Design/Logic Flaw

The OpenType Font OTF driver in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to execute arbitrary cod...

Microsoft Windows Kernel-Mode Drivers Remote Code Execution Vulnerabilities (2783534)

This host is missing a critical security update according to Microsoft Bulletin MS12-078. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2012-4786: Improper Control of Generation of Code

The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allow remote attackers to execute arbitrary code via a crafted TrueType Font TTF...

MS12-078: Vulnerability in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (2783534)

The remote Windows host is affected by the following remote code execution vulnerabilities : - An OpenType Font parsing vulnerability exists due to the way OpenType font files are handled. CVE-2012-2556 - A TrueType Font parsing vulnerability exists due to the way TrueType font files are...

MS12-078: Description of the security update for Windows kernel-mode drivers: December 11, 2012

None None...

Microsoft Windows Kernel 'Win32k.sys' 本地权限提升漏洞(CVE-2012-2553) (MS12-075)

BUGTRAQ ID: 56448 CVE ID: CVE-2012-2553 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows XP SP3、Windows Server 2003 SP2、Windows Vista SP2、Windows Server 2008 SP2、Windows 7 Gold/SP1内核模式驱动程序内的win32k.sys存在释放后重新漏洞，通过特制的应用，可允许本地用户获取权限。 0 Microsoft Windows 8 Microsoft Windows 7 Microsoft Windows XP...

CVE-2012-2530: Undefined Security Weakness

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application, aka "Win32k U...

CVE-2012-2553: Undefined Security Weakness

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application, aka "Win32k Use After Free...

MS12-075: Vulnerabilities in Windows kernel-mode drivers could allow remote code execution: November 13, 2012

None None...

CVE-2012-2897

The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT, as used by Google Chrome before 22.0.1229.79 and other programs, do not properl...

Design/Logic Flaw

The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT, as used by Google Chrome before 22.0.1229.79 and other programs, do not properl...

CVE-2012-2897

The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT, as used by Google Chrome before 22.0.1229.79 and other programs, do not properl...

CVE-2012-2897

Removed by vendor...

Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerability (2731847)

This host is missing an important security update according to Microsoft Bulletin MS12-055. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerability (2731847)

This host is missing an important security update according to Microsoft Bulletin MS12-055. OpenVAS Vulnerability Test $Id: secpodms12-055.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerability 2731847 Authors: Madhuri D Copyright: Copyright c...

MS12-055: Vulnerability in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2731847)

The remote Windows host is affected by a privilege escalation vulnerability in the kernel-mode drivers due to a use-after-free error. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid61530; scriptversion"1.13"; scriptcvsdate"Date: 2018/11/15 20:50:31";...

CVE-2012-2527: Undefined Security Weakness

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application, aka "Win32k U...

Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (2718523)

This host has important security update missing according to Microsoft Bulletin MS12-047. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2012-1893

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate callback parameters during creation of a hook procedure, which allows local users t...

CVE-2012-1893: Improper Input Validation

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate callback parameters during creation of a hook procedure, which allows local users t...