Microsoft Windows OpenType Compact Font Format Driver Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. Attackers may exploit this issue to execute arbitrary code with kernel-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers. Failed exploit attempts...

Microsoft Internet Explorer 8 Developer Tools Remote Code Execution Vulnerability

Description Microsoft Internet Explorer 8 Developer Tools 'iedvtool.dll' ActiveX control is prone to a remote code-execution vulnerability that stems from a memory-corruption issue. An attacker can exploit this issue to execute arbitrary code in the context of the application, usually Internet...

Microsoft Windows Kernel 'Win32k.sys' Window Creation Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel when a new window is created. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromis...

Integer overflow

Integer overflow in cdd.dll in the Canonical Display Driver CDD in Microsoft Windows Server 2008 R2 and Windows 7 on 64-bit platforms, when the Windows Aero theme is installed, allows context-dependent attackers to cause a denial of service reboot or possibly execute arbitrary code via a crafted...

Microsoft Windows Kernel 'win32k.sys' Multiple DOS Vulnerabilities

Windows XP/2000/2003 is prone to multiple Denial Of Service vulnerabilities. OpenVAS Vulnerability Test $Id: gbmswinkernelwin32ksysmultdosvuln.nasl 5364 2017-02-20 13:26:07Z cfi $ Microsoft Windows Kernel 'win32k.sys' Multiple DOS Vulnerabilities Authors: Antu Sanadi Copyright: Copyright c 2010...

Microsoft Windows畸形图形文件处理本地拒绝服务漏洞（MS10-021）

BUGTRAQ ID: 39320 CVE ID: CVE-2010-0482 Microsoft Windows是微软发布的非常流行的操作系统。 Windows内核没有正确地验证畸形图形文件的重新定位部分。攻击者可以通过运行特制应用程序来利用该漏洞，导致系统变得没有响应并自动重新启动。 Microsoft Windows Server 2008 R2 Microsoft Windows 7 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS10-021）以及相应补丁: MS10-021：Vulnerabilities in Windo...

Microsoft Windows内核空指针本地拒绝服务漏洞（MS10-021）

BUGTRAQ ID: 39297 CVE ID: CVE-2010-0234 Microsoft Windows是微软发布的非常流行的操作系统。 Windows内核中没有充分验证传递到Windows内核系统调用的注册表项参数。攻击者可以通过运行特制应用程序来利用该漏洞，导致系统变得没有响应并自动重新启动。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windows Vista Microsoft...

CVE-2010-0270

The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate fields in SMB transaction responses, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and reboot via a crafted 1 SMBv...

CVE-2010-0477

The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly handle 1 SMBv1 and 2 SMBv2 response packets, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted packet that causes the client to read the entirety of the respons...

CVE-2010-0476

The SMB client in Microsoft Windows Server 2003 SP2, Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and reboot via a crafted SMB transaction response...

Microsoft MPEG Layer-3 Codecs Remote Code Execution Vulnerability (977816)

This host is missing a critical security update according to Microsoft Bulletin MS10-026. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows SMTP Server Memory Allocation Information Disclosure Vulnerability

Description Microsoft Windows SMTP Server is prone to an information-disclosure vulnerability. Attackers can exploit this issue to gain access to sensitive information. Any information obtained may lead to further attacks. Technologies Affected Avaya Meeting Exchange - Client Registration Server...

Microsoft Windows Kernel Virtual Path Local Denial Of Service Vulnerability

Description Microsoft Windows is prone to a local denial-of-service vulnerability that affects the Windows kernel. Attackers may exploit this issue to cause affected computers to become unresponsive and restart, causing a denial-of-service condition. Technologies Affected Avaya Meeting Exchange -...

Microsoft Windows MPEG Layer-3 Audio Decoder Buffer Overflow Vulnerability

Description Microsoft Windows is prone to a remote buffer-overflow vulnerability when handling specially crafted Audio Video Interleave AVI files. Specifically, this issue arises in the Microsoft MPEG Layer-3 codecs. An attacker can exploit this issue by enticing an unsuspecting user to open a...

Microsoft SMB Client Remote Code Execution Vulnerabilities (978251)

This host is missing a critical security update according to Microsoft Bulletin MS10-006. OpenVAS Vulnerability Test $Id: secpodms10-006.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft SMB Client Remote Code Execution Vulnerabilities 978251 Authors: Antu Sanadi Updated By: Madhuri D on...

Microsoft Data Analyzer ActiveX Control Vulnerability (978262)

This host is missing a critical security update according to Microsoft Bulletin MS10-008. OpenVAS Vulnerability Test $Id: secpodms10-008.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft Data Analyzer ActiveX Control Vulnerability 978262 Authors: Veerendra GG Updated By: Madhuri D on 2010-11-22 - To...

Microsoft DirectShow Remote Code Execution Vulnerability (977935)

This host is missing a critical security update according to Microsoft Bulletin MS10-013. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Data Analyzer 'max3activex.dll' ActiveX Control Remote Code Execution Vulnerability

Description The Microsoft Data Analyzer is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user to view a malicious webpage. Successful exploits will allow the attacker to execute arbitrary code within the context of the application...

Microsoft Windows GP Trap Handler Privilege Escalation Vulnerability

Microsoft Windows operating system is prone to a privilege escalation vulnerability. This VT has been deprecated and replaced by the VT with the OID: 1.3.6.1.4.1.25623.1.0.900740. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and ar...

CVE-2009-4313

ir3232.dll 3.24.15.3 in the Indeo32 codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to cause a denial of service heap corruption or execute arbitrary code via malformed data in a stream in a media file, as demonstrated by an AVI file...