CVE-2010-3944

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption Vulnerability."...

CVE-2010-3966

The CVE-2010-3966 entry concerns Microsoft Windows BranchCache vulnerability in Windows 7/Server 2008 R2 where loading of a Trojan horse DLL from the current directory is untrusted. The linked OpenVAS/Nessus entries describe that placing a crafted file (examples: .eml, .rss, .wpost) in the same n...

CVE-2010-3944

CVE-2010-3944 corresponds to a Win32k memory corruption/pointer-dereference vulnerability in Windows 7 and Windows Server 2008 R2 kernel-mode drivers. A crafted input may allow a local attacker to cause a bugcheck or possibly execute arbitrary code via CSRSS.EXE, as demonstrated by public PoCs an...

CVE-2010-3944: Improper Input Validation

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption Vulnerability."...

CVE-2010-2742: Undefined Security Weakness

The Netlogon RPC Service in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, and R2, when the domain controller role is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and reboot via a crafted RPC packet, aka "Netlogon RPC Null dereference DOS...

PT-2010-5195

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 Gold, SP2, and R2 Description The issue allows guest OS users to cause a denial of service, resulting in the host OS hanging, by sending a crafted encapsulated packet over the VMBus. Recommendations For Microsoft...

PT-2010-5201

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 R2 Windows 7 Description The issue allows local users to gain privileges via a Trojan horse DLL in the current working directory. This can be demonstrated by a directory that contains specific file types. A remote...

PT-2010-5182

Name of the Vulnerable Software and Affected Versions Windows Server 2008 R2 affected versions not specified Windows 7 affected versions not specified Description The issue is related to improper validation of user-mode input by the Windows kernel-mode drivers, which can be exploited by a local...

CVE-2010-3966: Undefined Security Weakness

Untrusted search path vulnerability in Microsoft Windows Server 2008 R2 and Windows 7, when BranchCache is supported, allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains an EML file, an RSS file, or a WPOST...

PT-2010-4258

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2003 SP2 Microsoft Windows Server 2008 Gold, SP2, and R2 Description The issue concerns a denial of service NULL pointer dereference and reboot in the Netlogon RPC Service when the domain controller role is enabled. Th...

ASPR #2010-12-14-1: Remote Binary Planting in Windows Address Book

=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2010-12-14-1 ------------------------------------------------------------------------- ASPR 2010-12-14-1: Remote Binary Planting in Windows Address Book...

Microsoft Windows BranchCache Insecure Library Loading (MS10-095; CVE-2010-3966)

BranchCache is a wide area network WAN bandwidth optimization technology that is included in some editions of the Windows Server 2008 R2 and Windows 7 operating systems. To optimize WAN bandwidth, BranchCache copies content from your main office content servers and caches the content at branch...

Microsoft Windows 'Win32k.sys' Cursor Linking Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the 'Win32k.sys' Windows kernel-mode driver. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromi...

Microsoft Windows CVE-2010-3944 'Win32k.sys' Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the 'Win32k.sys' Windows kernel-mode driver. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromi...

The Windows System State Analyzer tool !

It has been a long time since Microsoft came out with this nifty little tool that could help you find what has changed on a system. It allows you to take snapshots and compare them before and after taking the snapshot. The basic functionality of the System State Analyzer tool is to allow you to...

SuSE 11 / 11.1 Security Update : Samba (SAT Patch Numbers 3099 / 3100)

A buffer overflow in the sidparse function of samba could potentially be exploited by remote attackers to execute arbitrary code. CVE-2010-3069 Additionally the update also contains fixes for the following non-security issues : - Failed to join ADS Domain. bnc567013 - Samba 3.0 / 3.2 doesn't work...

PT-2010-5340

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP Professional version SP3 Microsoft Windows Server 2003 R2 Enterprise Edition version SP3 Microsoft Windows Vista Business version SP1 Microsoft Windows 7 Professional affected versions not specified Description The issue...

Cross site scripting

Cross-site scripting XSS vulnerability in Attachmate Reflection for the Web 2008 R2 builds 10.1.569 and earlier, 2008 R1, and 9.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-4146

CVE-2010-4146 describes a cross-site scripting (XSS) vulnerability in Attachmate Reflection for the Web 2008 R2 (builds ≤10.1.569) and in Reflection for the Web 2008 R1 and 9.6 and earlier. The issue permits remote attackers to inject arbitrary web script or HTML via unspecified vectors. The Conn...

Microsoft Windows故障切换集群不安全文件权限漏洞（MS10-086）

BUGTRAQ ID: 43818 CVE ID: CVE-2010-3223 Microsoft Windows是微软发布的非常流行的操作系统。 Failover Cluster Manager用户界面处理共享集群磁盘权限的方式存在篡改漏洞，起因是Failover Cluster Manager在向集群添加磁盘时使用了不安全的默认权限。当管理员向共享集群添加磁盘时，Failover Cluster Manager对共享的集群磁盘设置权限的方式允许非授权用户获得对故障切换集群磁盘上的管理共享的读写/删除访问。 Microsoft Windows Server 2008 R2 临时解决方法...