July 9, 2019—KB4507452 (Monthly Rollup)

None None...

May 14, 2019—KB4499149 (Monthly Rollup)

None None...

April 9, 2019—KB4493471 (Monthly Rollup)

None None...

Microsoft Windows Information Disclosure Vulnerability (KB4039038)

This host is missing an important security update according to Microsoft KB4039038 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2017-0039: Undefined Security Weakness

Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle dynamic link library DLL loading, which allows local users to gain privileges via a crafted application, aka "Library Loading Input Validation Remote Code Execution Vulnerability."...

CVE-2016-0152: Undefined Security Weakness

Internet Information Services IIS in Microsoft Windows Vista SP2 and Server 2008 SP2 mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Windows DLL Loading Remote Code Execution Vulnerability."...

CVE-2016-0100: Improper Input Validation

Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Library Loading Input Validation Remote Code Execution Vulnerability."...

CVE-2015-2474: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Windows Vista SP2 and Server 2008 SP2 allow remote authenticated users to execute arbitrary code via a crafted string in a Server Message Block SMB server error-logging action, aka "Server Message Block Memory Corruption Vulnerability."...

CVE-2014-0262: Undefined Security Weakness

win32k.sys in the kernel-mode drivers in Microsoft Windows 7 SP1 and Server 2008 R2 SP1 does not properly consider thread-owned objects during the processing of window handles, which allows local users to gain privileges via a crafted application, aka "Win32k Window Handle Vulnerability."...

CVE-2013-3906: Improper Control of Generation of Code

GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Lync 2010, 2010 Attendee, 2013, and Basic 2013 allows remote attackers to execute arbitrary code via a crafted TIFF image, as demonstrated by an image in a...

CVE-2013-3862: Undefined Security Weakness

Double free vulnerability in Microsoft Windows 7 and Server 2008 R2 SP1 allows local users to gain privileges via a crafted service description that is not properly handled by services.exe in the Service Control Manager SCM, aka "Service Control Manager Double Free Vulnerability."...

CVE-2012-0165: Improper Input Validation

GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2 and Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1 does not properly validate record types in EMF images, which allows remote attackers to execute arbitrary code via a crafted image, aka "GDI+ Record Type Vulnerability."...

Microsoft Windows TCP/IP本地权限提升漏洞(MS12-032)

BUGTRAQ ID: 53349 CVE ID: CVE-2012-0179 Microsoft Windows是流行的计算机操作系统。 Microsoft Windows在实现上存在影响TCP/IP栈组件'tcpip.sys'的本地权限提升漏洞，攻击者可利用此漏洞通过在另一个进程中执行任意代码获取提升的权限，可能会造成拒绝服务。 0 Microsoft Server 2008 Windows Server 2008 R2 x64 SP1 Microsoft Server 2008 Windows Server 2008 R2 x64 0 Microsoft Server 2008...

Microsoft Windows DNS Server远程拒绝服务漏洞(MS12-017)

BUGTRAQ ID: 52374 CVE ID: CVE-2012-0006 Windows DNS Server是微软公司推出的域名系统或者域名服务，域名系统为Internet上的主机分配域名地址和IP地址。 Windows DNS Server在处理某些lookup查询时，在实现上存在远程拒绝服务漏洞，远程攻击者可利用此漏洞造成DNS服务器停止响应，拒绝服务合法用户。 0 Microsoft Server 2008 Microsoft Server 2003 厂商补丁： Microsoft ---------...

Microsoft Windows TrueType字体解析拒绝服务漏洞(MS11-084)

CVE ID: CVE-2011-2004 Microsoft Windows是流行的计算机操作系统。 Microsoft Windows在实现上存在安全漏洞，可被恶意用户利用造成拒绝服务。 此漏洞源于在解析TrueType字体文件时Win32k.sys中存在的数组索引错误，可通过诱使用户浏览包含特制TrueType字体文件的WebDAV或网络共享利用此漏洞。 Microsoft Windows Server 2008 Microsoft Windows 7 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（ms11-084）以及相应补丁:...

Microsoft Windows用户访问控制(UAC)绕过本地权限提升漏洞

BUGTRAQ ID: 45045 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows实现上存在漏洞，本地攻击攻击者可以利用此漏洞以系统级权限执行任意代码，成功利用漏洞将完全操纵受影响的计算机，利用失败后可能形成拒绝服务。 Microsoft Vista x64 Edition SP2 Microsoft Vista x64 Edition SP1 Microsoft Vista x64 Edition 0 Microsoft Vista Ultimate SP2 Microsoft Vista Ultimate SP1 Microso...

CVE-2010-0024: Improper Input Validation

The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2003 SP2, does not properly parse MX records, which allows remote DNS servers to cause a denial of service service outage via a crafted response to a DNS MX...

CVE-2010-0025: Exposure of Sensitive Information to an Unauthorized Actor

The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2000 SP3, does not properly allocate memory for SMTP command replies, which allows remote attackers to read fragments of e-mail messages by sending a series of...

CVE-2010-0242: Undefined Security Weakness

The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to cause a denial of service system hang via crafted packets with malformed TCP selective acknowledgement SACK values, aka "TCP/IP Selective Acknowledgement Vulnerability."...

CVE-2009-2505: Improper Authentication

The Internet Authentication Service IAS in Microsoft Windows Vista SP2 and Server 2008 SP2 does not properly validate MS-CHAP v2 Protected Extensible Authentication Protocol PEAP authentication requests, which allows remote attackers to execute arbitrary code via crafted structures in a malformed...