CVE-2009-1542

The Virtual Machine Monitor VMM in Microsoft Virtual PC 2004 SP1, 2007, and 2007 SP1, and Microsoft Virtual Server 2005 R2 SP1, does not enforce CPU privilege-level requirements for all machine instructions, which allows guest OS users to execute arbitrary kernel-mode code and gain privileges...

Information disclosure

The Virtual Machine Monitor VMM in Microsoft Virtual PC 2004 SP1, 2007, and 2007 SP1, and Microsoft Virtual Server 2005 R2 SP1, does not enforce CPU privilege-level requirements for all machine instructions, which allows guest OS users to execute arbitrary kernel-mode code and gain privileges...

CVE-2009-1542

The Virtual Machine Monitor VMM in Microsoft Virtual PC 2004 SP1, 2007, and 2007 SP1, and Microsoft Virtual Server 2005 R2 SP1, does not enforce CPU privilege-level requirements for all machine instructions, which allows guest OS users to execute arbitrary kernel-mode code and gain privileges...

Microsoft Windows桌面墙纸系统参数本地权限提升漏洞(MS09-025)

BUGTRAQ ID: 35120 CVECAN ID: CVE-2009-1126 Microsoft Windows是微软发布的非常流行的操作系统。 在编辑特定的桌面参数时，Windows内核没有正确地验证从用户态传递到内核的输入，导致权限提升漏洞。成功利用此漏洞的攻击者可以运行内核态中的任意代码。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Server 2003 SP2 Microsoft Windows...

PT-2009-1124 · Microsoft · Windows Xp +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows 2000 SP4 Microsoft Windows XP SP2 Microsoft Windows XP SP3 Microsoft Windows Server 2003 SP2 Microsoft Windows Vista Gold Microsoft Windows Vista SP1 Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 Description:...

[Backports-security-announce] Security Update for openafs

Russ Allbery uploaded new packages for openafs a distributed file system which fixed the following security problems: CVE-2009-1251 An attacker with control of a file server or the ability to forge RX packets may be able to execute arbitrary code in kernel mode on an OpenAFS client, due to a...

PT-2009-2783 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: The issue arises from the improper handling of invalid pointers by the Windows kernel, allowing local users to gain privileges. This could enable an attacker to run arbitrary...

Ralinktech wireless cards drivers vulnerability

Some Ralinktech wireless cards drivers are suffer from integer overflow. by sending malformed 802.11 Probe Request packet with no care about victim's MACBSSSSID can cause to remote code execution in kernel mode. In order to exploit this issue, the attacker should send a Probe Request packet with...

CVE-2008-5725

The NT kernel-mode driver aka pstrip.sys 5.0.1.1 and earlier in EnTech Taiwan PowerStrip 3.84 and earlier allows local users to gain privileges via certain IRP parameters in an IOCTL request to \Device\Powerstrip1 that overwrites portions of memory...

Cross site request forgery (csrf)

The NT kernel-mode driver aka pstrip.sys 5.0.1.1 and earlier in EnTech Taiwan PowerStrip 3.84 and earlier allows local users to gain privileges via certain IRP parameters in an IOCTL request to \Device\Powerstrip1 that overwrites portions of memory...

CVE-2008-5725

The CVE affects the NT kernel-mode driver pstrip.sys (versions 5.0.1.1 and earlier) used by EnTech Taiwan PowerStrip (3.84 and earlier). The vulnerability arises from certain IRP parameters in an IOCTL sent to \Device\Powerstrip1, which can overwrite portions of memory and enable local privilege ...

CVE-2008-5725

The NT kernel-mode driver aka pstrip.sys 5.0.1.1 and earlier in EnTech Taiwan PowerStrip 3.84 and earlier allows local users to gain privileges via certain IRP parameters in an IOCTL request to \Device\Powerstrip1 that overwrites portions of memory...

PGP Desktop 9.0.6 - 'PGPwded.sys' Local Denial of Service

--------------------------PGP Desktop 9.0.6 Denial Of Service--------------- Author: Giuseppe 'Evilcry' Bonfa' E-Mail: evilcry AT GMAIL DOT COM Profile: http://evilcry.netsons.org Website: http://evilfingers.com/ Release Date: 23/12/2008 +-------------------------------------------------+ Product...

PowerStrip 3.84 - pstrip.sys Local Privilege Escalation

PowerStrip 3.84 - pstrip.sys Local Privilege Escalation //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | EnTech Taiwan - http://www.entechtaiwan.com/ | // // | |...

PowerStrip 3.84 - 'pstrip.sys' Local Privilege Escalation

//////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | EnTech Taiwan - http://www.entechtaiwan.com/ | // // | | // // | Affected Software: | // // | PowerStrip = 3.84 ...

PowerStrip < = 3.84 (pstrip.sys) Privilege Escalation Exploit

Exploit for unknown platform in category local exploits ============================================================= PowerStrip = 3.84 pstrip.sys Privilege Escalation Exploit =============================================================...

Count.cgi(wwwcount)远程缓冲区溢出漏洞

BugCVE: CVE-1999-0021 BUGTRAQ: 128 Count.cgi wwwcount是一个非常流行的Web站点跟踪统计CGI程序。一般它作为Web页面点击数统计。1997年10月，这个程序被发现了两个远程漏洞。第一个漏洞比较轻微，它能允许远程用户浏览到受限制的.GIF文件，可能泄漏.GIF文件里潜在的敏感数据。 第二个漏洞比较严重，count.cgi程序在处理QUERYSTRING环境变量的时候存在缓冲区溢出漏洞。远程攻击者可以发送一个超长的请求给程序就能进行溢出攻击，以Web用户的权限在系统执行任意命令。 2.3 Muhammad A. Muquit...

Microsoft Ancillary Function Driver Elevation of Privilege Vulnerability (956803)

This host is missing important security update according to Microsoft Bulletin MS08-066. OpenVAS Vulnerability Test $Id: secpodms08-066900223.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: Microsoft Ancillary Function Driver Elevation of Privilege Vulnerability 956803 Authors: Veerendra GG...

Microsoft Ancillary Function Driver Elevation of Privilege Vulnerability (956803)

This host is missing important security update according to Microsoft Bulletin MS08-066. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

eset-escalate.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - Orange Bat advisory - Name : ESET Smart Security 3.0.667.0 Class : Privilage escalation Published : 2008-08-14 Credit : g g orange-bat com - - Details - File: easdrv.sys .text:00012B92 loc12B92: .text:00012B92 push ebp+InputBuf .text:00012B95 call...