Integer overflow

The iSNS Server service in Microsoft Windows Server 2008 SP2 and R2, Windows Server 2012 Gold and R2, and Windows Server 2016 allows remote attackers to issue malicious requests via an integer overflow, aka "iSNS Server Memory Corruption Vulnerability."...

CVE-2017-0104

CVE-2017-0104 is a memory corruption vulnerability in the Windows iSNS Server service. The issue arises from incorrect input validation of malformed attributes in iSNS packets, allowing an unauthenticated, remote attacker to issue crafted requests and execute arbitrary code in the context of the ...

CVE-2017-0104

The iSNS Server service in Microsoft Windows Server 2008 SP2 and R2, Windows Server 2012 Gold and R2, and Windows Server 2016 allows remote attackers to issue malicious requests via an integer overflow, aka "iSNS Server Memory Corruption Vulnerability."...

Microsoft Windows Multiple Vulnerabilities (4013078)

This host is missing a critical security update according to Microsoft Bulletin MS17-012. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

iSNS Server Memory Corruption Vulnerability

A remote code execution vulnerability exists in Windows when the iSNS Server service fails to properly validate input from the client, leading to an integer overflow. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SYSTEM account. An attacke...

MS17-012: Description of the security update for Microsoft Windows: March 14, 2017

None None...

MS17-012: Security update for Microsoft Windows: March 14, 2017

Resolves a vulnerability in Windows that could allow remote code execution if an attacker runs a specially crafted application that connects to an iSNS Server and then issues malicious requests to the server.SummaryThis security update resolves vulnerabilities in Microsoft Windows. The most sever...

Microsoft Windows iSNS Server CVE-2017-0104 Memory Corruption Vulnerability

Description Microsoft Windows is prone to a memory corruption vulnerability. Successful exploits may allow an attacker to execute arbitrary code in the context of the SYSTEM account. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Windows Server 2008 R2 for...

iSCSI target Multiple Implementations iSNS Stack Buffer Overflow (CVE-2010-2221)

A stack buffer overflow vulnerability has been reported in iscsitarget, an open implementation of iSCSI Enterprise Target. The vulnerability is caused by missing boundary checks when handling SCN messages. Remote attacker can exploit this vulnerability by sending a malicious message to an iSCSI...