23 matches found
EUVD-2007-5328
Malware in sbrugna...
Microsoft Vista SP0 SMB Negotiate Protocol Denial of Service
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Microsoft Vista SP0 SMB Negotiate Protocol DoS', 'Description' = %q This module exploits a flaw in Windows Vista that allows a remote...
Microsoft Vista Negotiate Protocol Denial of Service - Ver2
A buffer denial of service vulnerability exists in Windows Vista. Successful exploitation of this vulnerability could allow a remote attacker to cause a denial of service condition...
Microsoft Windows Kernel Win32k.sys本地权限提升漏洞(MS11-077)(CVE-2011-2011)
BUGTRAQ ID: 49981 CVE ID: CVE-2011-2011 Microsoft Windows是流行的计算机操作系统。 Windows Kernel在Win32k.sys的实现上存在本地权限提升漏洞，本地攻击者可利用此漏洞以内核权限执行任意代码，导致完全控制受影响计算机。 Microsoft Windows XP Microsoft Windows Server Microsoft Vista Microsoft Windows 7 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS11-077）以及相应补丁:...
Microsoft Vista TCP/IP堆缓冲区下溢漏洞
Windows Vista是微软下一代操作系统，以前叫做Longhorn（微软当初内部的代号）。作为微软最新操作系统，Windows Vista第一次在操作系统中引入“ Life Immersion”概念，即在系统中集成许多人性的因素，一切以人为本。使得操作系统尽最大可能贴近用户，了解用户的感受，从而方便用户。 Windows Vista 32位和64位系统发布的API中的Microsoft Device IO Control在实现上存在安全漏洞，攻击者可利用此漏洞造成缓冲区下溢破坏内核内存。 Microsoft Vista 厂商补丁： Microsoft ---------...
Microsoft Windows用户访问控制(UAC)绕过本地权限提升漏洞
BUGTRAQ ID: 45045 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows实现上存在漏洞，本地攻击攻击者可以利用此漏洞以系统级权限执行任意代码，成功利用漏洞将完全操纵受影响的计算机，利用失败后可能形成拒绝服务。 Microsoft Vista x64 Edition SP2 Microsoft Vista x64 Edition SP1 Microsoft Vista x64 Edition 0 Microsoft Vista Ultimate SP2 Microsoft Vista Ultimate SP1 Microso...
Microsoft Vista - 'fveapi.dll' BitLocker Drive Encryption API Hijacking
Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles , Dinesh Arora / Exploit Title: Microsoft Vista BitLocker Drive Encryption API Hijacking Exploit Date: 25/08/2010 Author: Beenu Arora Tested on: Windows XP SP3 Vulnerable extensions: .wbcat Compile and rename to fveapi.dll,...
Microsoft Vista BitLocker Drive Encryption API Hijacking Exploit
Exploit for windows platform in category local exploits ================================================================ Microsoft Vista BitLocker Drive Encryption API Hijacking Exploit ================================================================ Greetz to :b0nd, Fbih2s,r45c4l,Charles...
Microsoft Vista - fveapi.dll BitLocker Drive Encryption API Hijacking
Microsoft Vista - fveapi.dll BitLocker Drive Encryption API Hijacking Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles , Dinesh Arora / Exploit Title: Microsoft Vista BitLocker Drive Encryption API Hijacking Exploit Date: 25/08/2010 Author: Beenu Arora Tested on: Windows ...
Input validation
The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate user-mode pointers in unspecified error conditions, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Pointe...
msvista-overflow.txt
phion Security Advisory 21/10/2008 Microsoft VISTA TCP/IP stack buffer overflow Summary ----------------------------- Microsoft Device IO Control wrapped by the iphlpapi.dll API shipping with Windows Vista 32 bit and 64 bit contains a possibly exploitable, buffer overflow corrupting kernel memory...
Microsoft Vista SP0 SMB Negotiate Protocol DoS
This module exploits a flaw in Windows Vista that allows a remote unauthenticated attacker to disable the SMB service. This vulnerability was silently fixed in Microsoft Vista Service Pack 1. This module requires Metasploit: https://metasploit.com/download Current source:...
Microsoft Vista speech recognition unauthorized access
Speech recognition may be used as an attack vector against client computer with e.h. HTML page with embedded sound...
Microsoft Vista侧栏联系人及天气小工具远程代码执行漏洞（MS07-048）
BUGTRAQ ID: 25306,25304 CVECAN ID: CVE-2007-3891,CVE-2007-3032 Vista是微软发布的最新的操作系统。 Vista侧栏的联系人和天气小工具在解析某些属性时没有执行充分的验证，远程攻击者可能利用此漏洞通过诱使用户执行某些操作来控制系统。 如果用户在联系人小工具中导入添加了恶意的联系人文件，或单击了天气小工具中的恶意链接，就可能导致在系统上运行恶意代码。 Microsoft Windows Vista 临时解决方法： 卸载或禁用天气和联系人小工具 在“组策略”或注册表中禁用侧栏 修改gadget.xml上的访问控制列表以增加限制：...
Microsoft Vista侧栏RSS源小工具跨站脚本漏洞（MS07-048）
BUGTRAQ ID: 25287 CVECAN ID: CVE-2007-3033 Vista是微软发布的最新的操作系统。 Vista侧栏中的RSS源小工具中存在漏洞，远程攻击者可能利用此漏洞导致跨站脚本执行。 在解析RSS源中的某些单元时，可能会渲染单元中特制的HTML标签，导致注入JavaScript脚本。由于RSS源小工具是在本地区域中运行的，因此所注入的脚本可以获得对系统的完全访问。 Microsoft Windows Vista 临时解决方法： 卸载或禁用源标题小工具 在“组策略”或注册表中禁用侧栏 修改gadget.xml上的访问控制列表以增加限制： 1...
Microsoft XML Core Services SubstringData Integer Overflow Vulnerability
Description Microsoft XML Core Services is prone to an integer-overflow vulnerability because the application fails to ensure that integer values are not overrun. Attackers can exploit this issue by enticing unsuspecting users to view malicious web content. Specially crafted scripts could issue...
Microsoft Vista IPv6 multiple security vulnerability
Multiple DoS conditions and spoof possibilities...
Microsoft Vista - 'NtRaiseHardError' Local Privilege Escalation
//raise.c //26-12-2006 erasmus/ORC //exploit NtRaiseHardError privesc and load dll into csrss //this version only is vista, other version can be worked //with proper offsets, i will complete them soon //imperfect but sometime work, ok for proto type; //dll limit to 8 chars but maybe can work arou...
Microsoft Vista (NtRaiseHardError) Privilege Escalation Exploit
Exploit for unknown platform in category local exploits =============================================================== Microsoft Vista NtRaiseHardError Privilege Escalation Exploit =============================================================== //raise.c //26-12-2006 erasmus/ORC //exploit...
Microsoft Vista (NtRaiseHardError) Privilege Escalation Exploit
No description provided by source. //raise.c //26-12-2006 erasmus/ORC //exploit NtRaiseHardError privesc and load dll into csrss //this version only is vista, other version can be worked //with proper offsets, i will complete them soon //imperfect but sometime work, ok for proto type; //dll limit...