Internet Explorer FTP Response Parsing Memory Corruption (MS07-016; CVE-2007-0217)

Microsoft Internet Explorer IE is a web browser application that is included as part of Microsoft Windows operating systems. Microsoft Windows Internet WinINet application programming interface API in Internet Explorer is a component to serve as application interface for Internet protocols, such ...

Microsoft SMS Remote Control Service Denial of Service (CVE-2004-0728)

Microsoft's Systems Management Server SMS is a change and configuration management server for the Microsoft Windows platforms. One component of this system is a client utility that allows an administrator to obtain control over remote client computer. This remote assistance service is installed a...

Winamp XM File Heap Buffer Overflow (CVE-2004-1896)

Winamp is a popular media player for the Windows operating system. There is a buffer overflow within the parsing of .XM media files that can lead to arbitrary code execution. There is a buffer overflow in the .XM file type decoded within Winamp, a popular media file player for the Windows Operati...

Preemptive Protection against Microsoft GDI+ PNG Heap Overflow Vulnerability (MS09-062)

A remote code execution vulnerability has been discovered in the way that GDI+ allocates memory. The Microsoft Windows graphics device interface GDI enables applications to use graphics and formatted text on the video display and on the printer. A remote attacker may trigger this issue via a...

PHP 5.2.11版本修复多个安全漏洞

BUGTRAQ ID: 36449 CVE ID: CVE-2009-3291,CVE-2009-3292,CVE-2009-3293,CVE-2009-3294 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP的5.2.11之前版本的多个函数中存在安全漏洞，可能允许远程攻击者导致拒绝服务或完全入侵用户系统。 1 PHP的phpopensslapplyverificationpolicy函数没有正确的执行证书验证，可能允许攻击者通过伪造的证书执行欺骗攻击。 2 imagecolortransparent函数没有正确的对颜色索引执行过滤检查。 3...

Cross site scripting

The popen API function in TSRM/tsrmwin32.c in PHP before 5.2.11 and 5.3.x before 5.3.1, when running on certain Windows operating systems, allows context-dependent attackers to cause a denial of service crash via a crafted 1 "e" or 2 "er" string in the second argument aka mode, possibly related t...

HTML Creator & Sender <= 2.3 build 697 Local BOF Exploit (SEH)

No description provided by source. !/usr/bin/env python HTML Creator & Sender = v2.3 Build 697 Local Buffer Overflow Exploit SEH Coded By: DrIDE Based On: http://www.milw0rm.com/exploits/9446 Testd On: Windows XP SP2 Download: http://www.html-email.net/ Usage: Browse to file, enter anything for...

PT-2009-4038 · Microsoft · Windows Xp +3

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to Vista Gold Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions Gold through SP2 Microsoft Windows Server 2008 versions Gold through SP2...

XEmacs Version Detection (Windows)

This script detects the installed version of XEmacs and sets the result in KB. OpenVAS Vulnerability Test $Id: gbxemacsdetectwin.nasl 5372 2017-02-20 16:26:11Z cfi $ XEmacs Version Detection Windows Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net...

PT-2009-3491

Name of the Vulnerable Software and Affected Versions Microsoft Visual Studio .NET versions 2003 SP1 through 2008 Microsoft Visual C++ versions 2005 SP1 through 2008 SP1 Windows versions 2000 SP4 through XP SP3, Server 2003 SP2, Vista Gold through SP2, and Server 2008 Gold through SP2 Description...

Default configuration

The default configuration of TekRADIUS 3.0 uses the sa account to communicate with Microsoft SQL Server, which makes it easier for remote attackers to obtain privileged access to the database and the underlying Windows operating system...

CVE-2009-2357

The default configuration of TekRADIUS 3.0 uses the sa account to communicate with Microsoft SQL Server, which makes it easier for remote attackers to obtain privileged access to the database and the underlying Windows operating system...

CVE-2009-0230

The Windows Print Spooler in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows remote authenticated users to gain privileges via a crafted RPC message that triggers loading of a DLL file from an arbitrary directory, aka "Print Spoole...

PT-2009-4029 · Microsoft · Windows Xp +5

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer 8 for Windows XP SP2 and SP3 Microsoft Internet Explorer 8 for Server 2003 SP2 Microsoft Internet Explorer 8 for Vista Gold, SP1, and SP2 Microsoft Internet Explorer 8 for Server 2008 SP2 Description: A remote code...

Atomix Virtual Dj Pro 6.0 - Local Stack Buffer Overflow (SEH)

Atomix Virtual Dj Pro 6.0 - Local Stack Buffer Overflow SEH include include include include include unsigned char rawData = 0x23, 0x56, 0x69, 0x72, 0x74, 0x75, 0x61, 0x6C, 0x44, 0x4A, 0x20, 0x50, 0x6C, 0x61, 0x79, 0x6C, 0x69, 0x73, 0x74, 0x0D, 0x0A, 0x23, 0x4D, 0x69, 0x78, 0x54, 0x79, 0x70, 0x65,...

Windows ZIP folders buffer overflow

Integer overflow in DynaZip DUNZIP32.DLL library on oversized filename in archive...

Card-sniffing malware on Diebold ATMs

By Bob McMillan, ComputerWorld Diebold has released a security fix for its Opteva automated teller machines after cybercriminals apparently broke into the systems at one or more businesses in Russia and installed malicious software. McMillan reports that Diebold learned of the incident...

Microsoft IE CFunctionPointer函数内存破坏漏洞（MS09-002）

BUGTRAQ ID: 33627 CVECAN ID: CVE-2009-0075 Internet Explorer是微软Windows操作系统中默认捆绑的WEB浏览器。 Internet Explorer的CFunctionPointer函数没有正确地处理文档对象，如果以特定序列附加并删除了对象，就可以触发内存破坏，导致以当前登录用户的权限执行任意代码。 Microsoft Internet Explorer 7.0 ZDI （http://www.zerodayinitiative.com/） 链接：http://secunia.com/advisories/33845/...

Microsoft IE screen[""]远程拒绝服务漏洞

BUGTRAQ ID: 33149 CVECAN ID: CVE-2009-0072 Internet Explorer是Windows操作系统中默认捆绑的WEB浏览器。 如果用户通过Internet Explorer打开网页的BODY单元中设置了onload=screen""属性值的话，就会导致浏览器崩溃。 Microsoft Internet Explorer 8 beta 2 Microsoft Internet Explorer 8 beta 1 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 厂商补...

Solaris 10 (x86) : 124848-04 (deprecated)

Sun Ray Connector for Microsoft Windows Operating Systems 1.1, Pat. Date this patch was last updated by Sun : Nov/26/08 This plugin has been deprecated and either replaced with individual 124848 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security...