Microsoft Windows Win32 API fails to properly validate function parameters

Overview The Microsoft Windows Win32 API fails to properly validate function parameters, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The Microsoft Windows Win32 API is a set of application programming interfaces for the...

Microsoft Windows Win32 API Code Execution (MS07-035; CVE-2007-2219)

Microsoft Win32 API application programming interface provides 32-bit services used by all Windows-based applications.A remote code execution vulnerability has been reported in the Microsoft Windows implementation of Win32 API.Remote attacker could exploit this issue by convincing a user to visit...

[Reversemode Advisory] VMware Products - GPF Denial of Service

VMWARE PRODUCTS VMWARE MEMORY MANAGER - GPF DENIAL OF SERVICE Rubйn Santamarta [email protected] 07.05.2007 Affected products: All VMware products with a hypervisor are affected + VMware WorkStation 5.5.3 and earlier + VMware Player 1.0.3 and earlier + VMware Server 1.0.2 and earlier + VMware...

Microsoft Win32 API Parameter Validation Remote Code Execution Vulnerability

Description The Microsoft Win32 API is prone to remote code execution. An attacker could exploit this issue to execute code in the context of the user visiting a malicious webpage. Technologies Affected Avaya CIE 1.0 Avaya Messaging Application Server Avaya Messaging Application Server MM 1.1 Ava...

Win32 API 'shatter' vulnerability found in VNC-based products

Win32 API 'shatter' vulnerability found in VNC-based products CONFIRMED PROGRAMS: VNC v3.3.3R9 TightVNC v1.2.5 TridiaVNC 1.5.4 SUSPECTED PROGRAMS: TridiaVNC Pro All other VNC-based remote console products EXPLOIT TYPE: 'Shatter'-type win32-based local privilege escalation See:...

Microsoft Windows XP2000NT 4.0 - Window Message Subsystem Design Error (6)

Microsoft Windows XP2000NT 4.0 - Window Message Subsystem Design Error 6 // source: https://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely...

Microsoft Windows XP/2000/NT 4.0 - Window Message Subsystem Design Error (4)

// source: https://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely affects almost every Win32 window-based application. Attackers with loca...

Microsoft Windows XP2000NT 4.0 - Window Message Subsystem Design Error (8)

Microsoft Windows XP2000NT 4.0 - Window Message Subsystem Design Error 8 source: https://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely...

Microsoft Windows XP2000NT 4.0 - Window Message Subsystem Design Error (1)

Microsoft Windows XP2000NT 4.0 - Window Message Subsystem Design Error 1 // source: https://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely...

Microsoft Windows XP2000NT 4.0 - Window Message Subsystem Design Error (2)

Microsoft Windows XP2000NT 4.0 - Window Message Subsystem Design Error 2 // source: https://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely...

Microsoft Windows XP2000NT 4.0 - Window Message Subsystem Design Error (4)

Microsoft Windows XP2000NT 4.0 - Window Message Subsystem Design Error 4 // source: https://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely...

Microsoft Windows XP/2000/NT 4.0 - Window Message Subsystem Design Error (1)

// source: https://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely affects almost every Win32 window-based application. Attackers with loca...

Microsoft Windows XP/2000/NT 4.0 - Window Message Subsystem Design Error (2)

// source: https://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely affects almost every Win32 window-based application. Attackers with loca...

Microsoft Windows XP/2000/NT 4.0 - Window Message Subsystem Design Error (6)

// source: https://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely affects almost every Win32 window-based application. Attackers with loca...

Microsoft Windows XP/2000/NT 4.0 - Window Message Subsystem Design Error (3)

// source: https://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely affects almost every Win32 window-based application. Attackers with loca...

Microsoft Windows XP/2000/NT 4.0 - Window Message Subsystem Design Error (5)

// source: https://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely affects almost every Win32 window-based application. Attackers with loca...

windows.weak.passwds.txt

Secure Storage of Secrets in Windows Aleph One [email protected] Mon, 17 May 1999 14:57:31 -0700 Not long ago we discussed why you still see messages that describe yet another application that stores passwords in an insecure manner, in particular under Windows. The bottom line was that there...