Microsoft GDI+ PNG File Processing Remote Code Execution Vulnerability

Description Microsoft GDI+ is prone to a remote code-execution vulnerability because the vector graphics link library improperly processes PNG image files. An attacker could exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts m...

Comcast Alerts Customers to PC Infections

CNet’s Elinor Mills has the scoop on a Comcast trial of a new automated service that will warn broadband customers of possible virus infections, if the computers are behaving as if they have been compromised by malware. For instance, a significant overnight spike in traffic being sent from a...

CVE-2009-3482

TrustPort Antivirus before 2.8.0.2266 and PC Security before 2.0.0.1291 use weak permissions Everyone: Full Control for files under %PROGRAMFILES%, which allows local users to gain privileges by replacing executables with Trojan horse programs...

Code injection

TrustPort Antivirus before 2.8.0.2266 and PC Security before 2.0.0.1291 use weak permissions Everyone: Full Control for files under %PROGRAMFILES%, which allows local users to gain privileges by replacing executables with Trojan horse programs...

CVE-2009-3482

TrustPort Antivirus before 2.8.0.2266 and PC Security before 2.0.0.1291 use weak permissions Everyone: Full Control for files under %PROGRAMFILES%, which allows local users to gain privileges by replacing executables with Trojan horse programs...

CVE-2009-3482

Summary of CVE-2009-3482 Affected software: TrustPort Antivirus (before 2.8.0.2266) and PC Security (before 2.0.0.1291). Issue: Weak permissions (Everyone: Full Control) for files under %PROGRAMFILES% allow local users to replace executables with Trojan horse programs, enabling privilege escalati...

PT-2009-5775 · Pc Security +1 · Pc Security +1

Name of the Vulnerable Software and Affected Versions: TrustPort Antivirus versions prior to 2.8.0.2266 PC Security versions prior to 2.0.0.1291 Description: The issue allows local users to gain privileges by replacing executables with Trojan horse programs due to weak permissions Everyone: Full...

DEBIAN-CVE-2009-3369

CgiUserConfigEdit in BackupPC 3.1.0, when SSH keys and Rsync are in use in a multi-user environment, does not restrict users from the ClientNameAlias function, which allows remote authenticated users to read and write sensitive files by modifying ClientNameAlias to match another system, then...

ASUS Eee PC主板BIOS SMM权限提升漏洞

BUGTRAQ ID: 35995 Eee PC是华硕推出的系列小型笔记本电脑。 华硕主板的BIOS固件包含有带有多个SMI处理器的特殊代码，在引导的时候这些处理器以系统管理模式运行并加载到受保护的内存部分（SMRAM）。 以下是其中的一个SMI处理器$SMISS处理器代码的反汇编： 0003F073: 50 push ax 0003F074: B4A1 mov ah,0A1 0003F076: 9A197D00F0 call 0F000:07D19 0003F07B: 2404 and al,004 0003F07D: 7414 je 00003F093 0003F07F: B434...

Microsoft Virtual PC和Virtual Server本地权限提升漏洞（MS09-033）

BUGTRAQ ID: 35601 CVECAN ID: CVE-2009-1542 Microsoft Virtual PC和Virtual Server都是流行的虚拟机工具，允许在同一台计算机上运行多个操作系统。 Virtual PC和Virtual Server在Virtual Machine Monitor中执行特定指令时没有正确地验证权限级别，可能允许攻击者在承载的Guest操作系统中以提升的权限执行代码。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft Virtual PC 2007 SP1 Microsoft Virtual...

CVE-2009-1542

The Virtual Machine Monitor VMM in Microsoft Virtual PC 2004 SP1, 2007, and 2007 SP1, and Microsoft Virtual Server 2005 R2 SP1, does not enforce CPU privilege-level requirements for all machine instructions, which allows guest OS users to execute arbitrary kernel-mode code and gain privileges...

Information disclosure

The Virtual Machine Monitor VMM in Microsoft Virtual PC 2004 SP1, 2007, and 2007 SP1, and Microsoft Virtual Server 2005 R2 SP1, does not enforce CPU privilege-level requirements for all machine instructions, which allows guest OS users to execute arbitrary kernel-mode code and gain privileges...

CVE-2009-1542

The Virtual Machine Monitor VMM in Microsoft Virtual PC 2004 SP1, 2007, and 2007 SP1, and Microsoft Virtual Server 2005 R2 SP1, does not enforce CPU privilege-level requirements for all machine instructions, which allows guest OS users to execute arbitrary kernel-mode code and gain privileges...

CVE-2009-1542

The CVE-2009-1542 issue is a privilege-escalation vulnerability in the Virtual Machine Monitor (VMM) of Microsoft Virtual PC 2004 SP1, Virtual PC 2007 (including SP1), and Virtual Server 2005 R2 SP1. The VMM fails to enforce CPU privilege-level requirements for specific machine instructions, pote...

Microsoft Virtual PC/Server Privilege Escalation Vulnerability (969856)

This host is missing a critical security update according to Microsoft Bulletin MS09-033. OpenVAS Vulnerability Test $Id: secpodms09-033.nasl 5363 2017-02-20 13:07:22Z cfi $ Microsoft Virtual PC/Server Privilege Escalation Vulnerability 969856 Authors: Antu Sanadi Copyright: Copyright c 2009...

Microsoft Security Bulletin MS09-033 - Important Vulnerability in Virtual PC and Virtual Server Could Allow Elevation of Privilege (969856)

Microsoft Security Bulletin MS09-033 - Important Vulnerability in Virtual PC and Virtual Server Could Allow Elevation of Privilege 969856 Published: July 14, 2009 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Microsoft Virtu...

Microsoft Virtual PC / Microsoft Virtual Server privilege escalation

Acceess to certain privileged instructions is not checked within virtual machine...

Microsoft Virtual PC/Server Privilege Escalation Vulnerability (969856)

This host is missing a critical security update according to Microsoft Bulletin MS09-033. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Inside Microsoft's July Security Patch Batch

Microsoft released six security bulletins today — three rated Critical and three rated Important. Two of the issues are being actively exploited on the Internet and four of the issues are client-side vulnerabilities, which means the exploit can only occur if a user visits an evil website or opens...

Microsoft Virtual PC and Virtual Server Privilege Escalation Vulnerability

Description Microsoft Virtual PC and Virtual Server are prone to a privilege-escalation vulnerability caused by an error in decoding privileged instructions. Note that this issue affects only systems that do not use hardware-assisted virtualization. Successful exploits may allow local attackers t...