Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Windows operating system’s log file is caused by an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted .jnt file...

CVE-2015-6097: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted Journal .jnt file, aka "Windows Journal Heap Overflow Vulnerability."...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Windows operating system is related to a numerical overflow during the processing of event log files. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code using a specially crafted JNT file...

Design/Logic Flaw

Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to execute arbitrary code via a crafted .jnt file, aka "Windows Journal RCE...

PT-2015-2016

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Description The issue is related to an integer overflow in Windows Journal, allowing remote attackers to execute arbitrary code via a crafted .jnt file. This can be exploited by a remote...

CVE-2015-2530: Improper Input Validation

Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to execute arbitrary code via a crafted .jnt file, aka "Windows Journal RCE...

PT-2015-2005

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insufficient input validation in the Windows operating system's event log. It can be exploited by a remote attacker using a specially crafted JNT file, potentially...

CVE-2015-2513: Improper Input Validation

Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to execute arbitrary code via a crafted .jnt file, aka "Windows Journal RCE...

CVE-2015-2514: Improper Input Validation

Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to execute arbitrary code via a crafted .jnt file, aka "Windows Journal RCE...

CVE-2015-2516: Improper Input Validation

Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to cause a denial of service data loss via a crafted .jnt file, aka "Windows...

CVE-2015-2519: Integer Overflow or Wraparound

Integer overflow in Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to execute arbitrary code via a crafted .jnt file, aka...

PT-2015-2020

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insufficient input validation when processing an event log file, which can be exploited by a remote attacker using a specially crafted JNT file to execute arbitrary...

PT-2015-2021

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue is related to insufficient input validation when processing a journal file, which can be exploited by a remote attacker using a specially crafted JNT file. This could allo...

PT-2015-2019

Name of the Vulnerable Software and Affected Versions Windows Journal versions in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Description The issue is related to...

CVE-2014-1824

Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted Journal aka .JNT file, aka "Windows Journal Remot...