Microsoft Windows TCP/IP本地权限提升漏洞(MS12-032)

BUGTRAQ ID: 53349 CVE ID: CVE-2012-0179 Microsoft Windows是流行的计算机操作系统。 Microsoft Windows在实现上存在影响TCP/IP栈组件'tcpip.sys'的本地权限提升漏洞，攻击者可利用此漏洞通过在另一个进程中执行任意代码获取提升的权限，可能会造成拒绝服务。 0 Microsoft Server 2008 Windows Server 2008 R2 x64 SP1 Microsoft Server 2008 Windows Server 2008 R2 x64 0 Microsoft Server 2008...

Microsoft Windows DNS Server远程拒绝服务漏洞(MS12-017)

BUGTRAQ ID: 52374 CVE ID: CVE-2012-0006 Windows DNS Server是微软公司推出的域名系统或者域名服务，域名系统为Internet上的主机分配域名地址和IP地址。 Windows DNS Server在处理某些lookup查询时，在实现上存在远程拒绝服务漏洞，远程攻击者可利用此漏洞造成DNS服务器停止响应，拒绝服务合法用户。 0 Microsoft Server 2008 Microsoft Server 2003 厂商补丁： Microsoft ---------...

Microsoft Windows TrueType字体解析拒绝服务漏洞(MS11-084)

CVE ID: CVE-2011-2004 Microsoft Windows是流行的计算机操作系统。 Microsoft Windows在实现上存在安全漏洞，可被恶意用户利用造成拒绝服务。 此漏洞源于在解析TrueType字体文件时Win32k.sys中存在的数组索引错误，可通过诱使用户浏览包含特制TrueType字体文件的WebDAV或网络共享利用此漏洞。 Microsoft Windows Server 2008 Microsoft Windows 7 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（ms11-084）以及相应补丁:...

Microsoft Windows Kernel Win32k.sys本地权限提升漏洞(MS11-077)(CVE-2011-2011)

BUGTRAQ ID: 49981 CVE ID: CVE-2011-2011 Microsoft Windows是流行的计算机操作系统。 Windows Kernel在Win32k.sys的实现上存在本地权限提升漏洞，本地攻击者可利用此漏洞以内核权限执行任意代码，导致完全控制受影响计算机。 Microsoft Windows XP Microsoft Windows Server Microsoft Vista Microsoft Windows 7 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS11-077）以及相应补丁:...

Microsoft SMB Crafted Write Request Denial of Service (MS11-048; CVE-2011-1267)

SMB Protocol is the file sharing protocol used by default on Windows-based computers. A denial of service vulnerability exists in the way that Microsoft Server Message Block SMB Protocol software handles specially crafted SMB requests. The vulnerability is caused when the Microsoft Server Message...

CVE-2011-0039: Improper Authentication

The Local Security Authority Subsystem Service LSASS in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly process authentication requests, which allows local users to gain privileges via a request with a crafted length, aka "LSASS Length Validation Vulnerability."...

Microsoft Windows Server - Service Relative Path Stack Corruption (MS08-067) (Metasploit)

$Id: ms08067netapi.rb 11614 2011-01-21 04:09:48Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

CVE-2010-3963: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Routing and Remote Access NDProxy component in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, related to the Routing and Remote Access service RRAS and improper copying from user mode to th...

Microsoft Windows用户访问控制(UAC)绕过本地权限提升漏洞

BUGTRAQ ID: 45045 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows实现上存在漏洞，本地攻击攻击者可以利用此漏洞以系统级权限执行任意代码，成功利用漏洞将完全操纵受影响的计算机，利用失败后可能形成拒绝服务。 Microsoft Vista x64 Edition SP2 Microsoft Vista x64 Edition SP1 Microsoft Vista x64 Edition 0 Microsoft Vista Ultimate SP2 Microsoft Vista Ultimate SP1 Microso...

CVE-2010-2741: Undefined Security Weakness

The OpenType Font OTF format driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 performs an incorrect integer calculation during font processing, which allows local users to gain privileges via a crafted application, aka "OpenType Font Validation Vulnerability."...

CVE-2010-3144: Undefined Security Weakness

Untrusted search path vulnerability in the Internet Connection Signup Wizard in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a Trojan horse smmscrpt.dll file in the current working directory, as demonstrated by a directory that contains an ISP or...

CVE-2010-0024: Improper Input Validation

The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2003 SP2, does not properly parse MX records, which allows remote DNS servers to cause a denial of service service outage via a crafted response to a DNS MX...

CVE-2010-0025: Exposure of Sensitive Information to an Unauthorized Actor

The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2000 SP3, does not properly allocate memory for SMTP command replies, which allows remote attackers to read fragments of e-mail messages by sending a series of...

CVE-2010-0242: Undefined Security Weakness

The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to cause a denial of service system hang via crafted packets with malformed TCP selective acknowledgement SACK values, aka "TCP/IP Selective Acknowledgement Vulnerability."...

CVE-2010-0016: Improper Input Validation

The SMB client implementation in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly validate response fields, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted response, aka "SMB Client Pool Corruption...

CVE-2009-4312: Improper Control of Generation of Code

Unspecified vulnerability in the Indeo codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via crafted media content, as reported to Microsoft by Dave Lenoe of Adobe...

CVE-2009-2505: Improper Authentication

The Internet Authentication Service IAS in Microsoft Windows Vista SP2 and Server 2008 SP2 does not properly validate MS-CHAP v2 Protected Extensible Authentication Protocol PEAP authentication requests, which allows remote attackers to execute arbitrary code via crafted structures in a malformed...

CVE-2009-2526: Undefined Security Weakness

Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 do not properly validate fields in SMBv2 packets, which allows remote attackers to cause a denial of service infinite loop and system hang via a crafted packet to the Server service, aka "SMBv2 Infinite Loop Vulnerability."...

Microsoft Windows TCP/IP时间戳远程代码执行漏洞（MS09-048）

BUGTRAQ ID: 36265 CVECAN ID: CVE-2009-1925 Microsoft Windows是微软发布的非常流行的操作系统。 由于TCP/IP栈没有正确地清除状态信息，导致Windows TCP/IP栈中存在远程代码执行漏洞。这会导致TCP/IP栈引用包含有其他信息的字段为函数指针。匿名攻击者可以通过向在网络上监听服务的计算机发送特制的TCP/IP报文来利用这个漏洞，成功利用这个漏洞的攻击者可以完全控制受影响的系统；攻击者之后可以安装程序、查看、更改或删除数据，或创建拥有完全用户权限的新账号。 Microsoft Windows Vista SP2...

Input validation

The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate user-mode pointers in unspecified error conditions, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Pointe...