PT-2012-5349

Name of the Vulnerable Software and Affected Versions Symantec Enterprise Security Manager ESM versions prior to 11.0 Description The issue concerns unquoted Windows search path vulnerabilities in the Manager and Agent components. This could allow local users to gain privileges via unspecified...

CVE-2012-4350: Undefined Security Weakness

Multiple unquoted Windows search path vulnerabilities in the 1 Manager and 2 Agent components in Symantec Enterprise Security Manager ESM before 11.0 allow local users to gain privileges via unspecified vectors...

Design/Logic Flaw

Unquoted Windows search path vulnerability in Symantec Network Access Control SNAC 12.1 before RU2 allows local users to gain privileges via unspecified vectors...

PT-2012-5348

Name of the Vulnerable Software and Affected Versions Symantec Network Access Control SNAC versions 12.1 through 12.1 before RU2 Description The issue allows local users to gain privileges via unspecified vectors due to an unquoted Windows search path vulnerability. Recommendations For Symantec...

CVE-2012-4349: Undefined Security Weakness

Unquoted Windows search path vulnerability in Symantec Network Access Control SNAC 12.1 before RU2 allows local users to gain privileges via unspecified vectors...

OSForensics – Digital investigations faster

OSForensics – Digital investigations faster Here there is a new utility called OSForensics, currently it is freely available that I found very useful for conducting a computer forensics. OSForensics can retrieve data about recently accessed applications, documents, media and network shares by...

Microsoft Windows Search Remote Code Execution Vulnerability (959349)

This host is missing a critical security update according to Microsoft Bulletin MS08-075. OpenVAS Vulnerability Test $Id: gbms08-075.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Windows Search Remote Code Execution Vulnerability 959349 Authors: Madhuri D Copyright: Copyright c 2010 Greenbon...

CVE-2009-2761

Unquoted Windows search path vulnerability in the scheduler sched.exe in Avira AntiVir, AntiVir Premium, Premium Security Suite, and AntiVir Professional might allow local users to gain privileges via a malicious antivir.exe file in the "C:\Program Files\avira" directory...

CVE-2009-2761: Undefined Security Weakness

Unquoted Windows search path vulnerability in the scheduler sched.exe in Avira AntiVir, AntiVir Premium, Premium Security Suite, and AntiVir Professional might allow local users to gain privileges via a malicious antivir.exe file in the "C:\Program Files\avira" directory...

CVE-2009-0239

Cross-site scripting XSS vulnerability in Windows Search 4.0 for Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted file that appears in a preview in a search result, aka "Script Execution in Windows Sear...

Cross site scripting

Cross-site scripting XSS vulnerability in Windows Search 4.0 for Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted file that appears in a preview in a search result, aka "Script Execution in Windows Sear...

CVE-2009-0239

CVE-2009-0239 is a Windows Search 4.0 information-disclosure vulnerability affecting Windows XP SP2/SP3 and Windows Server 2003 SP2. The flaw arises from an unfiltered HTML/embedded content rendering when Previewing or loading a crafted file in Windows Search results, allowing a remote attacker t...

CVE-2009-0239

Cross-site scripting XSS vulnerability in Windows Search 4.0 for Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted file that appears in a preview in a search result, aka "Script Execution in Windows Sear...

MS09-023: Vulnerability in Windows Search Could Allow Information Disclosure (963093)

The remote Windows host contains a version of Windows Search that has a flaw in the way it uses MSHTML a.k.a. Trident to render HTML content that could result in information disclosure. If an attacker can trick a user on the affected host into putting a specially crafted HTML file on the system o...

Microsoft Windows Search information leak

Crossite scripting on search results...

Microsoft Security Bulletin MS09-023 - Moderate Vulnerability in Windows Search Could Allow Information Disclosure (963093)

Microsoft Security Bulletin MS09-023 - Moderate Vulnerability in Windows Search Could Allow Information Disclosure 963093 Published: June 9, 2009 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Windows Search. The vulnerabilit...

CVE-2009-0239: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Windows Search 4.0 for Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted file that appears in a preview in a search result, aka "Script Execution in Windows Sear...

Microsoft Windows Search Script Injection Vulnerability

Description Microsoft Windows Search is prone to a script-injection vulnerability because it fails to adequately sanitize user-supplied input when previewing search results. Successful exploits will cause malicious script code to run in the local context, allowing attackers to steal potentially...

Windows search-ms protocol handler command execution vulnerability

Added: 12/11/2008 CVE: CVE-2008-4269 BID: 32652 OSVDB: 50566 Background The search-ms protocol allows applications to query the Windows Search index. Problem A vulnerability in Windows allows command execution when a user follows a specially crafted search-ms URL which passes arbitrary arguments ...

Code injection

The Windows Search component in Microsoft Windows Vista Gold and SP1 and Server 2008 does not properly free memory during a save operation for a Windows Search file, which allows remote attackers to execute arbitrary code via a crafted saved-search file, aka "Windows Saved Search Vulnerability."...