Microsoft Windows无线LAN AutoConfig帧解析堆溢出漏洞（MS09-049）

BUGTRAQ ID: 36223 CVECAN ID: CVE-2009-1132 Microsoft Windows是微软发布的非常流行的操作系统。 无线局域网AutoConfig服务（wlansvc）解析无线网络上收到的特定帧的方式中存在堆溢出漏洞。如果启用了无线网络接口的客户端或服务器收到特制的无线帧，此漏洞可能允许远程执行代码。如果用户使用管理用户权限登录，成功利用此漏洞的攻击者可以安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft...

Microsoft Security Bulletin MS09-049 - Critical Vulnerability in Wireless LAN AutoConfig Service Could Allow Remote Code Execution (970710)

Microsoft Security Bulletin MS09-049 - Critical Vulnerability in Wireless LAN AutoConfig Service Could Allow Remote Code Execution 970710 Published: September 08, 2009 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Wireless L...

Microsoft Windows Wireless LAN AutoConfig service buffer overflow

Buffer overflow on access point frame parsing...

CVE-2009-1132

Heap-based buffer overflow in the Wireless LAN AutoConfig Service aka Wlansvc in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a malformed wireless frame, aka "Wireless Frame Parsing Remote Code Execution Vulnerabilit...

CVE-2009-1132

Heap-based buffer overflow in the Wireless LAN AutoConfig Service aka Wlansvc in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a malformed wireless frame, aka "Wireless Frame Parsing Remote Code Execution Vulnerabilit...

Microsoft Windows Wireless LAN AutoConfig Frame Parsing Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability because the Wireless LAN AutoConfig Service fails to properly validate certain network frames. To exploit this issue, an attacker must be within close physical proximity of the affected computer. Attackers can exploit...

MS09-049: Vulnerability in Wireless LAN AutoConfig Service Could Allow Remote Code Execution (970710)

A remote code execution vulnerability exists in the way that the Wireless LAN AutoConfig Service wlansvc parses specific frames received on the wireless network. This vulnerability could allow remote code execution if a client or server with a wireless network interface enabled receives specially...

CVE-2009-2976

Cisco Aironet Lightweight Access Point AP devices send the contents of certain multicast data frames in cleartext, which allows remote attackers to discover Wireless LAN Controller MAC addresses and IP addresses, and AP configuration details, by sniffing the wireless network...

Code injection

Cisco Aironet Lightweight Access Point AP devices send the contents of certain multicast data frames in cleartext, which allows remote attackers to discover Wireless LAN Controller MAC addresses and IP addresses, and AP configuration details, by sniffing the wireless network...

CVE-2009-2976

Cisco Aironet Lightweight Access Point AP devices send the contents of certain multicast data frames in cleartext, which allows remote attackers to discover Wireless LAN Controller MAC addresses and IP addresses, and AP configuration details, by sniffing the wireless network...

CVE-2009-2976

Cisco Aironet Lightweight AP devices transmit certain multicast frames in cleartext, enabling remote attackers who sniff the wireless medium to discover Wireless LAN Controller MAC addresses, IP addresses, and AP configuration details. The connected reports reiterate this behavior without providi...

Huawei SmartAX MT880 - Multiple Cross-Site Request Forgery Vulnerabilities

Huawei SmartAX MT880 - Multiple Cross-Site Request Forgery Vulnerabilities Description: Huawei MT880 is a device offered by the algerian telecom operator - FAWRI, to provide ADSL Internet connexion and it's already widely in use. Overview: Huawei MT880 firmware and its default configuration has...

Huawei SmartAX MT880 Multiple XSRF Vulnerabilities

Exploit for hardware platform in category remote exploits ================================================== Huawei SmartAX MT880 Multiple XSRF Vulnerabilities ================================================== Description: Huawei MT880 is a device offered by the algerian telecom operator - FAWRI...

Huawei SmartAX MT880 - Multiple Cross-Site Request Forgery Vulnerabilities

Description: Huawei MT880 is a device offered by the algerian telecom operator - FAWRI, to provide ADSL Internet connexion and it's already widely in use. Overview: Huawei MT880 firmware and its default configuration has flaws, which allows LAN users to gain unauthorized full access to device. He...

Autonomous LAN Party 0.98.3 Remote File Inclusion

============================================================================================================ x Autonomous LAN party = 0.98.3 Remote File Include Vulnerability || ! Download Script : || http://sourceforge.net/projects/alp/files/alp/alp0-98-315oct2006/alp0-98-315oct2006.zip/download...

The LAN ARP spoofing hung it to the way of detailed explanation-vulnerability warning-the black bar safety net

Web page hang Horsethe most difficult is to spread a small website, easy to invade but the access number is not much, harvest the broiler also is not very much. Therefore, a new hang horse way began to pop--LANARP spoofinghung it, as long as the local area network within a machine caught, it can...

Autonomous LAN party <= 0.98.3 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================== Autonomous LAN party = 0.98.3 Remote File Inclusion Vulnerability ==================================================================...

PT-2009-4388 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: The issue allows remote Telnet servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user. This is related to a credential...

Multiple Flaws in Huawei SmartAX MT880 [was: Multiple Flaws in Huawei D100]

Description: Huawei MT880 is a device offered by the algerian telecom operator - FAWRI, to provide ADSL Internet connexion and it's already widely in use. Overview: Huawei MT880 firmware and its default configuration has flaws, which allows LAN users to gain unauthorized full access to device. He...

Huawei MT800 Cross Site Request Forgery

Description: Huawei MT880 is a device offered by the algerian telecom operator - FAWRI, to provide ADSL Internet connexion and it's already widely in use. Overview: Huawei MT880 firmware and its default configuration has flaws, which allows LAN users to gain unauthorized full access to device. He...