14 matches found
Microsoft XML Core Service XMLHTTP ActiveX Control 中允许远程执行代码漏洞
Microsoft XML Core Service 这个问题属于为一种远程执行代码漏洞。 An attacker 黑客可以利用这个漏洞通过受攻击的程序执行任意代码，进一步造成更多的危害。失败的攻击尝试也可导致拒绝服务。 Microsoft XML Core Services 4.0 Microsoft Windows XP Tablet PC Edition SP2 Microsoft Windows XP Tablet PC Edition SP1 Microsoft Windows XP Tablet PC Edition Microsoft Windows XP...
Microsoft Internet Explorer COM Object Instantiation Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a memory corruption vulnerability that is related to the instantiation of COM objects. COM objects may corrupt system memory and facilitate arbitrary code execution in the context of the currently logged in user on the affected computer...
Microsoft Internet Explorer Malformed IFRAME Remote Buffer Overflow Vulnerability
Description Microsoft Internet Explorer is reported prone to a remote buffer overflow vulnerability. This issue presents itself due to insufficient boundary checks performed by the application and results in arbitrary code execution or a denial of service. This issue does not affect the following...
Microsoft Windows WMF/EMF Image Format Rendering Remote Buffer Overflow Vulnerability
Description Microsoft Windows WMF/EMF image-rendering library is affected by a remote buffer-overflow vulnerability because it fails to properly verify the lengths of strings contained within an affected image file before copying them into finite buffers. Any code execution that occurs will take...
Microsoft Window Management API Local Privilege Escalation Vulnerability
Description Microsoft has reported that several unspecified Window Management API functions can allow a local attacker to change the attributes of an application with higher-level privileges to gain elevated privileges on a vulnerable computer. This issue represents a fundamental design flaw;...
Microsoft RPC Runtime Library Remote Denial Of Service And Information Disclosure Vulnerability
Description Microsoft RPC Runtime Library is affected by a remote denial of service and information disclosure vulnerability. This issue is due to a failure of the library to properly handle exceptional network traffic. An attacker may leverage this issue to disclose potentially sensitive...
Microsoft Windows Kernel Virtual DOS Machine Privilege Escalation Vulnerability
Description Microsoft Windows Kernel Virtual DOS Machine is reported prone to a local privilege-escalation vulnerability. The Microsoft Virtual DOS Machine VDM is a protected environment that emulates MS-DOS on Windows NT-based operating systems. This issue is caused by an access-validation error...
Microsoft NNTP Component Heap Overflow Vulnerability
Description The Microsoft Network News Transfer Protocol NNTP Component is prone to a buffer overflow condition. Successful exploitation of this vulnerability could allow remote code execution in the context of the process accessing the vulnerable component. Technologies Affected Avaya DefinityOn...
Microsoft Windows Program Group Converter Filename Local Buffer Overrun Vulnerability
Description Microsoft Windows Program Group Converter grpconv.exe is reported prone to a buffer overrun vulnerability. The issue is reported to exist due to a lack of sufficient validation performed on filename data. An attacker may craft a malicious file and present it to a victim in order to...
Microsoft Windows Local Descriptor Table Local Privilege Escalation Vulnerability
Description Microsoft Windows Local Descriptor Table programming interface is prone to a privilege-escalation vulnerability. A local attacker may be able to create a malicious entry in the Local Descriptor Table. This entry may point into protected memory. Since this memory space is reserved for...
Microsoft Windows COM Internet Service/RPC Over HTTP Remote Denial Of Service Vulnerability
Description It has been reported that a denial of service condition exists in the COM Internet Service and RPC over HTTP services. This issue is due to a failure of the services to properly handle malformed network responses. Successful exploitation of this issue may allow a remote attacker to...
Microsoft Negotiate SSP Remote Buffer Overflow Vulnerability
Description The Microsoft Negotiate Security Software Provider SSP interface is prone to a remote buffer overflow vulnerability. In most cases, exploitation would result in a denial of service, but arbitrary code execution is possible. Technologies Affected Avaya DefinityOne Media Servers Avaya...
Microsoft Windows H.323 Remote Buffer Overflow Vulnerability
Description The Microsoft Windows H.323 protocol implementation is prone to a remote buffer overflow. Successful exploitation could allow for execution of arbitrary code. This vulnerability could only be exploited if an H.323 application such as NetMeeting were running on the system. Technologies...
Microsoft Virtual DOS Machine Local Privilege Escalation Vulnerability
Description A problem exists in the Virtual DOS Machine VDM that may allow a local user to elevate their privilege level. The issue exists because an attacker may use the VDM to write arbitrary code to protected kernel memory locations. Technologies Affected Avaya DefinityOne Media Servers Avaya...