Microsoft Security Bulletin MS08-063 – Important Vulnerability in SMB Could Allow Remote Code Execution (957095)

Microsoft Security Bulletin MS08-063 – Important Vulnerability in SMB Could Allow Remote Code Execution 957095 Published: October 14, 2008 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Microsoft Server Message Block SMB...

Microsoft Windows Internet打印服务整数溢出漏洞（MS08-062）

BUGTRAQ ID: 31682 CVECAN ID: CVE-2008-1446 Microsoft Windows是微软发布的非常流行的操作系统。 IIS的Internet打印协议ISAPI扩展在处理特制的IPP响应时存在整数溢出漏洞。如果Windows系统上在运行IIS且启用了Internet打印服务的话，远程攻击者可以通过特制的HTTP POST请求诱骗受影响的服务器连接到恶意的IPP服务器来触发这个溢出，导致执行任意指令。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP1...

Message Queuing Remote Code Execution Vulnerability (951071)

This host is missing important security update according to Microsoft Bulletin MS08-065. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS08-058: Microsoft Internet Explorer Multiple Vulnerabilities (956390)

The remote host is missing the IE cumulative security update 956390. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid34403;...

MS08-061: Microsoft Windows Kernel Multiple Privilege Elevation (954211)

The remote host contains a version of the Windows kernel that is vulnerable to a security flaw that could allow a local user to elevate his privileges or to crash it therefore causing a denial of service. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid34406;...

Microsoft Message Queuing Service RPC Query Heap Corruption Vulnerability

Description The Microsoft Message Queuing service MSMQ is prone to a remote heap-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges, facilitating the complete compromise of an affected computer. Failed exploit attempts will result i...

PT-2008-5351 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 Description: A buffer underflow issue exists in the Server Message Block SMB protocol, allowing remote attackers to execute...

Microsoft Windows Internet Printing Service Integer Overflow Vulnerability

Description Microsoft Internet Printing Service is prone to an integer-overflow vulnerability. Exploiting this vulnerability allows attackers to execute arbitrary code with system-level privileges. Technologies Affected HP Storage Management Appliance 2.1 Microsoft Windows 2000 Advanced Server...

Microsoft Windows 2000 Active Directory buffer overflow

Buffer overflow on LDAP request processing...

PT-2008-3745 · Microsoft · Windows Server 2008 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 2000 SP4 through Server 2008 Description: The issue arises from the Windows kernel's failure to properly validate window properties sent from a parent window to a child window during the creation of a new window. Th...

Microsoft Security Bulletin MS08-061 – Important Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (954211)

Microsoft Security Bulletin MS08-061 – Important Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege 954211 Published: October 14, 2008 Version: 1.0 General Information Executive Summary This security update resolves one publicly disclosed and two privately reported vulnerabiliti...

Microsoft Security Bulletin MS08-058 - Critical Cumulative Security Update for Internet Explorer (956390)

Microsoft Security Bulletin MS08-058 - Critical Cumulative Security Update for Internet Explorer 956390 Published: October 14, 2008 Version: 1.0 General Information Executive Summary This security update resolves five privately reported vulnerabilities and one publicly disclosed vulnerability. Th...

Microsoft Windows Kernel Memory Corruption Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successfully exploiting this issue will result in the complete compromise of affected...

Microsoft Security Bulletin MS08-060 – Critical Vulnerability in Active Directory Could Allow Remote Code Execution (957280)

Microsoft Security Bulletin MS08-060 – Critical Vulnerability in Active Directory Could Allow Remote Code Execution 957280 Published: October 14, 2008 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in implementations of Active...

Microsoft Internet Explorer HTML Element Cross Domain Security Bypass Vulnerability

Description Microsoft Internet Explorer is prone to a cross-domain security-bypass vulnerability because the application fails to properly enforce the same-origin policy. An attacker can exploit this issue to execute arbitrary script code in another browser window's security zone. This may allow...

FastStone Image Viewer 3.6 (malformed bmp image) DoS Exploit

No description provided by source. Name : FastStone Image Viewer v3.6 malformed bmp image DoS Exploit Credit : suN8Hclf DaRk-CodeRs Group, [email protected] Download: : http://www.FastStone.org Greetz : Luigi Auriemma, 0in, cOndemned, e.wiZz!, Gynvael Coldwind, Katharsis, all from dark-coder...

Microsoft Rich Textbox ActiveX control SaveFile vulnerability

Added: 10/07/2008 CVE: CVE-2008-0237 BID: 27201 OSVDB: 40234 Background Microsoft Rich Textbox is an ActiveX control which comes with Visual Basic and allows creation of formatted text in RTF files. It is located in the Richtx32.ocx file. Problem The SaveFile method in the Rich Textbox ActiveX...

Microsoft Rich Textbox ActiveX control SaveFile vulnerability

Added: 10/07/2008 CVE: CVE-2008-0237 BID: 27201 OSVDB: 40234 Background Microsoft Rich Textbox is an ActiveX control which comes with Visual Basic and allows creation of formatted text in RTF files. It is located in the Richtx32.ocx file. Problem The SaveFile method in the Rich Textbox ActiveX...

Microsoft Rich Textbox ActiveX control SaveFile vulnerability

Added: 10/07/2008 CVE: CVE-2008-0237 BID: 27201 OSVDB: 40234 Background Microsoft Rich Textbox is an ActiveX control which comes with Visual Basic and allows creation of formatted text in RTF files. It is located in the Richtx32.ocx file. Problem The SaveFile method in the Rich Textbox ActiveX...

ayeview220-dos.txt

Name : AyeView v2.20 malformed gif image DoS Exploit Credit : suN8Hclf DaRk-CodeRs Group, [email protected] Download: : http://www.ayeview.com/downloads.htm Greetz : Luigi Auriemma, 0in, cOndemned, e.wiZz!, Gynvael Coldwind, Katharsis, all from dark-coders and others; PoC: !/usr/local/bin/pe...