CVE-2012-1850

CVE-2012-1850 affects the LanmanWorkstation Remote Administration Protocol (RAP) handling in multiple Windows versions (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2/R2 SP1, and Windows 7 Gold/SP1). The RAP implementation mishandles RAP responses, enabling remote attackers to cause a...

CVE-2012-1853

CVE-2012-1853 is a stack-based buffer overflow in the Remote Administration Protocol (RAP) handling of the LanmanWorkstation service on Microsoft Windows XP SP3. The vulnerability arises from the RAP response processing in the LAN Manager/Remote Administration Protocol stack, allowing a remote at...

PT-2012-3594 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows 7 versions Gold through SP1 Description: A...

PT-2012-3596

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP versions SP2 through SP3 Description A heap-based buffer overflow issue exists in the Remote Administration Protocol RAP implementation, allowing remote attackers to execute arbitrary code via crafted RAP response packets...

PT-2012-3597

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP SP3 Description A stack-based buffer overflow issue exists in the Remote Administration Protocol RAP implementation, allowing remote attackers to execute arbitrary code via crafted RAP response packets. This issue enables ...

PT-2012-4245

Name of the Vulnerable Software and Affected Versions Best Practical Solutions RT versions 3.8.x through 4.0.5 Extension::MobileUI extension version 1.01 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, due to multiple...

CVE-2012-2769: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the topic administration page in the Extension::MobileUI extension before 1.02 for Best Practical Solutions RT 3.8.x and in Best Practical Solutions RT before 4.0.6 allow remote attackers to inject arbitrary web script or HTML via unspecified...

CVE-2012-1852: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the Remote Administration Protocol RAP implementation in the LanmanWorkstation service in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via crafted RAP response packets, aka "Remote Administration Protocol Heap Overflow...

CVE-2012-1850: Improper Input Validation

The Remote Administration Protocol RAP implementation in the LanmanWorkstation service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle RAP responses, which allows remote...

PT-2012-1021

Name of the Vulnerable Software and Affected Versions Best Practical Solutions RT RTFM extension versions 2.0.4 through 2.4.3 rtfm package affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the topic administration page of the RTFM...

CVE-2012-1853: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the Remote Administration Protocol RAP implementation in the LanmanWorkstation service in Microsoft Windows XP SP3 allows remote attackers to execute arbitrary code via crafted RAP response packets, aka "Remote Administration Protocol Stack Overflow Vulnerability."...

CVE-2012-2768: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the topic administration page in the RTFM extension 2.0.4 through 2.4.3 for Best Practical Solutions RT allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the administration forms in the ShareThis module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with administer sharethis permissions to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-2076

Cross-site scripting XSS vulnerability in the administration forms in the ShareThis module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with administer sharethis permissions to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-2076

Cross-site scripting XSS vulnerability in the administration forms in the ShareThis module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with administer sharethis permissions to inject arbitrary web script or HTML via unspecified vectors...

Microsoft Windows Remote Administration Protocol (RAP) Remote Stack Buffer Overflow Vulnerability

Description Microsoft Windows is prone to a remote stack-based buffer-overflow vulnerability because the library fails to perform adequate boundary-checks on user-supplied data. Attackers can exploit this issue to execute arbitrary code with SYSTEM-level privileges, which can result in the comple...

Microsoft Remote Administration Protocol Heap and Stack Overflow (MS12-054; CVE-2012-1852, CVE-2012-1853)

A remote code execution vulnerability has been reported in the Microsoft Windows networking components...

Microsoft Remote Administration Protocol Denial of Service (MS12-054; CVE-2012-1850)

A denial of service vulnerability has been reported in the Microsoft Remote Administration Protocol RAP. The vulnerability is due to an error in the Windows networking components while handling specially crafted Remote Administration Protocol RAP responses. A remote attacker can exploit this issu...

Microsoft Windows Remote Administration Protocol (RAP) Remote Denial of Service Vulnerability

Description Microsoft Windows is prone to a remote denial-of-service vulnerability that affects the Windows Remote Administration Protocol RAP service. An attacker can exploit this issue to cause the RAP service to stop responding, denying service to legitimate users. Technologies Affected...

CVE-2012-2076: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the administration forms in the ShareThis module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with administer sharethis permissions to inject arbitrary web script or HTML via unspecified vectors...