CVE-2004-0574

CVE-2004-0574 affects the NNTP component in Windows NT 4.0 Server, Windows 2000 Server, Windows Server 2003, Exchange 2000/2003, enabling remote code execution via XPAT pattern handling. The issue stems from improper length validation and unchecked buffers, leading to off-by-one and heap-based ov...

CVE-2004-0840

The SMTP Simple Mail Transfer Protocol component of Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows Server 2003 64-bit Edition, and the Exchange Routing Engine component of Exchange Server 2003, allows remote attackers to execute arbitrary code via a malicious DNS response messa...

Microsoft Security Bulletin MS04-034 Vulnerability in Compressed (zipped) Folders Could Allow Remote Code Execution (873376)

Microsoft Security Bulletin MS04-034 Vulnerability in Compressed zipped Folders Could Allow Remote Code Execution 873376 Issued: October 12, 2004 Version: 1.0 Summary Who should read this document: Customers who use Microsoft® Windows XP or Windows Server 2003 Impact of Vulnerability: Remote Code...

CVE-2003-0825

CVE-2003-0825 concerns the Windows Internet Naming Service (WINS) in Windows NT/2000/Server 2003 families, where malformed packets with improper lengths bypass WINS’ length validation. The result is a remote denial of service on Windows Server 2003 and, for older platforms, potential denial of se...

CVE-2004-0202

IDirectPlay4 Application Programming Interface API of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server 2003 and earlier allows remote attackers to cause a denial of service application crash via a malformed packet...

Gattaca Server 2003 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/10731/info Gattaca Server 2003 is reported prone to a cross-site scripting vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. A remote attacker can exploit this issue by creating a malicious link to the...

Gattaca Server 2003 POP3 - Denial of Service

Gattaca Server 2003 POP3 - Denial of Service source: https://www.securityfocus.com/bid/10728/info It is reported that Gattaca Server 2003 contains multiple denial of service vulnerabilities. These vulnerabilities allow a remote attacker to crash the application, denying service to legitimate user...

Gattaca Server 2003 - Cross-Site Scripting

Gattaca Server 2003 - Cross-Site Scripting source: https://www.securityfocus.com/bid/10731/info Gattaca Server 2003 is reported prone to a cross-site scripting vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. A remote attacker can exploit this issu...

Gattaca Server 2003 - Null Byte Full Path Disclosure

Gattaca Server 2003 - Null Byte Full Path Disclosure source: https://www.securityfocus.com/bid/10729/info It is reported that Gattaca Server 2003 contains multiple path disclosure vulnerabilities. By sending HTTP requests to Gattaca's web server, it is reportedly possible to cause the application...

Gattaca Server 2003 - 'web.tmpl?Language' CPU Consumption (Denial of Service)

source: https://www.securityfocus.com/bid/10728/info It is reported that Gattaca Server 2003 contains multiple denial of service vulnerabilities. These vulnerabilities allow a remote attacker to crash the application, denying service to legitimate users. Version 1.1.10.0 is reported vulnerable...

Gattaca Server 2003 POP3 - Denial of Service

source: https://www.securityfocus.com/bid/10728/info It is reported that Gattaca Server 2003 contains multiple denial of service vulnerabilities. These vulnerabilities allow a remote attacker to crash the application, denying service to legitimate users. Version 1.1.10.0 is reported vulnerable...

Gattaca Server 2003 - Null Byte Full Path Disclosure

source: https://www.securityfocus.com/bid/10729/info It is reported that Gattaca Server 2003 contains multiple path disclosure vulnerabilities. By sending HTTP requests to Gattaca's web server, it is reportedly possible to cause the application to return error pages that contain the full...

CVE-2004-0201

The CVE-2004-0201 entry documents a heap-based buffer overflow in the HTML Help viewer hh.exe used by HTML Help (.chm) on Windows platforms (Windows 98, Me, NT 4.0, 2000, XP, and Server 2003). The vulnerability allows remote code execution via a .CHM file with a large length field, enabling an at...

CVE-2004-0199

Help and Support Center in Microsoft Windows XP and Windows Server 2003 SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code, as demonstrated using certain hcp:// URLs that access the DVD Upgrade capability dvdupgrd.htm...

CVE-2004-0202

IDirectPlay4 Application Programming Interface API of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server 2003 and earlier allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2004-0119

The Negotiate Security Software Provider SSP interface in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service crash from null dereference or execute arbitrary code via a crafted SPNEGO NegTokenInit request during authentication protocol selectio...

CVE-2004-0123

Double free vulnerability in the ASN.1 library as used in Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service and possibly execute arbitrary code...

CVE-2004-0117

Unknown vulnerability in the H.323 protocol implementation in Windows 98, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code...

CVE-2004-0199

CVE-2004-0199 is a real vulnerability affecting the Help and Support Center in Windows XP and Windows Server 2003 SP1/64-Bit variants. The flaw arises from improper validation of HCP URLs (hcp://), enabling remote code execution when a user visits a crafted page or HTML e-mail that triggers the D...

Microsoft Windows HSC DVD Driver Upgrade Code Execution Vulnerability

Description A security vulnerability has been reported in Microsoft Windows XP and Server 2003 operating systems. This issue exists in the Help and Support Center HSC and is due to how the feature handles HCP invocation URIs for DVD driver upgrades. This issue could be exploited from a malicious...