MS10-012: Vulnerabilities in SMB Could Allow Remote Code Execution (971468) (uncredentialed check)

The remote host is affected by several vulnerabilities in the SMB server that may allow an attacker to execute arbitrary code or perform a denial of service against the remote host. These vulnerabilities depend on access to a shared drive, but do not necessarily require credentials. C Tenable...

CVE-2010-2739

Buffer overflow in the CreateDIBPalette function in win32k.sys in Microsoft Windows XP SP3, Server 2003 R2 Enterprise SP2, Vista Business SP1, Windows 7, and Server 2008 SP2 allows local users to cause a denial of service crash and possibly execute arbitrary code by performing a clipboard operati...

Microsoft Windows TCP/IP实现IppSortDestinationAddresses()函数整数溢出漏洞（MS10-058）

BUGTRAQ ID: 42254 CVE ID: CVE-2010-1893 Microsoft Windows是微软发布的非常流行的操作系统。 Windows系统中TCP/IP实现的IppSortDestinationAddresses函数在处理SOCKETADDRESSLIST 结构时存在整数溢出漏洞，本地用户可以通过调用WSAIoctl和使用SIOADDRESSLISTSORT IOCTL破坏内核内存，以系统级权限执行任意代码。 在IppSortDestinationAddresses函数的开始处存在以下伪代码： DestinationAddresses =...

JVN#86832361 Microsoft Windows denial of service (DoS) vulnerability

Microsoft Windows contains a denial of service DoS vulnerability caused by IPv6 packets with malformed extension headers. Impact A remote attacker could possibly cause a denial of service DoS by sending specially crafted IPv6 packets. Solution Update the software Update to the latest version...

Windows win32k.sys驱动边界检查本地拒绝服务漏洞（MS10-048）

BUGTRAQ ID: 42250 CVE ID: CVE-2010-1887 Microsoft Windows是微软发布的非常流行的操作系统。 Windows中的win32k.sys内核驱动没有正确地验证传送给系统调用的参数，本地用户可以通过运行特制的应用程序来利用这个漏洞导致系统变得没有响应并自动重启。 Microsoft Windows XP SP3 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windows Server 2008 SP2 Microsoft Windows Server...

Microsoft Security Bulletin MS10-051 - Critical Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution (2079403)

Microsoft Security Bulletin MS10-051 - Critical Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution 2079403 Published: August 10, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Microsoft XML Co...

Microsoft Security Bulletin MS10-054 - Critical Vulnerabilities in SMB Server Could Allow Remote Code Execution (982214)

Microsoft Security Bulletin MS10-054 - Critical Vulnerabilities in SMB Server Could Allow Remote Code Execution 982214 Published: August 10, 2010 Version: 1.0 General Information Executive Summary This security update resolves several privately reported vulnerabilities in Microsoft Windows. The...

Microsoft Security Bulletin MS10-059 - Important Vulnerabilities in the Tracing Feature for Services Could Allow Elevation of Privilege (982799)

Microsoft Security Bulletin MS10-059 - Important Vulnerabilities in the Tracing Feature for Services Could Allow Elevation of Privilege 982799 Published: August 10, 2010 Version: 1.0 General Information Executive Summary This security update resolves one publicly disclosed vulnerability and one...

Microsoft Security Bulletin MS10-058 - Important Vulnerabilities in TCP/IP Could Allow Elevation of Privilege (978886)

Microsoft Security Bulletin MS10-058 - Important Vulnerabilities in TCP/IP Could Allow Elevation of Privilege 978886 Published: August 10, 2010 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in Microsoft Windows. The more...

CVE-2010-2552: Undefined Security Weakness

Stack consumption vulnerability in the SMB Server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to cause a denial of service system hang via a malformed SMBv2 compounded request, aka "SMB Stack Exhaustion Vulnerability."...

CVE-2010-1893: Undefined Security Weakness

Integer overflow in the TCP/IP stack in Microsoft Windows Vista SP1, Windows Server 2008 Gold and R2, and Windows 7 allows local users to gain privileges via a buffer of user-mode data that is copied to kernel mode, aka "Integer Overflow in Windows Networking Vulnerability."...

Microsoft Windows SChannel Certificate Request Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability that affects SChannel. Successful exploits will allow an attacker to run arbitrary code in the context of the currently logged-in user. Technologies Affected Avaya Aura Conferencing 6.0 Avaya Aura Conferencing 6.0...

Microsoft Windows - CreateWindow Function Callback (MS10-048)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ Microsoft Windows CreateWindow function callback vulnerability 1. Advisory Information Title: Microsoft Windows CreateWindow function callback vulnerability Advisory Id:...

Microsoft Security Bulletin MS10-047 - Important Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (981852)

Microsoft Security Bulletin MS10-047 - Important Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege 981852 Published: August 10, 2010 Version: 1.0 General Information Executive Summary This security update resolves several privately reported vulnerabilities in Microsoft Windows...

Microsoft Windows - CreateWindow Function Callback (MS10-048)

Microsoft Windows - CreateWindow Function Callback MS10-048 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ Microsoft Windows CreateWindow function callback vulnerability 1. Advisory Information Title: Microsoft Window...

MS Patch Tuesday: Critical IE, Office Patches Coming

Microsoft is planning a very busy Patch Tuesday this month: 14 bulletins with patches for 34 vulnerabilities in Windows, Microsoft Office, Internet Explorer, SQL and Silverlight. According to Microsoft’s advance notice for the August batch of patches, eight of the bulletins carry a “critical”...

Microsoft Security Bulletin MS10-043 - Critical Vulnerability in Canonical Display Driver Could Allow Remote Code Execution (2032276)

Microsoft Security Bulletin MS10-043 - Critical Vulnerability in Canonical Display Driver Could Allow Remote Code Execution 2032276 Published: July 13, 2010 Version: 1.0 General Information Executive Summary This security update resolves a publicly disclosed vulnerability in the Canonical Display...

Windows Win32k.sys驱动创建窗口权限提升漏洞（MS10-032）

BUGTRAQ ID: 40569 CVE ID: CVE-2010-0485 Windows是微软发布的非常流行的操作系统。 Windows的Win32k.sys内核驱动在创建新的窗口时没有充分地验证所有的回调参数，本地用户可以通过运行特制的应用程序导致执行任意内核态代码。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windows Server 2008 SP2 Microsoft Windows...

Microsoft Help and Support Center 'sysinfo/sysinfomain.htm' Cross Site Scripting Weakness

Description Help and Support Center is prone to a cross-site scripting weakness because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the privileged zone of the browser of an unsuspecting user. NOTE: This issue is a...

Microsoft Windows cdd.dll驱动远程拒绝服务漏洞

BUGTRAQ ID: 40237 CVE ID: CVE-2009-3678 Windows是微软发布的非常流行的操作系统。 Windows所使用的规范显示驱动（cdd.dll）没有正确的解析从用户态拷贝到内核态的信息。用户受骗打开了包含有大量以缩略图形式显示图形文件的文件夹并同时选中删除了大约15到20张图形就会导致系统蓝屏死机。理论上利用该漏洞也可能导致执行任意代码，但由于地址是随机的，因此很难预测最终的指针目标。 Microsoft Windows Server 2008 R2 Microsoft Windows 7 临时解决方法： 禁用Windows Aero主题。 厂商补丁：...