PT-2011-2027

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Description An issue exists in the way the Windows Client/Server Run-time Subsystem CSRSS terminates a process when a user logs off, allowing local users t...

KLA12360 ACE vulnerability in Microsoft Windows

Code execution vulnerability was found in Microsoft Windows. Malicious users can exploit this vulnerability in Human Interface Device HID to execute arbitrary code. Original advisories CVE-2011-0638 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Windows-Vist...

Microsoft Internet ExplorerC SS解析远程内存损坏漏洞

Microsoft Internet Explorer是一个远程内存容易腐败的漏洞。 攻击者可以利用通过诱使不知情的用户查看特制网页，此问题。 成功利用此问题可能会允许攻击者执行所需的应用程序上下文任意代码。 利用企图失败将导致拒绝服务条件。 Internet Explorer版本6和8是脆弱的。 Microsoft Internet Explorer 8 Microsoft Internet Explorer 7.0 3DM Software Disk Management Software SP2 Microsoft Windows Server 2003 Itanium SP2...

CVE-2010-4669: Undefined Security Weakness

The Neighbor Discovery ND protocol implementation in the IPv6 stack in Microsoft Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7 allows remote attackers to cause a denial of service CPU consumption and system hang by sending many Router Advertisement RA messages...

Stack overflow

Stack-based buffer overflow in the CreateSizedDIBSECTION function in shimgvw.dll in the Windows Shell graphics processor aka graphics rendering engine in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary...

Memory corruption

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption Vulnerability."...

CVE-2010-3960

Hyper-V in Microsoft Windows Server 2008 Gold, SP2, and R2 allows guest OS users to cause a denial of service host OS hang by sending a crafted encapsulated packet over the VMBus, aka "Hyper-V VMBus Vulnerability."...

PT-2010-5198

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Description The issue is related to a buffer overflow in the Routing and Remote Access NDProxy component of the Windows kernel, caused by improper copying...

PT-2010-4258

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2003 SP2 Microsoft Windows Server 2008 Gold, SP2, and R2 Description The issue concerns a denial of service NULL pointer dereference and reboot in the Netlogon RPC Service when the domain controller role is enabled. Th...

CVE-2010-3961: Undefined Security Weakness

The Consent User Interface UI in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly handle an unspecified registry-key value, which allows local users with SeImpersonatePrivilege rights to gain privileges via a crafted application, aka...

CVE-2010-3944: Improper Input Validation

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption Vulnerability."...

CVE-2010-2742: Undefined Security Weakness

The Netlogon RPC Service in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, and R2, when the domain controller role is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and reboot via a crafted RPC packet, aka "Netlogon RPC Null dereference DOS...

PT-2010-5201

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 R2 Windows 7 Description The issue allows local users to gain privileges via a Trojan horse DLL in the current working directory. This can be demonstrated by a directory that contains specific file types. A remote...

CVE-2010-3966: Undefined Security Weakness

Untrusted search path vulnerability in Microsoft Windows Server 2008 R2 and Windows 7, when BranchCache is supported, allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains an EML file, an RSS file, or a WPOST...

PT-2010-5195

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 Gold, SP2, and R2 Description The issue allows guest OS users to cause a denial of service, resulting in the host OS hanging, by sending a crafted encapsulated packet over the VMBus. Recommendations For Microsoft...

CVE-2010-3960: Improper Input Validation

Hyper-V in Microsoft Windows Server 2008 Gold, SP2, and R2 allows guest OS users to cause a denial of service host OS hang by sending a crafted encapsulated packet over the VMBus, aka "Hyper-V VMBus Vulnerability."...

Microsoft Windows OpenType Compact Font Format Driver Privilege Escalation Vulnerability (2296199)

This host is missing an important security update according to Microsoft Bulletin MS10-091. OpenVAS Vulnerability Test $Id: secpodms10-091.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft Windows OpenType Compact Font Format Driver Privilege Escalation Vulnerability 2296199 Authors: Veerendra GG...

Microsoft Hyper-V VMBus Denial of Service Vulnerability

Description Microsoft Hyper-V is prone to a denial-of-service vulnerability. Using a guest system, a local attacker can exploit this issue to force the Hyper-V server to become unresponsive, denying service to legitimate users. The denial-of-service conditions would also affect other guest...

Microsoft Windows win32k.sys驱动"GreEnableEUDC()"权限提升漏洞

Microsoft Windows是微软发布的非常流行的操作系统。 Windows的win32k.sys驱动实现上存在漏洞，本地攻击者可能利用此漏洞提升权限或导致拒绝服务。 此漏洞源于驱动中的"GreEnableEUDC"函数，通过构造畸形的"SystemDefaultEUDCFont"注册表项，本地攻击者可以给"RtlQueryRegistryValues"函数的"QueryTable"参数提供恶意数据，导致"EntryContext" 缓冲区溢出。 Microsoft Windows XP Professional Microsoft Windows XP Home Edition...

IBM Rational Quality Manager and Test Lab Manager Policy Bypass

Added: 11/05/2010 CVE: CVE-2010-4094 BID: 44172 Background IBM Rational Quality Manager is a web-based centralized test management environment for test planning, workflow control, tracking and metrics reporting. IBM Rational Quality Manager incorporates Apache Tomcat 5 to help serve custom web...