Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Office 2007 SP3, when IMJPDCT.EXE aka IME for Japanese is installed, allow remote attackers to bypass a sandbox protection mechanism via a crafted PDF document, aka "Microsoft IME Japanese...
MS14-078: Description of the security update for IME: November 11, 2014
None None...
KLA10601 Multiple vulnerabilities in Microsoft products
Multiple serious vulnerabilities have been found in Microsoft products. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service gain privileges, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1...
MS13-075: Vulnerability in Microsoft Office IME (Chinese) Could Allow Elevation of Privilege (2878687)
The version of Microsoft Office Input Method Editor Chinese installed on the remote host has a privilege escalation vulnerability. A local attacker could exploit this by utilizing the MSPY IME toolbar in an unspecified manner, resulting in arbitrary code execution in kernel mode. C Tenable Networ...
Microsoft Office Pinyin IME 2010本地权限提升漏洞(CVE-2013-3859)
BUGTRAQ ID: 62181 CVECAN ID: CVE-2013-3859 Microsoft Office Pinyin IME是微软开发的拼音输入方法。 Office 2010 中文版默认安装的MSPY IME（中文）没有正确开放某些配置选项，如果登录攻击者从 Microsoft Pinyin IME 简体中文版的工具栏中启动 Internet Explorer，则该漏洞可能允许特权提升。成功利用此漏洞的攻击者可以运行内核模式中的任意代码。 0 Microsoft Office 2010 Microsoft Pinyin IME 2010 厂商补丁： Microsoft...
CVE-2013-3859
Microsoft Pinyin IME 2010, when used in conjunction with Microsoft Office 2010 SP1, does not properly restrict configuration options, which allows local users to gain privileges by starting Internet Explorer from the IME toolbar, aka "Chinese IME Vulnerability."...
CVE-2013-3859
Microsoft Pinyin IME 2010, when used in conjunction with Microsoft Office 2010 SP1, does not properly restrict configuration options, which allows local users to gain privileges by starting Internet Explorer from the IME toolbar, aka "Chinese IME Vulnerability."...
Design/Logic Flaw
Microsoft Pinyin IME 2010, when used in conjunction with Microsoft Office 2010 SP1, does not properly restrict configuration options, which allows local users to gain privileges by starting Internet Explorer from the IME toolbar, aka "Chinese IME Vulnerability."...
CVE-2013-3859
Microsoft Pinyin IME 2010, when used in conjunction with Microsoft Office 2010 SP1, does not properly restrict configuration options, which allows local users to gain privileges by starting Internet Explorer from the IME toolbar, aka "Chinese IME Vulnerability."...
CVE-2013-3859
CVE-2013-3859 affects Microsoft Office IME 2010 (Chinese) installed with Office 2010 SP1. A local attacker can escalate privileges by using the MSPY Chinese IME toolbar to start Internet Explorer, leading to kernel-mode arbitrary code execution. Vendors issued MS13-075 with patches; affected prod...