Microsoft Windows XP creates tasks with elevated privileges

Overview Microsoft Windows XP contains a vulnerability in the way that tasks are created that may permit an authenticated user to launch applications with elevated privileges. Description Microsoft Windows creates tasks when a user launches an application. A vulnerability in the way that Windows ...

Microsoft Security Bulletin MS04-013

Microsoft Security Bulletin MS04-013 Cumulative Security Update for Outlook Express 837009 Issued: April 13, 2004 Version: 1.0 Summary Who should read this document: Customers who have Microsoft® Outlook Express® installed Impact of vulnerability: Remote Code Execution Maximum Severity Rating:...

MS04-003: MDAC Buffer Overflow (832483)

The remote Microsoft Data Access Component MDAC server is vulnerable to a flaw that could allow an attacker to execute arbitrary code on this host, provided he can simulate responses from a SQL server. To exploit this flaw, an attacker would need to wait for a host running a vulnerable MDAC...

[CORE-2003-12-05] DCE RPC Vulnerabilities New Attack Vectors Analysis

Core Security Technologies Advisory http://www.coresecurity.com DCE RPC Vulnerabilities New Attack Vectors Analysis Date Published: 2003-12-10 Last Update: 2003-12-10 Advisory ID: CORE-2003-12-05 Title: DCE RPC Vulnerabilities New Attack Vectors Analysis Remotely Exploitable: Yes Locally...

Microsoft FrontPage Server Extensions contains denial of service vulnerability in the SmartHTML interpreter

Overview The Microsoft FrontPage Server Extensions contains a vulnerability that allows unauthenticated remote attackers to conduct denial of service attacks. Description Microsoft FrontPage Server Extensions FPSE is an optional set of tools that adds functionality to a web site. This functionali...

Microsoft FrontPage Server Extensions contains buffer overflow in remote debugging functionality

Overview Microsoft FrontPage Server Extensions contains a vulnerability that allows remote attackers to execute arbitrary code with local system privileges. Description Microsoft FrontPage Server Extensions FPSE is an optional set of tools that adds functionality to a web site. This functionality...

Microsoft Security Bulletin MS03-047

Microsoft Security Bulletin MS03-047 Print Vulnerability in Exchange Server 5.5 Outlook Web Access Could Allow Cross-Site Scripting Attack 828489 Issued: October 15, 2003 Version Number: 1.0 Summary Who Should Read This Document: System administrators who have servers running Microsoft® Exchange...

Microsoft Help and Support Center contains buffer overflow in code used to handle HCP protocol

Overview There is a buffer overflow in the Microsoft Help and Support Center that could permit an attacker to execute arbitrary code with SYSTEM privileges. Description The Microsoft Help and Support Center is a facility within WIndows to provide product help and documentation. Among other things...

Re: BAD NEWS: Microsoft Security Bulletin MS03-032

The patch for Drew's object data=funky.hta doesn't work: This is the exact same issue as http://greymagic.com/adv/gm001-ie/, which explains the problem in detail. Microsoft again patches the object element in HTML, but it doesn't patch the dynamic version of that same element. 1. Disable Active...

Re: [Full-Disclosure] BAD NEWS: Microsoft Security Bulletin MS03-032

----- Original Message ----- From: "[email protected]" [email protected] To: [email protected] Sent: Sunday, September 07, 2003 6:17 AM Subject: Full-Disclosure BAD NEWS: Microsoft Security Bulletin MS03-032 Since the cat somehow got out of the bag, and more importantly, this is so...

Microsoft Security Bulletin MS03-035: Flaw in Microsoft Word Could Enable Macros to Run Automatically(827653)

-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------- Title: Flaw in Microsoft Word Could Enable Macros to Run Automatically 827653 Date: September 3, 2003 Software: Microsoft Word 97 Microsoft Word 98 J Microsoft Word 2000 Microsoft Word 2002...

Immunity Canvas: MS03_026

Name| ms03026 ---|--- CVE| CVE-2003-0352 Exploit Pack| CANVAS Description| Microsoft Windows RPC Interface Overflow MS03-026 Notes| CVE Name: CVE-2003-0352 VENDOR: Microsoft MSADV: MS03-026 VersionsAffected: Repeatability: References: http://www.microsoft.com/technet/security/bulletin/MS03-026.ms...

benjurry.txt

The Analysis of LSD's Buffer Overrun in Windows RPC Interface Author:Flashsky site:www.xfocus.org WWW.VENUSTECH.COM.CN WWW.SHOPSKY.COM Email:[email protected] Translator:Benjurry Email:[email protected] Code by Flashsky and Benjurry http://www.xfocus.org/documents/200307/2.html Foreword On Ju...

Microsoft Security Bulletin MS03-030: Unchecked Buffer in DirectX Could Enable System Compromise (Q819696)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Unchecked Buffer in DirectX Could Enable System Compromise 819696 Date: July 23, 2003 Software: Microsoft DirectXr 5.2 on Windows 98 Microsoft DirectX 6.1 on Windows 98 SE Microsoft...

Microsoft SQL Server vulnerable to buffer overflow

Overview Microsoft SQL Server contains a buffer overflow vulnerability. A local attacker could leverage this vulnerability to gain elevated privileges and/or execute arbitrary code. Description Quoting from Microsoft Security Bulletin MS03-031:A flaw exists in a specific Windows function that may...

Microsoft Security Bulletin MS03-027: Unchecked Buffer in Windows Shell Could Enable System Compromise (Q821557)

-----BEGIN PGP SIGNED MESSAGE----- - - --------------------------------------------------------------- Title: Unchecked Buffer in Windows Shell Could Enable System Compromise 821557 Date: 16 July 2003 Software: Microsoftr Windows r XP Impact: Run code of attacker's choice Max Risk: Important...

When full disclosure is the only way...

XBOX Security -= Security Advisory =- Advisory: XBOX Dashboard local vulnerability Release Date: 2003/07/04 Last Modified: 2003/07/04 Author: Stefan Esser [email protected] Application: Microsoft XBOX Dashboard up to today Severity: A vulnerability within the XBOX Dashboard allows to totally...

Microsoft Security Bulletin MS03-013: Buffer Overrun in Windows Kernel Message Handling could Lead to Elevated Privileges (811493)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Buffer Overrun in Windows Kernel Message Handling could Lead to Elevated Privileges 811493 Date: 16 April 2003 Software: Microsoft Windows NT 4.0, Windows 2000, and Windows XP Impact...

Microsoft Security Bulletin MS03-008: Flaw in Windows Script Engine Could Allow Code Execution (814078)

-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------- Title: Flaw in Windows Script Engine Could Allow Code Execution 814078 Date: 19 March 2003 Software: Microsoft Windows 98 Microsoft Windows 98 Second Edition Microsoft Windows Me Microsoft...

MS02-045: Unchecked buffer in Network Share Provider (326830)

Due to a flaw in Microsoft's SMB implementation, the remote host is vulnerable to a denial of service attack. By sending a specially crafted packet request, an attacker could launch a denial of service, causing the affected host to crash. Note that this vulnerability is not exploitable without...