Microsoft Windows creates COM object identifiers incorrectly

Overview A vulnerability exists in Microsoft's COM object component. Explotiation of this vulnerability may lead to information disclosure and the ability for an attacker to open services on network communication ports. Description Microsoft's COM object component creates object identifiers in a...

Microsoft CIS and RPC over HTTP Proxy components fail to properly handle responses

Overview A vulnerability in a Microsoft HTTP Proxy component may lead to a denial of service. Description Microsoft's COM Internet Sevices CIS and Remote Procedure Call RPC over HTTP Proxy contain a vulnerability that could permit an attacker to cause a denial of service. When a forwarded request...

Symantec Security Check Virus Detection - COM Object Denial of Service

source: https://www.securityfocus.com/bid/10069/info Symantec Virus Detection is a web based service that detects viruses and trojan horses. It is a freely available service that can be run via Microsoft Internet Explorer, Netscape Communicator or Apple Safari web browsers. The...

Symantec Security Check Virus Detection - COM Object Denial of Service

Symantec Security Check Virus Detection - COM Object Denial of Service source: https://www.securityfocus.com/bid/10069/info Symantec Virus Detection is a web based service that detects viruses and trojan horses. It is a freely available service that can be run via Microsoft Internet Explorer,...

Mcafee FreeScan CoMcFreeScan Browser - Information Disclosure

Mcafee FreeScan CoMcFreeScan Browser - Information Disclosure source: https://www.securityfocus.com/bid/10077/info Reportedly the Mcafee FreeScan 'McFreeScan.CoMcFreeScan.1' COM object is prone to a remote information disclosure vulnerability. This issue is due to a failure of the object to...

Mcafee FreeScan CoMcFreeScan Browser - Information Disclosure

source: https://www.securityfocus.com/bid/10077/info Reportedly the Mcafee FreeScan 'McFreeScan.CoMcFreeScan.1' COM object is prone to a remote information disclosure vulnerability. This issue is due to a failure of the object to properly validate information access credentials. Successful...

Adobe Photoshop 8.0 - COM Objects Denial of Service

Adobe Photoshop 8.0 - COM Objects Denial of Service source: https://www.securityfocus.com/bid/10061/info It has been reported that Adobe Photoshop may be prone to a denial of service vulnerability that may crash an instance of Internet Explorer. An attacker can exploit this issue by creating a...

Adobe Photoshop 8.0 - COM Objects Denial of Service

source: https://www.securityfocus.com/bid/10061/info It has been reported that Adobe Photoshop may be prone to a denial of service vulnerability that may crash an instance of Internet Explorer. An attacker can exploit this issue by creating a script that attempts to create a COM object and entici...

CVE-2003-0179

CVE-2003-0179 describes a buffer overflow in the COM Object Control Handler for Lotus Domino before/including 6.0.1, exploitable via multiple vectors through the iNotes ActiveX control’s InitializeUsingNotesUserName method. The issue allows remote attackers to execute arbitrary code on affected s...

Microsoft Security Bulletin MS02-069: Flaw in Microsoft VM Could Enable System Compromise (810030)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Flaw in Microsoft VM Could Enable System Compromise 810030 Date: 11 December 2002 Software: Microsoft VM Impact: Eight vulnerabilities, the most serious of which would enable an...

Microsoft Windows XP/2000/NT 4.0 - RPC Service Denial of Service (2)

// source: https://www.securityfocus.com/bid/6005/info The Microsoft Windows RPC service contains a flaw that may allow a remote attacker to cause a denial of service. By sending a specifically malformed packet to TCP port 135, the RPC service will be disabled. This vulnerability was originally...

Microsoft Windows XP/2000/NT 4.0 - RPC Service Denial of Service (3)

source: https://www.securityfocus.com/bid/6005/info The Microsoft Windows RPC service contains a flaw that may allow a remote attacker to cause a denial of service. By sending a specifically malformed packet to TCP port 135, the RPC service will be disabled. This vulnerability was originally...

Microsoft Windows XP2000NT 4.0 - RPC Service Denial of Service (4)

Microsoft Windows XP2000NT 4.0 - RPC Service Denial of Service 4 source: https://www.securityfocus.com/bid/6005/info The Microsoft Windows RPC service contains a flaw that may allow a remote attacker to cause a denial of service. By sending a specifically malformed packet to TCP port 135, the RPC...

HTTP RPC Endpoint Mapper (http-rpc-epmap) Detection

This detects the http-rpc-epmap service by connecting to the port 593 and processing the buffer received. This endpoint mapper provides CIS COM+ Internet Services parameters like port 135 epmap for RPC. This script was written by Georges Dagousset See the Nessus Scripts License for details Change...

COM+ Internet Services (CIS) Server Detection

COM+ Internet Services are RPC over HTTP tunneling and require IIS to operate. CIS ports shouldn't be visible on internet but only behind a firewall. This script was written by Georges Dagousset See the Nessus Scripts License for details Changes by Tenable: - Revised plugin title 10/12/09...

Дырка в Windows 2000 COM Internet Services Proxy

Определенные виды RPC-запросов упакованных в HTTP приводят к краху сервиса...

JPEG COM Marker Processing Vulnerability in Netscape Browsers

-----BEGIN PGP SIGNED MESSAGE----- OW-002-netscape-jpeg, revision 1 July 25, 2000 JPEG COM Marker Processing Vulnerability in Netscape Browsers ------------------------------------------------------------- This advisory explains a vulnerability in Netscape browsers present since at least version...

netscape.jpg-marker.txt

-----BEGIN PGP SIGNED MESSAGE----- OW-002-netscape-jpeg, revision 1 July 25, 2000 JPEG COM Marker Processing Vulnerability in Netscape Browsers ------------------------------------------------------------- This advisory explains a vulnerability in Netscape browsers present since at least version...

Microsoft Windows NT 4.0 - DCOM Server

source: https://www.securityfocus.com/bid/624/info It is possible for a local user to modify how DCOM servers are run, thereby escalating his/her privilege level. The Interactive User has write permissions to the DCOM registry entries. By editing the registry keys associated with DCOM server...

msie.5.0.cookies.txt

Date: Wed, 24 Mar 1999 01:16:36 -0400 From: Claudio Valderrama C. To: [email protected] Subject: MSIE 5 Hello. I hope this will avoid headaches to system administrators: - MSIE 5, when installed, changes silently the setting for the cookies to "Accept always" no matter how did you...