3963 matches found
CVE-2011-1975
The CVE-2011-1975 entry describes an Untrusted search path vulnerability in the Data Access Tracing component of Windows Data Access Components (MDAC) 6.0. A local attacker could gain privileges by placing a Trojan horse DLL in the current working directory, demonstrated via a crafted Excel (.xls...
CVE-2011-1965
CVE-2011-1965 corresponds to a denial-of-service vulnerability in the Windows TCP/IP stack (Tcpip.sys) where URL-based QoS handling could be abused to reboot the host. Affected products include Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1. The root cause is improper handling of UR...
PT-2011-3513 · Microsoft · Windows Vista Sp2 +5
Name of the Vulnerable Software and Affected Versions: Windows Vista SP2 Windows Server 2008 SP2 Windows Server 2008 R2 Windows Server 2008 R2 SP1 Windows 7 Gold Windows 7 SP1 Description: A denial of service issue exists due to improper parsing of file metadata by the kernel. This allows local...
Microsoft Remote Desktop Web Access 跨站脚本漏洞
Bugtraq ID: 49040 CVE ID：CVE-2011-1263 Microsoft Windows是一款流行的操作系统。 传递给远程桌面WEB访问登录页面的部分输入在返回用户之前缺少过滤，这可导致跨站脚本攻击，可在目标用户浏览器上执行任意HTML和脚本代码。 Microsoft Windows Server 2008 R2 x64 Microsoft Windows Server 2008 R2 for x64-based Systems SP1 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息：...
MS 2562937: Update Rollup for ActiveX Kill Bits (2562937)
The remote Windows host is missing a list of kill bits for ActiveX controls that are known to contain vulnerabilities. If these ActiveX controls are ever installed on the remote host, either now or in the future, they would expose it to various security issues. Note that the affected controls are...
Microsoft Windows TCP/IP QOS 远程拒绝服务漏洞(CVE-2011-1965)
Bugtraq ID: 48990 CVE ID：CVE-2011-1965 Microsoft Windows是一款流行的操作系统。 处理URLs时TCP/IP栈Tcpip.sys存在错误，通过构建特制URL，向提供基于URL QoS的网页内容服务系统提供恶意请求，可导致系统停止响应或重新启动 Microsoft Windows Server 2008 R2 x64 SP1 Microsoft Windows Server 2008 R2 x64 0 Microsoft Windows Server 2008 R2 Itanium SP1 Microsoft Windows Serve...
Microsoft Windows Data Access Component DLL Loading Arbitrary Code Execution Vulnerability
Description Microsoft Windows is prone to an arbitrary-code-execution vulnerability that affects the Data Access Component. Attackers can exploit this vulnerability to execute arbitrary code in the context of the user running the vulnerable application. Technologies Affected Avaya Aura Conferenci...
Microsoft Remote Desktop Web Access Detection
Remote Desktop Web Access was detected on the remote web server. This application allows access to RemoteApp and Desktop Connection via a web browser. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid55800; scriptversion"1.8"; scriptcvsdate"Date: 2020/01/22";...
MS11-059: Vulnerability in Data Access Components could allow remote code execution: August 9, 2011
None None...
Design/Logic Flaw
Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application...
CVE-2011-1884
CVE-2011-1884 describes a use-after-free vulnerability in the Windows kernel‑mode driver component win32k.sys. The flaw arises from incorrect management of driver objects in the Win32k subsystem, enabling a local attacker to gain privileges by running a crafted application. Affected platforms inc...
Microsoft Windows CSRSS 'SrvWriteConsoleOutput()' Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers. Technologies Affected...
MS11-056: Vulnerabilities in Windows CSRSS could allow elevation of privilege: July 12, 2011
None None...
Description of the System Center Virtual Machine Manager 2008 R2 SP1 hotfix rollup package: July 12, 2011
None None...
HP Data Protector 6.11 Remote Buffer Overflow + DEP Bypass
Exploit for windows platform in category remote exploits !/usr/bin/python HP Data Protector 6.11 Remote Buffer Overflow Tested on Windows 2003 R2 + DEP Enabled Authors: muts & dookie Reference: http://www.exploit-db.com/exploits/17458/ Reference:...
VulnCheck KEV: CVE-2011-1249
The Ancillary Function Driver AFD in afd.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which allows local users to gain privileges...
CORE-2011-0203 - MS HyperV Persistent DoS Vulnerability
Core Security Technologies - Corelabs Advisory http://corelabs.coresecurity.com/ MS HyperV Persistent DoS Vulnerability 1. Advisory Information Title: MS HyperV Persistent DoS Vulnerability Advisory ID: CORE-2011-0203 Advisory URL:...
Microsoft Windows MHTML Mime-Formatted Request Information Disclosure Vulnerability
Description Microsoft Windows is prone to a remote information-disclosure vulnerability. Attackers can exploit this issue to gain access to sensitive information that may aid in further attacks. Attackers can exploit this issue by enticing an unsuspecting user to visit a specially crafted webpage...
Microsoft Hyper-V VMBus 'vmswitch.sys' Denial of Service Vulnerability
Description Microsoft Hyper-V is prone to a local denial-of-service vulnerability. Using a guest system, a local attacker can exploit this issue to force the Hyper-V server to become unresponsive, denying service to legitimate users. The denial-of-service conditions would also affect other guest...
MS HyperV Persistent DoS Vulnerability
Exploit for windows platform in category dos / poc Core Security Technologies - Corelabs Advisory http://corelabs.coresecurity.com/ MS HyperV Persistent DoS Vulnerability 1. Advisory Information Title: MS HyperV Persistent DoS Vulnerability Advisory ID: CORE-2011-0203 Advisory URL:...