3637 matches found
Microsoft Windows Service Control Manager CVE-2015-1702 Remote Privilege Escalation Vulnerability
Description Microsoft Windows Service Control Manager is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges within the context of the affected system. Technologies Affected Avaya CallPilot 4.0 Avaya CallPilot 4.0.1 Avaya CallPilot...
Microsoft Windows Kernel Mode Driver CVE-2015-1676 Local Information Disclosure Vulnerability
Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information such as kernel memory contents. This may aid in launching further attacks. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP...
KLA10580 Multiple vulnerabilities in Microsoft products
Multiple serious vulnerabilities have been found in Microsoft products. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, gain privileges or obtain sensitive information. Below is a complete list of vulnerabilities 1. An unknown...
Immunity Canvas: MS15_051
Name| ms15051 ---|--- CVE| CVE-2015-1701 Exploit Pack| CANVAS Description| win32k.sys bServerSideWindowProc flag logic issue Notes| Repeatability: Infinite Notes: This module exploits a vulnerability on the win32k.sys driver. The bServerSideWindowProc flag on the window's handle structure is mean...
CVE-2015-1701
Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka "Win32k Elevation of Privilege Vulnerability."...
CVE-2015-1701: Undefined Security Weakness
Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka "Win32k Elevation of Privilege Vulnerability."...
CVE-2015-1645
Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow remote attackers to execute arbitrary code via a crafted Enhanced Metafile EMF image, aka "EMF Processing Remote Code Execution Vulnerability."...
Microsoft XML Core Services CVE-2015-1646 Same Origin Policy Security Bypass Vulnerability
Description Microsoft XML Core Services is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass the same-origin policy and perform unauthorized actions. This could be used to steal sensitive information or launch other attacks. Technologies Affected Avaya CallPil...
PT-2015-1064
Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2003 SP2 Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Description The issue is related to the improper processing of specially crafted Enhanced Metafile EMF image...
MS15-032: Cumulative Security Update for Internet Explorer (3038314)
The version of Internet Explorer installed on the remote host is missing Cumulative Security Update 3038314. It is, therefore, affected by multiple vulnerabilities, the majority of which are remote code execution vulnerabilities. An attacker can exploit these vulnerabilities by convincing a user ...
Microsoft Winhlp32 Compressed Phrase Buffer Overflow attack - Ver2 (CVE-2004-1306)
A buffer overflow vulnerability has been reported in Microsoft Windows XP, Microsoft Windows 2000, Microsoft Windows NT and Microsoft Windows Server 2003. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause...
Microsoft DirectShow MPEG 3 Channel Mode Memory Corruption - Ver2 (CVE-2010-1882)
A memory corruption vulnerability has been reported in Microsoft Windows XP, Microsoft Windows Server 2003 x64 64-bit and Microsoft Windows Server 2003. An attacker could exploit this vulnerability via an MPEG Layer-3 audio stream in a crafted media file or crafted streaming content. Successful...
IT-Grundschutz M5.131: Absicherung von IP-Protokollen unter Windows Server 2003
IT-Grundschutz M5.131: Absicherung von IP-Protokollen unter Windows Server 2003. Stand: 14. Ergänzungslieferung 14. EL. OpenVAS Vulnerability Test $Id: GSHBM5131.nasl 7883 2017-11-23 11:22:59Z emoss $ IT-Grundschutz, 14. EL, Maßnahme 5.131 Authors: Thomas Rotter Copyright: Copyright c 2015...
IT-Grundschutz M4.284: Umgang mit Diensten ab Windows Server 2003
IT-Grundschutz M4.284: Umgang mit Diensten ab Windows Server 2003. Stand: 14. Ergänzungslieferung 14. EL. OpenVAS Vulnerability Test $Id: GSHBM4284.nasl 7883 2017-11-23 11:22:59Z emoss $ IT-Grundschutz, 14. EL, Maßnahme 4.284 Authors: Thomas Rotter Copyright: Copyright c 2015 Greenbone Networks...
IT-Grundschutz M4.284: Umgang mit Diensten ab Windows Server 2003
IT-Grundschutz M4.284: Umgang mit Diensten ab Windows Server 2003. Stand: 14. Ergaenzungslieferung 14. EL. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
IT-Grundschutz M4.285: Deinstallation nicht benötigter Client-Funktionen von Windows Server 2003
IT-Grundschutz M4.285: Deinstallation nicht benötigter Client-Funktionen von Windows Server 2003. Stand: 14. Ergänzungslieferung 14. EL. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
Remote code execution
Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted 1 web site or 2 file,...
Remote code execution
Untrusted search path vulnerability in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a Trojan horse DLL in the...
CVE-2015-0080
Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 do not properly initialize memory for rendering of malformed PNG images, which allows remote attackers to...
PT-2015-4465
Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted 1 web site or 2 file,...