CVE-2013-3862

Double free vulnerability in Microsoft Windows 7 and Server 2008 R2 SP1 allows local users to gain privileges via a crafted service description that is not properly handled by services.exe in the Service Control Manager SCM, aka "Service Control Manager Double Free Vulnerability."...

CVE-2013-3862

Double free vulnerability in Microsoft Windows 7 and Server 2008 R2 SP1 allows local users to gain privileges via a crafted service description that is not properly handled by services.exe in the Service Control Manager SCM, aka "Service Control Manager Double Free Vulnerability."...

Double free

Double free vulnerability in Microsoft Windows 7 and Server 2008 R2 SP1 allows local users to gain privileges via a crafted service description that is not properly handled by services.exe in the Service Control Manager SCM, aka "Service Control Manager Double Free Vulnerability."...

CVE-2013-3862

Double free vulnerability in Microsoft Windows 7 and Server 2008 R2 SP1 allows local users to gain privileges via a crafted service description that is not properly handled by services.exe in the Service Control Manager SCM, aka "Service Control Manager Double Free Vulnerability."...

MS Windows Service Control Manager Privilege Elevation Vulnerability (2872339)

This host is missing an important security update according to Microsoft Bulletin MS13-077. OpenVAS Vulnerability Test $Id: secpodms13-077.nasl 5346 2017-02-19 08:43:11Z cfi $ MS Windows Service Control Manager Privilege Elevation Vulnerability 2872339 Authors: Antu Sanadi Copyright: Copyright c...

PT-2013-4696

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Server 2008 R2 SP1 version prior to the fixed version Description The issue is related to a double free vulnerability in the Service Control Manager SCM that allows local users to gain...

CVE-2013-3862: Undefined Security Weakness

Double free vulnerability in Microsoft Windows 7 and Server 2008 R2 SP1 allows local users to gain privileges via a crafted service description that is not properly handled by services.exe in the Service Control Manager SCM, aka "Service Control Manager Double Free Vulnerability."...

MS13-077: Vulnerability in Windows Service Control Manager Could Allow Elevation of Privilege (2872339)

The remote Windows host is potentially affected by a privilege escalation vulnerability in the Windows Service Control Manager. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69836; scriptversion"1.11"; scriptcvsdate"Date: 2019/11/27"; scriptcveid"CVE-2013-3862";...

Microsoft Windows Service Control Manager CVE-2013-3862 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that exists in the Windows Service Control Manager SCM. An attacker can exploit this issue to execute arbitrary code with escalated privileges. Successfully exploiting this issue can lead to the complete compromi...

MS13-077: Vulnerability in Windows Service Control Manager could allow elevation of privilege: September 10, 2013

Resolves a vulnerability in Windows Service Control Manager that could allow elevation of privilege if an authenticated user is convinced to execute a specially crafted application.INTRODUCTIONMicrosoft has released security bulletin MS13-077. To view the complete security bulletin, go to one of...

Trend Micro Control Manager ad hoc query Module SQL Injection (CVE-2012-2998)

An SQL injection vulnerability has been reported in Trend Micro Control Manager...

Trend Micro Control Manager AdHocQuery_Processor.aspx id Parameter SQL Injection

Trend Micro Control Manager, a centralized threat and data protection management application, is installed on the remote Windows host and is potentially affected by a SQL injection vulnerability because the application fails to properly sanitize user-supplied input to the 'id' parameter of the...

CVE-2012-2998

SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager TMCM before 5.5.0.1823 and 6.0 before 6.0.0.1449 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager TMCM before 5.5.0.1823 and 6.0 before 6.0.0.1449 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-2998

Affected product: Trend Micro Control Manager (TMCM). Vulnerable component: Ad hoc query module (AdHocQuery_Processor.aspx path, AdHocQuery.NET.dll scope in TMCM). Root cause: SQL injection in the ad hoc query module. Impact: Remote attackers could execute arbitrary SQL commands against the backe...

CVE-2012-2998

SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager TMCM before 5.5.0.1823 and 6.0 before 6.0.0.1449 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2012-4423

Name of the Vulnerable Software and Affected Versions Trend Micro Control Manager versions prior to 5.5.0.1823 Trend Micro Control Manager version 6.0 before 6.0.0.1449 Description A SQL injection issue exists in the ad hoc query module, allowing remote attackers to execute arbitrary SQL commands...

CVE-2012-2998: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager TMCM before 5.5.0.1823 and 6.0 before 6.0.0.1449 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Trend Micro Control Manager vulnerable to SQL injection

Overview Trend Micro Control Manager contains a SQL injection vulnerability. Trend Micro Control Manager contains a vulnerability in the ad hoc query module, which may result in SQL injection. Tom Gregory and Mada R Perdhana of Spentera reported this vulnerability to JPCERT/CC. JPCERT/CC...

JVN#42014489: Trend Micro Control Manager vulnerable to SQL injection

Trend Micro Control Manager contains a vulnerability in the ad hoc query module, which may result in SQL injection. Impact An arbitrary SQL command may be executed in the backend database the product is referencing. Solution Apply a patch Apply the appropriate patch according to the information...