CVE-2013-1254

Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kerne...

CVE-2013-1273

Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kerne...

PT-2012-3448

Name of the Vulnerable Software and Affected Versions Oracle Sun Solaris version 11 Description The issue affects confidentiality, integrity, and availability. It is related to Kernel/Privileges, but the specific vectors are unknown. Recommendations For Oracle Sun Solaris version 11, at the momen...

PT-2012-2357 · Microsoft · Windows Xp +6

Name of the Vulnerable Software and Affected Versions: win32k.sys in Microsoft Windows versions prior to the fixed version Description: The issue arises from the improper handling of window messaging by the win32k.sys kernel-mode driver, allowing local users to gain privileges via a crafted...

Windows font library file buffer overflow

Overview Microsoft Windows contains a buffer overflow vulnerability in the handling of font library files, which may allow a remote, unauthenticated attacker to execute arbitrary code with kernel privileges. Description Microsoft Windows supports a variety of font formats. One of which is the fon...

Microsoft Windows Remote Access Service NDISTAPI Driver Privilege Elevation Vulnerability (2566454)

This host is missing an important security update according to Microsoft Bulletin MS11-062. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Kernel Elevation of Privilege Vulnerability (2393802)

This host is missing a critical security update according to Microsoft Bulletin MS11-011. OpenVAS Vulnerability Test $Id: secpodms11-011.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Windows Kernel Elevation of Privilege Vulnerability 2393802 Authors: Madhuri D Copyright: Copyright c 2011 SecPod...

SuSE 11.1 Security Update : Linux kernel (SAT Patch Numbers 3433 / 3436 / 3445)

This update of the SUSE Linux Enterprise Server 11 SP1 kernel brings the kernel to 2.6.32.24 and fixes some critical security bugs and other non-security bugs. Following security bugs were fixed : - A iovec integer overflow in RDS sockets was fixed which could lead to local attackers gaining kern...

CA Internet Security Suite 2010 - KmxSbx.sys Kernel Pool Overflow

CA Internet Security Suite 2010 - KmxSbx.sys Kernel Pool Overflow / Exploit Title: CA Internet Security Suite 2010 KmxSbx.sys Kernel Pool Overflow 0-day Exploit Date: 2010-11-28 Author: Nikita Tarakanov CISS Research Team Software Link:...

OpenType Font (OTF) Format Driver Privilege Elevation Vulnerabilities (2279986)

This host is missing a critical security update according to Microsoft Bulletin MS10-078. OpenVAS Vulnerability Test $Id: secpodms10-078.nasl 5361 2017-02-20 11:57:13Z cfi $ OpenType Font OTF Format Driver Privilege Elevation Vulnerabilities 2279986 Authors: Madhuri D Copyright c 2010 SecPod,...

OpenType Font (OTF) Format Driver Privilege Elevation Vulnerabilities (2279986)

This host is missing a critical security update according to Microsoft Bulletin MS10-078. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows nt!NtCreateThread Race Condition

Microsoft Windows nt!NtCreateThread race condition with invalid code segment ---------------------------------------------------------------------------- CVE-2010-1888 Creating a new thread on windows involves passing several structures to NtCreateThread. These structures describe the execution...

Microsoft Windows - nt!NtCreateThread Race Condition with Invalid Code Segment (MS10-047)

Microsoft Windows - nt!NtCreateThread Race Condition with Invalid Code Segment MS10-047 Microsoft Windows nt!NtCreateThread race condition with invalid code segment ---------------------------------------------------------------------------- CVE-2010-1888 Creating a new thread on windows involves...

Microsoft Windows - nt!NtCreateThread Race Condition with Invalid Code Segment (MS10-047)

Microsoft Windows nt!NtCreateThread race condition with invalid code segment ---------------------------------------------------------------------------- CVE-2010-1888 Creating a new thread on windows involves passing several structures to NtCreateThread. These structures describe the execution...

Microsoft Windows Kernel Mode Drivers Privilege Elevation Vulnerabilities (2160329)

This host is missing a critical security update according to Microsoft Bulletin MS10-048. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Another Windows 7 Zero-Day Released

Microsoft’s security response team is investigating the release of a new zero-day flaw that exposes Windows 7 users to blue-screen crashes or code execution attacks. The flaw could be exploited by local attackers to cause a denial-of-service or potentially gain elevated privileges, according to a...

Netware SMB Remote Stack Overflow PoC

Exploit for novell platform in category dos / poc ===================================== Netware SMB Remote Stack Overflow PoC ===================================== Title: Netware SMB Remote Stack Overflow Version: 1.0 Issue type: Stack Overflow Affected vendor: Novell Release date: 17/06/2010...

Netware - SMB Remote Stack Overflow (PoC)

Netware - SMB Remote Stack Overflow PoC =============================================================================== Stratsec Security Advisory: SS-2010-006 =============================================================================== Title: Netware SMB Remote Stack Overflow Version: 1.0 Iss...

Microsoft Windows GP Trap Handler Privilege Escalation Vulnerability

The host is installed with Microsoft Windows operating system and is prone to Privilege Escalation Vulnerability. This NVT has been replaced by NVT secpodms10-015.nasl OID:1.3.6.1.4.1.25623.1.0.900740. OpenVAS Vulnerability Test $Id: gbmskernelprvescvuln.nasl 5368 2017-02-20 14:34:16Z cfi $...

Symantec Norton Firewall NBNS response Remote Heap Corruption (CVE-2004-0444)

When Symantec firewalls allow incoming UDP datagrams to port 137, any inbound UDP datagrams with a source port of 137 will be treated as NetBIOS Name Service messages and will be validated and parsed. The Symantec firewall product line is vulnerable to a remote heap corruption attack in the...