3999 matches found
Design/Logic Flaw
Microsoft Windows XP and Windows Server 2003 do not properly handle user logoff, which might allow local users to gain the privileges of a previous system user, possibly related to user profile unload failure. NOTE: it is not clear whether this is an issue in Windows itself, or an interaction wit...
CVE-2007-0351
CVE-2007-0351 affects Microsoft Windows XP and Windows Server 2003. The issue arises during user logoff, where the system may fail to unload a user profile, potentially allowing a local attacker to gain the privileges of the previously logged-on user. The public description notes uncertainty whet...
CVE-2007-0351
Microsoft Windows XP and Windows Server 2003 do not properly handle user logoff, which might allow local users to gain the privileges of a previous system user, possibly related to user profile unload failure. NOTE: it is not clear whether this is an issue in Windows itself, or an interaction wit...
CVE-2007-0024
Integer overflow in the Vector Markup Language VML implementation vgx.dll in Microsoft Internet Explorer 5.01, 6, and 7 on Windows 2000 SP4, XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted web page that contains unspecified integer properti...
Microsoft Security Bulletin MS07-004 Vulnerability in Vector Markup Language Could Allow Remote Code Execution (929969)
Microsoft Security Bulletin MS07-004 Vulnerability in Vector Markup Language Could Allow Remote Code Execution 929969 Published: January 9, 2007 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity...
Microsoft Windows Vector Markup Language Buffer Overrun Vulnerability
Description Microsoft Windows is prone to a buffer-overrun vulnerability that arises because of an error in the processing of Vector Markup Language documents. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Technologies Affected Avaya...
Microsoft Office And Microsoft Windows RichEdit Component Remote Code Execution Vulnerability
Description Microsoft Office and Microsoft Windows RichEdit component are prone to a remote code-execution vulnerability. This issue occurs when malformed Rich Text Files RTF are processed. An attacker could exploit this issue by enticing a victim to load a malicious RTF file. If the vulnerabilit...
VulnCheck KEV: CVE-2007-0024
Integer overflow in the Vector Markup Language VML implementation vgx.dll in Microsoft Internet Explorer 5.01, 6, and 7 on Windows 2000 SP4, XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted web page that contains unspecified integer...
Microsoft Windows CSRSS HardError Messages Denial of Service Vulnerability
Description Microsoft Windows is prone to a local denial-of-service vulnerability because the operating system fails to handle certain API calls with unexpected parameters. A local unprivileged attacker may exploit this issue by executing a malicious application. Successful exploits will allow...
Microsoft Project Server 2003 PDSRequest.ASP XML请求信息泄露漏洞
Microsoft Project server 2003实现部分瘦客户端功能，瘦客户端使用XML请求对HTTPS服务进行对话。 这些请求其中一个返回用于访问SQL数据库的MSProjectUser帐户的用户名和密码信息： -------------------------------------------------------------- POST http://SERVER/projectserver/logon/pdsrequest.asp HTTP/1.0 Accept: / Accept-Language: en-nz Pragma: no-cache Host:...
Microsoft Windows Media ASF和ASX解析缓冲区溢出漏洞
Windows Media Player是Microsoft开发的流行的媒体播放程序。 Windows Media Format Runtime处理特殊的ASF和ASX文件存在问题，远程攻击者可利用漏洞以应用程序进程权限执行任意指令。 攻击者可以构建包含特殊Windows Media Player的内容恶意页面，诱使用户访问，可以以应用程序进程权限执行任意指令。目前没有详细漏洞细节提供。 Microsoft Windows Media Format 7.1 through 9.5 Series Runtime -Microsoft Windows 2000 Service Pack 4...
CVE-2006-5585
The Client-Server Run-time Subsystem in Microsoft Windows XP SP2 and Server 2003 allows local users to gain privileges via a crafted file manifest within an application, aka "File Manifest Corruption Vulnerability."...
CVE-2006-4702
CVE-2006-4702 is a remote code execution vulnerability in the Windows Media Format Runtime used by Windows Media Player 6.4 and Windows XP SP2, Server 2003 and SP1. The root cause is an unchecked buffer overrun while processing ASF files, allowing a crafted ASF file to execute arbitrary code with...
Microsoft Internet Explorer DHTML Script Function Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. This vulnerability is related to how the browser renders DHTML script functions or nonexistent DHTML elements. An attacker could exploit this issue to execute arbitrary code in the context of the affected...
Microsoft Security Bulletin MS06-072
Microsoft Security Bulletin MS06-072 Cumulative Security Update for Internet Explorer 925454 Published: December 12, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Critical...
Microsoft Security Bulletin MS06-074 Vulnerability in SNMP Could Allow Remote Code Execution (926247)
Microsoft Security Bulletin MS06-074 Vulnerability in SNMP Could Allow Remote Code Execution 926247 Published: December 12, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Importan...
Microsoft Security Bulletin MS06-078 Vulnerability in Windows Media Format Could Allow Remote Code Execution (923689)
Microsoft Security Bulletin MS06-078 Vulnerability in Windows Media Format Could Allow Remote Code Execution 923689 Published: December 12, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Media Formats Impact of Vulnerability: Remote Code Execution...
Microsoft Security Bulletin MS06-076 Cumulative Security Update for Outlook Express (923694)
Microsoft Security Bulletin MS06-076 Cumulative Security Update for Outlook Express 923694 Published: December 12, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Outlook Express Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Important...
Microsoft Windows Manifest File Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability because the software fails to properly process and manage file manifests. An attacker may exploit this issue to manipulate file manifests to elevate user privileges. Successful exploits will result in the complet...
Microsoft Windows SNMP Service Remote Code Execution Vulnerability
Description Microsoft Windows SNMP service is prone to a memory-corruption vulnerability because the software fails to properly bounds-check user-supplied network data before copying it to an insufficiently sized memory buffer. Exploiting this issue allows remote attackers to execute arbitrary...