CVE-2008-4036

Integer overflow in Memory Manager in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows local users to gain privileges via a crafted application that triggers an erroneous decrement of a variable, related to validation of parameters for Virtual...

Integer overflow

Integer overflow in Memory Manager in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows local users to gain privileges via a crafted application that triggers an erroneous decrement of a variable, related to validation of parameters for Virtual...

CVE-2008-4036

CVE-2008-4036 describes a local elevation-of-privilege vulnerability in Windows memory management related to Virtual Address Descriptors (VADs). The root cause is an integer overflow when decrementing a memory allocation parameter, causing a memory allocation mapping error. Affected products incl...

CVE-2008-4036: Integer Overflow or Wraparound

Integer overflow in Memory Manager in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows local users to gain privileges via a crafted application that triggers an erroneous decrement of a variable, related to validation of parameters for Virtual...

CVE-2008-4036

Integer overflow in Memory Manager in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows local users to gain privileges via a crafted application that triggers an erroneous decrement of a variable, related to validation of parameters for Virtual...

Virtual Address Descriptor Manipulation Elevation of Privilege Vulnerability (956841)

This host is missing important security update according to Microsoft Bulletin MS08-064. OpenVAS Vulnerability Test $Id: secpodms08-064900225.nasl 5934 2017-04-11 12:28:28Z antu123 $ Description: Virtual Address Descriptor Manipulation Elevation of Privilege Vulnerability 956841 Authors: Veerendr...

Virtual Address Descriptor Manipulation Elevation of Privilege Vulnerability (956841)

This host is missing important security update according to Microsoft Bulletin MS08-064. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2008-4036

Integer overflow in Memory Manager in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows local users to gain privileges via a crafted application that triggers an erroneous decrement of a variable, related to validation of parameters for Virtual...

PT-2008-5349 · Microsoft · Windows Xp +4

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 versions SP1 through SP2 Microsoft Windows Vista versions Gold through SP1 Microsoft Windows Server 2008 affected versions not specified Description: The issue is...

[Reversemode Advisory] VMware Products - GPF Denial of Service

VMWARE PRODUCTS VMWARE MEMORY MANAGER - GPF DENIAL OF SERVICE Rubйn Santamarta [email protected] 07.05.2007 Affected products: All VMware products with a hypervisor are affected + VMware WorkStation 5.5.3 and earlier + VMware Player 1.0.3 and earlier + VMware Server 1.0.2 and earlier + VMware...

MOPB-44-2007:PHP 5.2.0 Memory Manager Signed Comparision Vulnerability

Summary The new Zend Memory Manager that shipped with PHP 5.2.0 contains a comparison that wrongly casts some numbers to signed integers. Therefore a request for a very large amount of memory will be handled as a negative number and therefore result in only a minimum sized memory block being...

CVE-2007-1889

Integer signedness error in the zendmmallocint function in the Zend Memory Manager in PHP 5.2.0 allows remote attackers to execute arbitrary code via a large emalloc request, related to an incorrect signed long cast, as demonstrated via the HTTP SOAP client in PHP, and via a call to msgreceive wi...

CVE-2007-1889

Integer signedness error in the zendmmallocint function in the Zend Memory Manager in PHP 5.2.0 allows remote attackers to execute arbitrary code via a large emalloc request, related to an incorrect signed long cast, as demonstrated via the HTTP SOAP client in PHP, and via a call to msgreceive wi...

CVE-2007-1889

CVE-2007-1889 is a PHP 5.2.0 vulnerability where an Integer signedness error in the Zend Memory Manager’s _zend_mm_alloc_int can allow remote code execution via large emalloc requests. The issue stems from an incorrect signed long cast, demonstrated via the HTTP SOAP client and a msg_receive call...

CVE-2007-1889: Undefined Security Weakness

Integer signedness error in the zendmmallocint function in the Zend Memory Manager in PHP 5.2.0 allows remote attackers to execute arbitrary code via a large emalloc request, related to an incorrect signed long cast, as demonstrated via the HTTP SOAP client in PHP, and via a call to msgreceive wi...

MOPB-25-2007:PHP header() Space Trimming Buffer Underflow Vulnerability

Summary Since PHP 5.2.0 there is a new memory manager that allows exploiting of even one byte underflow vulnerabilities like the one described by this advisory. When an all whitespace string is passed to the header function this can result in a buffer underflow that allows code execution on atlea...

MOPB-19-2007:PHP ext/filter Space Trimming Buffer Underflow Vulnerability

Summary Since PHP 5.2.0 there is not only the new filtering extension in PHP but also a new memory manager that allows exploiting the following ext/filter vulnerability. When an all whitespace string is passed to some of the filter functions like FILTERVALIDATEINT this can result in a buffer...