5669 matches found
Internet Explorer vulnerable to cross-site scripting
Overview Microsoft Internet Explorer contains a vulnerability in handling specific character encoding which may result in a cross-site scripting attack. Microsoft Internet Explorer contains a vulnerability in handling specific EUC-JP or ShiftJIS encoded characters, which may result in cross-site...
Internet Explorer vulnerable to cross-site scripting
Overview Microsoft Internet Explorer contains a vulnerability in handling specific character encoding which may result in a cross-site scripting attack. Microsoft Internet Explorer contains a vulnerability in handling specific UTF-7 encoded characters, which may result in cross-site scripting. Fo...
Internet Explorer vulnerable to cross-site scripting
Overview Microsoft Internet Explorer contains a cross-site scripting vulnerability due to the way file types are determined. Microsoft Internet Explorer contains a vulnerability in handling Content-Type, which may result in cross-site scripting. For more information, refer to the information...
Microsoft Update Installed
Microsoft Update, an expanded version of Windows Update, is installed on the remote Windows host. This service provides updates for the operating system and Internet Explorer as well as other Windows software such as Microsoft Office, Exchange, and SQL Server. C Tenable Network Security, Inc...
Microsoft Security Bulletin MS10-086 - Moderate Vulnerability in Windows Shared Cluster Disks Could Allow Tampering (2294255)
Microsoft Security Bulletin MS10-086 - Moderate Vulnerability in Windows Shared Cluster Disks Could Allow Tampering 2294255 Published: October 12, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Windows Server 2008 R2 whe...
Description of the System Center Virtual Machine Manager 2008 R2 hotfix rollup package: September 14, 2010
None None...
Microsoft Security Bulletin MS10-030 - Critical Vulnerability in Outlook Express and Windows Mail Could Allow Remote Code Execution (978542)
Microsoft Security Bulletin MS10-030 - Critical Vulnerability in Outlook Express and Windows Mail Could Allow Remote Code Execution 978542 Published: May 11, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Outlook Express...
ZDI-10-070: Microsoft Windows Media Player Codec Retrieval Dangling Pointer Remote Code Execution Vulnerability
ZDI-10-070: Microsoft Windows Media Player Codec Retrieval Dangling Pointer Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-070 April 13, 2010 -- CVE ID: CVE-2010-0268 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Windows Media Player 9 --...
MS10-019: Description of the security update for Windows Authenticode Signature Verification: April 13, 2010
None None...
ZDI-10-016: Microsoft Windows ShellExecute Improper Sanitization Code Execution Vulnerability
ZDI-10-016: Microsoft Windows ShellExecute Improper Sanitization Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-016 February 9, 2010 -- CVE ID: CVE-2010-0027 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Windows XP -- TippingPointTM IPS Customer...
Microsoft IE基线标签渲染远程代码执行漏洞（MS10-002）
BUGTRAQ ID: 37895 CVE ID: CVE-2010-0245 Internet Explorer是Windows操作系统中默认捆绑的web浏览器。 如果交错的strike和center标签中包含用用于操控sub或sup等字体基线的元素的话，则在IE渲染该标签时存在释放后使用错误。在删除这个元素指针的时候，IE之后会引用已被释放的指针。 攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。 Microsoft Internet Explorer 8.0 临时解决方法： 将Internet...
Microsoft Security Bulletin MS09-069 - Important Vulnerability in Local Security Authority Subsystem Service Could Allow Denial of Service (974392)
Microsoft Security Bulletin MS09-069 - Important Vulnerability in Local Security Authority Subsystem Service Could Allow Denial of Service 974392 Published: December 08, 2009 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in...
ZDI-09-072: Microsoft Windows GDI+ TIFF Parsing Code Execution Vulnerability
ZDI-09-072: Microsoft Windows GDI+ TIFF Parsing Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-072 October 13, 2009 -- CVE ID: CVE-2009-2503 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Windows Vista Microsoft Windows XP Microsoft Windows Server...
Vulnerable MSVC++ runtime distributed with OpenOffice.org 3.1.1 for Windows
The just released latest version of OpenOffice.org 3.1.1 for Windows distributes once again a completely outdated and vulnerable MSVC++ runtime. The unpacked installation archive contains in subdirectory REDIST the installer of the "Microsoft Visual C++ 2008 Redistributable", VCRedistx86.exe, tim...
Microsoft Security Bulletin MS09-026 - Important Vulnerability in RPC Could Allow Elevation of Privilege (970238)
Microsoft Security Bulletin MS09-026 - Important Vulnerability in RPC Could Allow Elevation of Privilege 970238 Published: June 9, 2009 Version: 1.0 General Information Executive Summary This security update resolves a publicly disclosed vulnerability in the Windows remote procedure call RPC...
WINDOWS 7 RC 7100 GDI驱动Win32k.sys内核D.O.S漏洞
Win32k.sys是WINDOWS的GDI驱动程序，包含大量复杂的图形界面处理，由于其中大量代码是从WIN3.1中修改过来，因此成了WINDOWS漏洞多发之地。 这个漏洞主要是因为Windows 7 在其NtUserGetDc/NtUserGetDcEx函数中（也许不仅仅是这两个函数）不正确地使用了共享临界锁，导致了任何权限下的GDI程序可以引发内核BSOD，从而进行DOS攻击. =============== 在WINDOWS VISTA中，在这两个函数进入前，会调用UserEnterUserCirtSec，进入临界区，同时会将gptiCurrent设置为当前线程的WIN32THRE...
Microsoft Security Bulletin MS09-013 - Critical Vulnerabilities in Windows HTTP Services Could Allow Remote Code Execution (960803)
Microsoft Security Bulletin MS09-013 - Critical Vulnerabilities in Windows HTTP Services Could Allow Remote Code Execution 960803 Published: April 14, 2009 Version: 1.0 General Information Executive Summary This security update resolves one publicly disclosed vulnerability and two privately...
MS09-016: Description of the Forefront Threat Management Gateway MBE hotfix package: April 14, 2009
Resolves vulnerabilities that may cause Forefront Threat Management Gateway MBE stop accepting new requests.INTRODUCTIONMicrosoft has released security bulletin MS09-016. To view the complete security bulletin, visit one of the following Microsoft Web sites:Home...