2946 matches found
Microsoft Internet Explorer Double Byte Character Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability. This is related to an error in how double-byte character set DBCS characters are handled in Internationalized Domain Names IDN included in URLS from rendered HTML content. An attacker could exploit this issue v...
Microsoft Internet Explorer Dialog Manipulation Vulnerability
Description Internet Explorer is prone to a remote code-execution vulnerability through manipulation of custom dialog boxes. Keystrokes entered while one of these dialogs is displayed may be buffered and passed to a download dialog, allowing attacker-supplied code to be executed. Technologies...
Microsoft Internet Explorer XML Redirect Information Disclosure Vulnerability
Description Microsoft Internet Explorer is prone to an information disclosure vulnerability. Specifically, it may be possible for remote users to read XML data from an affected computer via a malicious Web page. This issue is a variant of BID 5560. This variant was not addressed with the release ...
Microsoft Internet Explorer Unspecified DigWebX ActiveX Control Vulnerability
Description Microsoft Internet Explorer is prone to an unspecified vulnerability in the DigWebX ActiveX control. The vendor has not released any further information about this vulnerability other than to state the "kill bit" has been set on unsupported versions of the control. Technologies Affect...
Microsoft Internet Explorer Unspecified GIF And BMP Denial Of Service Vulnerability
Description Microsoft Internet Explorer is prone to a denial of service vulnerability when rendering malformed GIF and BMP images. Malformed images for other file formats may also cause a similar condition, though the vendor has not provided any further information. The vendor has not released an...
Microsoft Internet Explorer Content Advisor File Handling Buffer Overflow Vulnerability
Description Microsoft Internet Explorer is prone to a remote buffer overflow vulnerability when handling malformed Content Advisor files. An attacker can exploit this issue by crafting a Content Advisor file with excessive data and arbitrary machine code to be processed by the browser. A typical...
Microsoft Internet Explorer DHTML Object Race Condition Memory Corruption Vulnerability
Description A vulnerability in Microsoft Internet Explorer may allow remote attackers to execute arbitrary code in the context of users visiting malicious Web sites. This issue presents itself the affected application attempts to process certain script objects, a race condition may lead to the...
Microsoft Internet Explorer contains URL decoding cross-domain vulnerability
Overview A URL decoding vulnerability in Microsoft Internet Explorer may allow remote attackers to bypass zone security restrictions and execute arbitrary code on affected systems. Description IE uses a cross-domain security model to maintain separation between browser frames from different...
Microsoft Internet Explorer contains a Channel Definition Format (CDF) cross-domain vulnerability
Overview Microsoft Internet Explorer contains a vulnerability that may allow unintended information disclosure or remote code execution due to a flaw in handling Channel Definition Format CDF files. Description From the Microsoft Channel Definition Format description:Channel Definition Format CDF...
Microsoft Internet Explorer contains a DHTML method heap memory corruption vulnerability
Overview Microsoft Internet Explorer contains a flaw in DHTML method handling which may allow a remote attacker to execute arbitrary code. Description The DHTML method handling in Internet Explorer fails to perform proper bounds checking. This vulnerability may allow data to be written outside th...
Microsoft Windows Program Group Converter vulnerable to buffer overflow
Overview Microsoft Program Group Converter contains a buffer overflow that may allow an attacker to execute arbitrary code. Description Microsoft describes Program Group Converter grpconv.exe as a application to "convert Program Manager Group files .grp extention that were created in Windows 3.1,...
Windows Update Traffic Detection
Binary data 1925.prm...
MS04-011: Security Update for Microsoft Windows (835732) (uncredentialed check)
The remote version of Windows contains a flaw in the function 'DsRolerUpgradeDownlevelServer' of the Local Security Authority Server Service LSASS that allows an attacker to execute arbitrary code on the remote host with SYSTEM privileges. A series of worms Sasser are known to exploit this...
Microsoft Windows SMB : WindowsUpdate Disabled
The remote host does not have Windows Update enabled. Enabling WindowsUpdate will ensure that the remote Windows host has all the latest Microsoft Patches installed. C Tenable Network Security, Inc. Thanks to Greg Hoglund for suggesting this. include"compat.inc"; if description scriptid12028;...
Gattaca Server 1.0.8.0 (1.0): JS/HTML code injection.
ZUD SECURITY TEAM PRESENT bug found by nimber Email : [email protected] Site: www.zudteam.org HomePage: www.nimber.plux.ru 7.08.2003 Application: Gattaca Server Versions: 1.0.8.0 1.0 Platform: Windows Web Site: www.gattaca-server.com Bug: JS/HTML code injection. XSS vulnerability Exploitexaple:...
MS16-040: Description of the security update for Microsoft XML core services: April 12, 2016
None None...
2018-07 Update for Windows 8.1 for x86-based Systems (KB4345424)
2018-07 Update for Windows 8.1 for x86-based Systems KB4345424...
2018-06 Cumulative Update for Windows 10 Version 1803 for x86-based Systems (KB4284848)
2018-06 Cumulative Update for Windows 10 Version 1803 for x86-based Systems KB4284848...