5118 matches found
Microsoft Windows Web Services on Devices API Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute code with SYSTEM-level privileges. Failed exploit attempts will likely cause denial-of-service conditions. Technologies Affected Microsoft Windows Server 2008 Datacenter...
Microsoft Word Record Parsing Remote Stack Buffer Overflow Vulnerability
Description Microsoft Word is prone to a remote stack-buffer overflow vulnerability. Attackers can exploit this issue by enticing victims into opening a specially crafted Word '.doc' file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running th...
CA eTrust Intrusion Detection Encryption Key Handling Denial of Service (CVE-2007-1005)
CA eTrust Intrusion Detection product offers network access control and monitoring. It monitors and filters the network traffic, detects and blocks viruses or other intrusions. Moreover, it provides centralized monitoring of local and remote stations. There exists a memory corruption vulnerabilit...
Analysis Keylogger case-vulnerability warning-the black bar safety net
Through this case study you can learn to: ① Keyboard recording-related knowledge; ② The use of Keylogger software to obtain information. Keyboard recording is to obtain accurate information of a way, a keyboard logging software installed on the system, hidden processes, the hidden window, the...
Microsoft GDI+ Malformed Office Object Memory Corruption Remote Code Execution Vulnerability
Description Microsoft GDI+ is prone to a remote code-execution vulnerability because the vector graphics link library improperly processes Microsoft Office objects. An attacker could exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit...
Microsoft Windows SMB2 Field Validation Remote Denial of Service Vulnerability
Description Microsoft Windows is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the affected computer to stop responding, denying service to legitimate users. Technologies Affected Microsoft Windows 7 RC Microsoft Windows 7 beta Microsoft Windows...
Microsoft Windows SMB2 Command Value Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute code with SYSTEM-level privileges. Failed exploit attempts will likely cause denial-of-service conditions. Technologies Affected Microsoft Windows 7 RC Microsoft Windows ...
Microsoft Windows Media Player ASF File Processing Remote Code Execution Vulnerability
Description Microsoft Windows Media Player is prone to a remote code-execution vulnerability when handling specially crafted Advanced Systems Format ASF files. An attacker can exploit this issue by enticing an unsuspecting user into opening a malicious file with the vulnerable application. A...
Microsoft Internet Explorer HTML Component Handling Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the computer. Failed attacks m...
Microsoft Silverlight and .NET Framework CLR Interface Handling Remote Code Execution Vulnerability
Description Microsoft Silverlight and .NET Framework are prone to a remote code-execution vulnerability because they fail to properly handle interfaces when running .NET applications. Successful exploits may allow an attacker to execute arbitrary code with the privileges of the currently logged-i...
Microsoft Internet Explorer 'Event' Object Copy Constructor Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the computer. Failed attacks m...
Microsoft GDI+ Malformed Office BMP File Integer Overflow Remote Code Execution Vulnerability
Description Microsoft GDI+ is prone to a remote code-execution vulnerability because the vector graphics link library improperly processes BMP files in Microsoft Office documents. An attacker could exploit this issue to execute arbitrary code with the privileges of the currently logged-in user...
Microsoft Internet Explorer 'deflate' HTTP Content Encoding Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the computer. Failed attacks m...
Microsoft .NET Framework Pointer Verification Remote Code Execution Vulnerability
Description The .NET Framework is prone to a remote code-execution vulnerability because it fails to properly verify .NET applications before running them. Successful exploits may allow an attacker to execute arbitrary code with the privileges of the currently logged-in user. Failed attacks will...
Microsoft .NET Framework Type Verification Remote Code Execution Vulnerability
Description The .NET Framework is prone to a remote code-execution vulnerability because it fails to properly verify .NET applications before running them. Successful exploits may allow an attacker to execute arbitrary code with the privileges of the currently logged-in user. Failed attacks will...
Microsoft Windows Media Runtime File Compression Remote Memory Corruption Vulnerability
Description Microsoft Windows Media Runtime is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affecte...
EasyBits Extras Manager Unspecified Vulnerability
Description EasyBits Extras Manager is prone to an unspecified vulnerability. The cause and impact of this issue are currently unknown. This issue affects versions prior to Extras Manager 2.0.0.67 shipped with versions prior to Skype 4.1.0.179 for Windows. Very few technical details are currently...
CA杀毒引擎arclib库多个内存破坏漏洞
BUGTRAQ ID: 36653 CVE ID: CVE-2009-3587,CVE-2009-3588 Computer Associates是世界领先的安全厂商，产品包括多种杀毒软件及备份恢复系统。 多个CA产品杀毒引擎所使用的arclib组件在解析畸形RAR压缩文件时存在堆或栈内存破坏，用户受骗打开恶意文件就会导致拒绝服务或执行任意指令。 Computer Associates eTrust Intrusion Detection 3.0 SP1 Computer Associates eTrust Intrusion Detection 3.0 Computer...
Adobe Acrobat Reader Remote Code Execution Vulnerability
Description Adobe Acrobat Reader is prone to a remote code-execution vulnerability. An attacker can exploit this issue by supplying a malicious PDF file. Successful exploits may allow the attacker to execute arbitrary code in the context of a user running the affected application. Failed attempts...
Microsoft Windows TCP/IP TimeStamps Remote Code Execution Vulnerability
Description Microsoft Windows TCP/IP protocol implementation is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful attacks will completely compromise affected computers. Technologies Affected Avaya...