748 matches found
Internet Explorer CVE-2010-0249 'srcElement()' Remote Code Execution Vulnerability
Description Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the browser. Successful exploits will compromise the application and possibly the computer. Failed attacks will cause...
Adobe Reader and Acrobat 'newplayer()' JavaScript Method Remote Code Execution Vulnerability
Description Adobe Reader and Acrobat are prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code. Failed exploit attempts will likely cause denial-of-service conditions. This issue affects Reader and Acrobat 9.2 and prior versions. Technologies...
Microsoft Windows LSASS ISAKMP Message Remote Denial of Service Vulnerability
Description Microsoft Windows Local Security Authority Subsystem Service LSASS is prone to a remote denial-of-service vulnerability. A remote attacker can exploit this issue to consume an excessive amount of resources, denying service to legitimate users. Technologies Affected Microsoft Windows...
Microsoft Windows License Logging Server Remote Heap Buffer Overflow Vulnerability
Description The Microsoft Windows License Logging Server is prone to a remote heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges...
Microsoft Windows Web Services on Devices API Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute code with SYSTEM-level privileges. Failed exploit attempts will likely cause denial-of-service conditions. Technologies Affected Microsoft Windows Server 2008 Datacenter...
Microsoft Windows SMB2 Command Value Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute code with SYSTEM-level privileges. Failed exploit attempts will likely cause denial-of-service conditions. Technologies Affected Microsoft Windows 7 RC Microsoft Windows ...
Microsoft Windows SMB2 Field Validation Remote Denial of Service Vulnerability
Description Microsoft Windows is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the affected computer to stop responding, denying service to legitimate users. Technologies Affected Microsoft Windows 7 RC Microsoft Windows 7 beta Microsoft Windows...
Microsoft .NET Framework Pointer Verification Remote Code Execution Vulnerability
Description The .NET Framework is prone to a remote code-execution vulnerability because it fails to properly verify .NET applications before running them. Successful exploits may allow an attacker to execute arbitrary code with the privileges of the currently logged-in user. Failed attacks will...
Microsoft Active Directory Encoded LDAP String Memory Corruption Remote Code Execution Vulnerability
Description Microsoft Active Directory is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the application. Successful exploits will completely compromise the affected computer. Failed attacks will cause denial-of-service...
Microsoft PowerPoint Sound Data (CVE-2009-0225) Remote Code Execution Vulnerability
Description Microsoft PowerPoint is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing a victim to open a malicious PowerPoint 95 file. Successfully exploiting this issue can allow the attacker to execute arbitrary code in the context of the currently...
phpMyAdmin 'setup.php' PHP Code Injection Vulnerability
Description phpMyAdmin is prone to a remote PHP code-injection vulnerability. An attacker can exploit this issue to inject and execute arbitrary malicious PHP code in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks...
Microsoft Windows WINS Server WPAD and ISATAP Access Validation Vulnerability
Description The Microsoft Windows WINS Server is prone to an access-validation vulnerability because the software fails to properly restrict access when defining WPAD Web Proxy Autodiscovery Protocol and ISATAP Intra-Site Automatic Tunnel Addressing Protocol entries. An authenticated attacker may...
Microsoft Internet Explorer XML Handling Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the underlying computer. Faile...
Microsoft Word Malformed Value Remote Code Execution Vulnerability
Description Microsoft Word is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...
Microsoft SharePoint Server Unauthorized Access Vulnerability
Description Microsoft SharePoint Server is prone to a vulnerability that could let remote attackers gain unauthorized access. A successful exploit will let attackers access certain administrative functions of the SharePoint Server. Technologies Affected Microsoft SharePoint Server 2007 Microsoft...
Microsoft Charts ActiveX Control Memory Corruption Vulnerability
Description Microsoft Charts ActiveX control is prone to a remote memory-corruption vulnerability. Remote attackers can exploit this issue to execute arbitrary code in the context of the application using the ActiveX control typically Internet Explorer. Successful exploits will compromise the...
Microsoft Outlook Web Access for Exchange Server Email Field Cross-Site Scripting Vulnerability
Description Microsoft Outlook Web Access OWA for Exchange Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...
Microsoft VBScript and JScript Scripting Engines Remote Code Execution Vulnerability
Description Microsoft VBScript and JScript are prone to a remote code-execution vulnerability because they fail to adequately handle user-supplied input. Attackers can leverage this issue by enticing an unsuspecting user to view a malicious web document. Successful exploits would allow arbitrary...
Microsoft Windows WebDAV Mini-Redirector Heap Overflow Vulnerability
Description Microsoft Windows is prone to a heap-overflow vulnerability in the WebDAV Mini-Redirector component also known as the Web Client service. This vulnerability may be triggered by a malicious WebDAV response. A successful exploit could let a remote attacker execute arbitrary code with...
Microsoft Windows Vista DHCP Remote Denial Of Service Vulnerability
Description Microsoft Windows Vista is prone to a remote denial-of-service vulnerability because it fails to adequately handle specially crafted TCP/IP traffic. Attackers can exploit this issue to cause affected computers to stop responding and to automatically restart. Successful attacks will de...