Microsoft Visual Studio “WMI Object Broker”控件代码执行漏洞（MS06-073）

Microsoft Visual Studio是微软公司的开发工具套件系列产品，是一个基本完整的开发工具集，包括了软件整个生命周期中所需要的大部分工具。 Visual Studio的"WMI Object Broker"控件在例程的创建和处理上存在漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意恶意代码。 Visual Studio所捆绑的WMI Object Broker ActiveX控件允许创建系统上已有的ActiveX控件例程。以这种方式创建的ActiveX对象会绕过ActiveX安全限制，如忽略kill bit和safe for...

Microsoft Internet Explorer OBJECT标签内存破坏漏洞（MS06-021）

Microsoft Internet Explorer是微软发布的非常流行的WEB浏览器。 IE在处理某些异常情况时存在内存破坏漏洞。如果用户受骗访问了恶意的站点的话，IE就会允许对象注册可能无法正确处理某些情况的异常处理器，通过特别序列的嵌套“object” HTML标签触发内存破坏，导致执行任意代码。 这个漏洞是CVE-2006-1992漏洞的一个变种。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 Microsoft Internet Explorer 5.0 SP4 临时解决方法：...

Microsoft Windows Server service buffer overflow

Overview A stack-based buffer overflow exists in the Microsoft Server service. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code with SYSTEM privileges. Description Microsoft Server ServiceMS06-040 includes the following information: The Server service...

Internet Explorer Javaprxy.dll heap overflow

Added: 06/05/2006 CVE: CVE-2005-2087 BID: 14087 OSVDB: 17680 Background Windows operating systems use the Component Object Model COM to allow various program components to be run within different applications. One such object, the JView Profiler Javaprxy.dll, is a debugger interface for Microsoft...

Internet Explorer Javaprxy.dll heap overflow

Added: 06/05/2006 CVE: CVE-2005-2087 BID: 14087 OSVDB: 17680 Background Windows operating systems use the Component Object Model COM to allow various program components to be run within different applications. One such object, the JView Profiler Javaprxy.dll, is a debugger interface for Microsoft...

Windows NetDDE buffer overflow

Added: 02/24/2006 CVE: CVE-2004-0206 BID: 11372 OSVDB: 10689 Background Network Dynamic Data Exchange NetDDE is a Windows service which allows two applications to communicate with each other over a network. Problem A buffer overflow in the NetDDE service could allow a remote, anonymous attacker t...

Microsoft SQL Server (MSSQL) Hello Overflow Vulnerability (Q316333) - Active Check

Microsoft SQL Server MSSQL is prone to a hello overflow vulnerability. SPDX-FileCopyrightText: 2002 Dave Aitel Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Checks for MS HOTFIX for snmp buffer overruns

There is an Unchecked Buffer in SNMP Service and this checks to see if the Microsoft Patch has been applied only checks NT/Win2k and XP PRo. Impact of vulnerability: Run code of attacker's choice and denial of service attacks. Also may run snmp detect to see if snmp is running on this host. OpenV...

Dabber Worm Detection

W32.Dabber propagates by exploiting a vulnerability in the FTP server component of W32.Sasser.Worm and its variants. It installs a backdoor on infected hosts and tries to listen on port 9898. If the attempt fails, W32Dabber.A tries to listen on ports 9899 through 9999 in sequence until it finds a...

MS05-036: Vulnerability in Microsoft Color Management Module Could Allow Remote Code Execution (901214)

The remote host contains a version of the Color Management Module that is vulnerable to a security flaw that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and entice a victim to visit this web page. Tenable Network Security, Inc...

MS05-026: Vulnerability in HTML Help Could Allow Remote Code Execution (896358)

The remote host contains a version of the HTML Help ActiveX control that is vulnerable to a security flaw that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and entice a victim to visit this web page. C Tenable Network Security, Inc...

MS Windows (WINS) Remote Buffer Overflow Exploit (v.3)

Exploit for unknown platform in category remote exploits ====================================================== MS Windows WINS Remote Buffer Overflow Exploit v.3 ====================================================== / Windows Internet Name Service WINS Remote Heap Buffer Overflow...

[Full Disclosure] Using DHTML XSS to launch HHCTRL exploit

Full Disclosure Using DHTML XSS to launch HHCTRL exploit GeCAD NET Security Advisory 2005.02.16 Original notice requires authentication: http://www.gecadnet.ro/windows/?AID=1414 February 16th 2005 1. Past Events On January 20th 2005, GeCAD NET released a security advisory warning that the exploit...

MS05-007: Vulnerability in Windows Could Allow Information Disclosure (888302)

The remote version of Windows contains a flaw that could allow an attacker to cause it to disclose information over the use of a named pipe through a NULL session. An attacker may exploit this flaw to gain more knowledge about the remote host. C Tenable Network Security, Inc. include"compat.inc";...

EEYE: Windows SMB Client Transaction Response Handling Vulnerability

Windows SMB Client Transaction Response Handling Vulnerability Release Date: February 8, 2005 Date Reported: August 2, 2004 Severity: High Remote Code Execution Vendor: Microsoft Systems Affected: Windows 2000 Windows XP Windows Server 2003 Overview: eEye Digital Security has discovered a...

MS05-015: Vulnerability in the Hyperlink Object Library may allow code execution (888113)

The remote host is running a version of Windows that contains a flaw in the Hyperlink Object Library that can be abused to execute arbitrary code on the remote host. To exploit this flaw, an attacker would need to construct a malicious hyperlink and lure a victim into clicking it. C Tenable Netwo...

Windows Media Player does not properly handle PNG images with excessive width or height values

Overview Microsoft Windows Media Player fails to properly handle PNG images containing unexpected information. Remote attackers may be able to craft a malicious PNG image that would cause Media Player to execute arbitrary code. Description Microsoft Windows Media Player WMP is an application that...

IE HHCTRL exploit still usable even after patch

Hi everybody. Just wanted to point out that the patch Microsoft released to take care of the HHCTRL.OCX vulnerability MS05-001 is fixing just part of the problem. At least Windows XP Service Pack 1 and Windows 2000 Service Pack 4 are still vulnerable to exploiting the HHCTRL vulnerability, by usi...

Multiple bugs in Internet Explorer

New cumulative patch released by Microsoft...

Microsoft Windows contains buffer overflow in processing of WMF and EMF image files

Overview A vulnerability in the way the Microsoft Windows Graphics Rendering Engine processes certain types of image files could allow an attacker to execute arbitrary code on a vulnerable system. Description The Microsoft Windows Graphics Rendering Engine supports a number of image formats...