Microsoft Windows Kernel整数截断本地权限提升漏洞

BUGTRAQ ID: 46136 CVE ID: CVE-2011-0045 Windows是微软发布的非常流行的操作系统。 Windows Kernel在实现上存在本地权限提升漏洞，攻击者可利用此漏洞以内核级别权限执行任意代码，从而完全控制受影响计算机。 此漏洞源于Kernel对跟踪事件的支持。由于畸形转换，Kernel为用户空间中的数据分配使用截断的长度。在填充此缓冲区时，Kernel将使用造成缓冲区溢出的另一个长度。这将造成内存破坏并导致执行任意代码。 Microsoft Windows XP Tablet PC Edition SP3 Microsoft Windows XP...

Microsoft Windows SMB Registry : Win 7 / Server 2008 R2 Service Pack Detection

It is possible to determine the Service Pack version of the Windows 7 / Server 2008 R2 system by reading the registry key 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CSDVersion'. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid52459; scriptversion"1.9";...

Citrix Provisioning Services streamprocess.exe Stack Overflow

Added: 02/24/2011 BID: 45914 OSVDB: 70597 Background Citrix Provisioning Services dynamically provisions virtual servers to simplify and streamline server management, while reducing software rollout risk. Problem Citrix Provisioning Service 5.6 and prior are vulnerable to a remotely exploitable...

Citrix Provisioning Services streamprocess.exe Stack Overflow

Added: 02/24/2011 BID: 45914 OSVDB: 70597 Background Citrix Provisioning Services dynamically provisions virtual servers to simplify and streamline server management, while reducing software rollout risk. Problem Citrix Provisioning Service 5.6 and prior are vulnerable to a remotely exploitable...

Citrix Provisioning Services streamprocess.exe Stack Overflow

Added: 02/24/2011 BID: 45914 OSVDB: 70597 Background Citrix Provisioning Services dynamically provisions virtual servers to simplify and streamline server management, while reducing software rollout risk. Problem Citrix Provisioning Service 5.6 and prior are vulnerable to a remotely exploitable...

Citrix Provisioning Services streamprocess.exe Stack Overflow

Added: 02/24/2011 BID: 45914 OSVDB: 70597 Background Citrix Provisioning Services dynamically provisions virtual servers to simplify and streamline server management, while reducing software rollout risk. Problem Citrix Provisioning Service 5.6 and prior are vulnerable to a remotely exploitable...

Microsoft PowerPoint 2007 OfficeArt Atom Remote Code Execution Vulnerability

This host is installed with Microsoft Office Power Point and is prone to remote code execution vulnerability. This NVT has been replaced by NVT secpodms11-022.nasl OID:1.3.6.1.4.1.25623.1.0.902411. OpenVAS Vulnerability Test $Id: gbmspowerpointcodeexecvuln.nasl 6538 2017-07-05 11:38:27Z cfischer ...

Microsoft PowerPoint 2007 OfficeArt Atom RCE Vulnerability

Microsoft Office Power Point is prone to a remote code execution RCE vulnerability. This VT has been deprecated and replaced by the VT with the OID: 1.3.6.1.4.1.25623.1.0.902411. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Windows 7 Service Pack 1: 39 Security Fixes, Few Major Changes

With Microsoft set to release the first Service Pack for its Windows 7 Operating System to the general public on Tuesday, businesses and consumers are preparing for an update that fixes hundreds of security and functional problems, but this Service Pack is more housekeeping than a radical home...

VMSA-2011-0003 : Third-party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX

a. vCenter Server and vCenter Update Manager update Microsoft SQL Server 2005 Express Edition to Service Pack 3 Microsoft SQL Server 2005 Express Edition SQL Express distributed with vCenter Server 4.1 Update 1 and vCenter Update Manager 4.1 Update 1 is upgraded from SQL Express Service Pack 2 to...

Windows Client/Server Run-time Subsystem Privilege Elevation Vulnerability (2476687)

This host is missing a critical security update according to Microsoft Bulletin MS11-010. OpenVAS Vulnerability Test $Id: secpodms11-010.nasl 5362 2017-02-20 12:46:39Z cfi $ Windows Client/Server Run-time Subsystem Privilege Elevation Vulnerability 2476687 Authors: Sooraj KS Copyright: Copyright ...

Microsoft Kerberos Privilege Escalation Vulnerabilities (2496930)

This host is missing a critical security update according to Microsoft Bulletin MS11-013. OpenVAS Vulnerability Test $Id: secpodms11-013.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Kerberos Privilege Escalation Vulnerabilities 2496930 Authors: Antu Sanadi Updated by: Antu Sanadi on 2011-03-17...

Microsoft Windows Kernel Integer Truncation Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers. Failed exploit attempts may cause a...

Microsoft Windows Fax Cover Page Editor BOF Vulnerabilities

This host is installed with Fax Cover Page Editor and is prone to buffer overflow vulnerabilities. This NVT has been replaced by NVT secpodms11-024.nasl OID:1.3.6.1.4.1.25623.1.0.902408. OpenVAS Vulnerability Test $Id: gbmswindowsfscpebofvuln.nasl 8724 2018-02-08 15:02:56Z cfischer $ Microsoft...

Immunity Canvas: MS_TASKSCHEDULER

Name| mstaskscheduler ---|--- CVE| CVE-2010-2743 Exploit Pack| CANVAS Description| MSTASKSCHEDULER Notes| CVE Name: CVE-2010-2743 VENDOR: Microsoft Notes: This is one of the vulnerabilities used by the Stuxnet work to elevate its privileges on Windows Vista and Windows 7. This vulnerability is...

Microsoft Outlook Express And Windows Mail NNTP Protocol Heap Buffer Overflow Vulnerability (941202)

This host is missing a critical security update according to Microsoft Bulletin MS07-056. OpenVAS Vulnerability Test $Id: gbms07-056.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Outlook Express And Windows Mail NNTP Protocol Heap Buffer Overflow Vulnerability 941202 Authors: Madhuri D Copyright...

MS11-002: Description of the security update for Windows Data Access Components 6.0: January 11, 2011

None None...

Microsoft Windows Speech Components Voice Recognition Command Execution Vulnerability (950760)

This host is missing a critical security update according to Microsoft Bulletin MS08-032. OpenVAS Vulnerability Test $Id: gbms08-032.nasl 5362 2017-02-20 12:46:39Z cfi $ Description: Microsoft Windows Speech Components Voice Recognition Command Execution Vulnerability 950760 Authors: Madhuri D...

Microsoft SharePoint Could Allow Remote Code Execution Vulnerability (2455005)

This host is missing a critical security update according to Microsoft Bulletin MS10-104 OpenVAS Vulnerability Test $Id: secpodms10-104.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft SharePoint Could Allow Remote Code Execution Vulnerability 2455005 Authors: Madhuri D Copyright: Copyright c 2010...

Microsoft SharePoint Could Allow Remote Code Execution Vulnerability (2455005)

This host is missing a critical security update according to Microsoft Bulletin MS10-104 SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...