CVE-2007-1056

VMware Workstation 5.5.3 build 34685 does not provide per-user restrictions on certain privileged actions, which allows local users to perform restricted operations such as changing system time, accessing hardware components, and stopping the "VMware tools service" service. NOTE: exploitation is...

Microsoft Security Bulletin MS07-016 Cumulative Security Update for Internet Explorer (928090)

Microsoft Security Bulletin MS07-016 Cumulative Security Update for Internet Explorer 928090 Published: February 13, 2007 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Critical...

MS07-009: Vulnerability in Microsoft Data Access Components Could Allow Remote Code Execution (927779)

The remote host contains a version of the ADODB.Connection ActiveX control that is vulnerable to a security flaw that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and entice a victim to visit this web page. Tenable Network Security, Inc...

Microsoft Security Bulletin MS07-009 Vulnerability in Microsoft Data Access Components Could Allow Remote Code Execution (927779)

Microsoft Security Bulletin MS07-009 Vulnerability in Microsoft Data Access Components Could Allow Remote Code Execution 927779 Published: February 13, 2007 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maxim...

CVE-2007-0675

A certain ActiveX control in sapi.dll aka the Speech API in Speech Components in Microsoft Windows Vista, when the Speech Recognition feature is enabled, allows user-assisted remote attackers to delete arbitrary files, and conduct other unauthorized activities, via a web page with an embedded sou...

CVE-2007-0675

A certain ActiveX control in sapi.dll aka the Speech API in Speech Components in Microsoft Windows Vista, when the Speech Recognition feature is enabled, allows user-assisted remote attackers to delete arbitrary files, and conduct other unauthorized activities, via a web page with an embedded sou...

CVE-2007-0675: Improper Control of Generation of Code

A certain ActiveX control in sapi.dll aka the Speech API in Speech Components in Microsoft Windows Vista, when the Speech Recognition feature is enabled, allows user-assisted remote attackers to delete arbitrary files, and conduct other unauthorized activities, via a web page with an embedded sou...

Hewlett-Packard Network Node Manager 7.50 Remote Console weak files permissions

Vendor: Hewlett-Packard Application: Network Node Manager 7.50 Remote Console under Microsoft Windows XP SP2. Vulnerability: Local Vulnerability Level: High Author: 3APA3A , Impact: privilege escalation of any unprivileged user to Local System or another user's account. Intro: NNM Remote Console ...

CVE-2007-0466

Telestream Flip4Mac Windows Media Components for Quicktime 2.1.0.33 allows remote attackers to execute arbitrary code via a crafted ASFFilePropertiesObject size field in a WMV file, which triggers memory corruption...

CVE-2007-0466

CVE-2007-0466 affects Telestream Flip4Mac Windows Media Components for QuickTime 2.1.0.33. A crafted ASF_File_Properties_Object size field in a WMV file can cause memory corruption, enabling remote code execution as described in multiple sources. The documents do not provide specific exploit deta...

CVE-2007-0466: Undefined Security Weakness

Telestream Flip4Mac Windows Media Components for Quicktime 2.1.0.33 allows remote attackers to execute arbitrary code via a crafted ASFFilePropertiesObject size field in a WMV file, which triggers memory corruption...

Telestream Flip4Mac - 'WMV' File Remote Memory Corruption

source: https://www.securityfocus.com/bid/22286/info Flip4Mac is prone to a remote memory-corruption vulnerability. Flip4Mac is prone to a remote memory-corruption vulnerability because the application fails to properly handle malformed WMV files. An attacker can exploit this issue to execute...

DSquare Exploit Pack: D2SEC_MS08_017

Name| d2secms08017 ---|--- CVE| CVE-2006-4695 Exploit Pack| D2ExploitPack Description| Microsoft Office Web Components ActiveX Stack Overflow Notes|...

CVE-2006-4695

Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via a crafted URL, aka "Office Web Components URL Parsing Vulnerability."...

OPC Application Components Detection

Binary data scadaopcdetect.nbin...

Solaris 9 (sparc) : 113508-02

Sun Cluster 3.0: Apache SSL Components patch for Solaris 9. Date this patch was last updated by Sun : Feb/19/04 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 8 (sparc) : 113505-02

Sun Cluster 3.0: Apache SSL Components patch for Solaris 8. Date this patch was last updated by Sun : Feb/19/04 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Microsoft Windows NAT Helper Components (ipnathlp.dll) 0day Remote DoS Exploit (perl)

No description provided by source. !/usr/bin/perl Microsoft Windows NAT Helper Components ipnathlp.dll 0day Remote DoS Exploit Bug discovered by h07 [email protected] Coded in Perl by Slappter & Ivanchuk Visit WwW.InformaticaVirtual.Info use IO::Socket::INET; print "\nIP: "; $host = STDIN; chomp$hos...

CVE-2006-5614

Microsoft Windows NAT Helper Components ipnathlp.dll on Windows XP SP2, when Internet Connection Sharing is enabled, allows remote attackers to cause a denial of service svchost.exe crash via a malformed DNS query, which results in a null pointer dereference...

CVE-2006-5614

CVE-2006-5614 concerns Microsoft Windows NAT Helper Components (ipnathlp.dll) on Windows XP SP2 with Internet Connection Sharing enabled. The vulnerability allows remote attackers to trigger a denial-of-service (svchost.exe crash) by sending a malformed DNS query that leads to a null pointer dere...