5248 matches found
Paper: Adventures with a certain Xen vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Invisible Things Lab is proud to present: "Adventures with a certain Xen vulnerability in the PVFB backend" by Rafal Wojtczuk Starring Xen 3.2.0, DomU an ordinary virtual machine, paravirtualized, Dom0 privileged administrative domain running on FC8...
Code injection
Speedfan.sys in Alfredo Milani Comparetti SpeedFan 4.33, when used on Microsoft Windows Vista x64, allows local users to read or write arbitrary MSRs, and gain privileges and load unsigned drivers, via the 1 IOCTLRDMSR 0x9C402438 and 2 IOCTLWRMSR 0x9C40243C IOCTLs to \Device\speedfan, as...
Design/Logic Flaw
Speedfan.sys in Alfredo Milani Comparetti SpeedFan 4.33, when used on Microsoft Windows Vista x64, does not properly check a buffer during an IOCTL 0x9c402420 call, which allows local users to cause a denial of service machine crash and possibly gain privileges via unspecified vectors...
CVE-2007-5634
The CVE-2007-5634 entry concerns SpeedFan 4.33 (SpeedFan.sys) on Windows Vista x64 . The vulnerability arises from an improper buffer check during IOCTL 0x9c402420, allowing local users to cause a denial of service (machine crash) and potentially gain privileges via unspecified vectors. Affected ...
CVE-2007-5633
Speedfan.sys in Alfredo Milani Comparetti SpeedFan 4.33, when used on Microsoft Windows Vista x64, allows local users to read or write arbitrary MSRs, and gain privileges and load unsigned drivers, via the 1 IOCTLRDMSR 0x9C402438 and 2 IOCTLWRMSR 0x9C40243C IOCTLs to \Device\speedfan, as...
CVE-2007-5633
CVE-2007-5633 is a local-elevation vulnerability in SpeedFan (speedfan.sys) used on Windows Vista x64. The issue allows a local attacker to read/write MSRs and load unsigned drivers via IOCTL_RDMSR 0x9C402438 and IOCTL_WRMSR 0x9C40243C to \Device\speedfan (MSR_LSTAR shown in examples). The provid...
CVE-2007-3038
CVE-2007-3038 affects the Teredo IPv6 interface in Windows Vista and Windows Vista x64. The vulnerability arises because the Windows Firewall fails to correctly apply stateful filtering to inbound Teredo traffic, potentially allowing remote attackers to bypass firewall rules and perform informati...
CVE-2007-3038
The Teredo interface in Microsoft Windows Vista and Vista x64 Edition does not properly handle certain network traffic, which allows remote attackers to bypass firewall blocking rules and obtain sensitive information via crafted IPv6 traffic, aka "Windows Vista Firewall Blocking Rule Information...
Microsoft Security Bulletin MS07-029 Vulnerability in Windows DNS RPC Interface Could Allow Remote Code Execution (935966)
Microsoft Security Bulletin MS07-029 Vulnerability in Windows DNS RPC Interface Could Allow Remote Code Execution 935966 Published: May 8, 2007 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity...
Microsoft Windows SNMP Service Remote Code Execution Vulnerability
Description Microsoft Windows SNMP service is prone to a memory-corruption vulnerability because the software fails to properly bounds-check user-supplied network data before copying it to an insufficiently sized memory buffer. Exploiting this issue allows remote attackers to execute arbitrary...
Microsoft Windows Help存在多个漏洞
Microsoft Help WINHLP32.EXE处理.hlp文件存在多个远程代码执行和拒绝服务问题。 攻击者可以在WEB页上防止恶意帮助文件，或者通过EMAIL附件形式发送，诱使用户打开来触发此漏洞，成功利用此漏洞可以以进程权限执行任意指令。 Microsoft Windows XP Tablet PC Edition SP2 Microsoft Windows XP Tablet PC Edition SP1 Microsoft Windows XP Tablet PC Edition Microsoft Windows XP Professional x64 Edition...
Microsoft Security Bulletin MS06-056 Vulnerability in ASP.NET 2.0 Could Allow Information Disclosure (922770)
Microsoft Security Bulletin MS06-056 Vulnerability in ASP.NET 2.0 Could Allow Information Disclosure 922770 Published: October 10, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows .NET Framework 2.0 Impact of Vulnerability: Information Disclosure Maximu...
CVE-2006-5013
Sun Solaris 10 before patch 118855-16 20060925, when run on x64 systems using IPv6, allows remote attackers to cause a denial of service kernel panic via crafted IPv6 packets...
win64 URLDownloadToFileA download and execute 218+ bytes
win64 URLDownloadToFileA download and execute 218+ bytes. Shellcode exploit for win64 platform ; ; dexec64.asm - 218+ bytes unoptimised ; ; Win64 asm code, download & execute file using URLDownloadToFileA moniker & WinExec ; ; tested on AMD64 running Windows x64 SP1 ; ; there probably are errors ...
win64 (URLDownloadToFileA) download and execute 218+ bytes
Exploit for win64 platform in category shellcode ========================================================== win64 URLDownloadToFileA download and execute 218+ bytes ========================================================== ; ; dexec64.asm - 218+ bytes unoptimised ; ; Win64 asm code, download &...
win64 (URLDownloadToFileA) download and execute 218+ bytes
No description provided by source. ; ; dexec64.asm - 218+ bytes unoptimised ; ; Win64 asm code, download & execute file using URLDownloadToFileA moniker & WinExec ; ; tested on AMD64 running Windows x64 SP1 ; ; there probably are errors in the code, but this is more of an experimental source if...
Microsoft Security Bulletin MS05-031 Vulnerability in Step-by-Step Interactive Training Could Allow Remote Code Execution (898458)
Microsoft Security Bulletin MS05-031 Vulnerability in Step-by-Step Interactive Training Could Allow Remote Code Execution 898458 Issued: June 14, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows or may have installed the Step-by-Step Interactive Trainin...
2022-01 Cumulative Update Preview for Microsoft server operating system version 21H2 for x64-based Systems (KB5010197)
2022-01 Cumulative Update Preview for Microsoft server operating system version 21H2 for x64-based Systems KB5010197...
2026-01 Cumulative Update for Microsoft server operating system version 23H2 for x64-based Systems (KB5078133)
2026-01 Cumulative Update for Microsoft server operating system version 23H2 for x64-based Systems KB5078133...