Microsoft Windows CVE-2013-1291 OpenType Font Parsing Remote Denial of Service Vulnerability

Description Microsoft Windows is prone to a remote denial-of-service vulnerability. Successful exploits will allow attackers to cause the affected computer to stop responding and reboot, resulting in a denial-of-service condition. Technologies Affected Avaya Aura Conferencing 6.0 SP1 Standard Ava...

Microsoft Windows 'Win32k.sys' CVE-2013-1292 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to gain elevated privileges and to read arbitrary amounts of kernel memory. Technologies Affected Avaya Aura Conferencing 6.0 SP1 Standard Avaya Aura Conferencing 6.0.0...

PT-2013-3042 · Microsoft · Windows Xp +8

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows 7 versions Gold through SP1 Microsoft...

[Hash Kracker Console] Tool to find out the password from the Hash

Hash Kracker Console is the all-in-one command-line tool to find out the password from the Hash. Currently it supports password recovery from following popular Hash types MD5 SHA1 SHA256 SHA384 SHA512 Also it offers 4 types of Password Recovery methods based on the complexity of password Dictiona...

[IA49] Photodex ProShow Producer v5.0.3310 ScsiAccess Local Privilege Escalation

Inshell Security Advisory http://www.inshell.net 1. ADVISORY INFORMATION ----------------------- Product: Photodex ProShow Producer Vendor URL: www.photodex.com Type: Incorrect Default Permissions CWE-276 Date found: 2013-03-18 Date published: 2013-03-19 CVSSv2 Score: 7,2 AV:L/AC:L/Au:N/C:C/I:C/A...

Photodex ProShow Producer v5.0.3310 ScsiAccess - Local Privilege Escalation

Exploit for windows platform in category local exploits 1. ADVISORY INFORMATION ----------------------- Product: Photodex ProShow Producer 2. CREDITS ---------- This vulnerability was discovered and researched by Julien Ahrens from Inshell Security. 3. VERSIONS AFFECTED --------------------...

Photodex ProShow GoldProducer 5.0.33106.0.3410 - ScsiAccess.exe Local Privilege Escalation

Photodex ProShow GoldProducer 5.0.33106.0.3410 - ScsiAccess.exe Local Privilege Escalation Exploit-DB Note: Vuln still in 6.0.3410 as well as 'Photodex ProShow Gold' Inshell Security Advisory http://www.inshell.net 1. ADVISORY INFORMATION ----------------------- Product: Photodex ProShow Producer...

Microsoft Internet Explorer 不明细节远程代码执行漏洞(CVE-2013-2552)

BUGTRAQ ID: 58569 CVECAN ID: CVE-2013-2552 Microsoft Internet Explorer是微软公司推出的一款网页浏览器。 Windows 8上的Microsoft Internet Explorer 10存在不明细节漏洞，可允许远程攻击者绕过沙盒保护机制。 0 Microsoft Internet Explorer 10 厂商补丁： Microsoft --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Microsoft Windows 8未明拒绝服务漏洞(CVE-2013-2558)

CVE-2013-2558 Microsoft Windows 8是一款流行的操作系统。 Microsoft Windows 8在存在一个安全漏洞，允许攻击者构建恶意的TTF文件，诱使用户解析，可使系统崩溃。 0 Microsoft Windows 8 厂商解决方案 目前没有详细解决方案提供： http://www.microsoft.com...

CVE-2013-2558

Unspecified vulnerability in Microsoft Windows 8 allows remote attackers to cause a denial of service reboot or possibly have unknown other impact via a crafted TrueType Font TTF file, as demonstrated by the 120612-69701-01.dmp error report...

Security feature bypass

The USB kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 do not properly handle objects in memory, which allows physically proximate attackers to...

Security feature bypass

The USB kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 do not properly handle objects in memory, which allows physically proximate attackers to...

Code injection

Unspecified vulnerability in Microsoft Windows 8 allows remote attackers to cause a denial of service reboot or possibly have unknown other impact via a crafted TrueType Font TTF file, as demonstrated by the 120612-69701-01.dmp error report...

CVE-2013-1286

The USB kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 do not properly handle objects in memory, which allows physically proximate attackers to...

CVE-2013-1285

The USB kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 do not properly handle objects in memory, which allows physically proximate attackers to...

CVE-2013-2558

Unspecified vulnerability in Microsoft Windows 8 allows remote attackers to cause a denial of service reboot or possibly have unknown other impact via a crafted TrueType Font TTF file, as demonstrated by the 120612-69701-01.dmp error report...

CVE-2013-2558

Technical details about CVE-2013-2558 are not publicly provided in the supplied documents; no concrete affected products/versions/fixes are specified here. Monitor for updates.

Microsoft Windows CVE-2013-1286 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers. Technologies Affected...

CVE-2013-2552

Unspecified vulnerability in Microsoft Internet Explorer 10 on Windows 8 allows remote attackers to bypass the sandbox protection mechanism by leveraging access to a Medium integrity process, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2013...

Design/Logic Flaw

Unspecified vulnerability in Microsoft Internet Explorer 10 on Windows 8 allows remote attackers to bypass the sandbox protection mechanism by leveraging access to a Medium integrity process, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2013...