863 matches found
CVE-2005-1982: Undefined Security Weakness
Unknown vulnerability in the PKINIT Protocol for Microsoft Windows 2000, Windows XP, and Windows Server 2003 could allow a local user to obtain information and spoof a server via a man-in-the-middle MITM attack between a client and a domain controller when PKINIT smart card authentication is bein...
CVE-2005-0058: Undefined Security Weakness
Buffer overflow in the Telephony Application Programming Interface TAPI for Microsoft Windows 98, Windows 98 SE, Windows ME, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to elevate privileges or execute arbitrary code via a crafted message...
CVE-2005-1206: Undefined Security Weakness
Buffer overflow in the Server Message Block SMB functionality for Microsoft Windows 2000, XP SP1 and SP2, and Server 2003 and SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka the "Server Message Block Vulnerability."...
CVE-2005-0048: Undefined Security Weakness
Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Server 2003, and older operating systems allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IP packets with malformed options, aka the "IP Validation Vulnerability."...
CVE-2005-0060: Undefined Security Weakness
Buffer overflow in the font processing component of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application...
Microsoft Windows Server 2000 - WINS Remote Code Execution
Microsoft Windows Server 2000 - WINS Remote Code Execution // / ZUCWins 0.1 - Wins 2000 remote root exploit / / Exploit by: zuc / / works on Windows 2000 SP3/SP4 probably every language / // include include include include include include include include include include include include include...
CVE-2004-0211
The kernel for Microsoft Windows Server 2003 does not reset certain values in CPU data structures, which allows local users to cause a denial of service system crash via a malicious program...
CVE-2004-0574
The Network News Transfer Protocol NNTP component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper length validation and an...
CVE-2004-0211: Undefined Security Weakness
The kernel for Microsoft Windows Server 2003 does not reset certain values in CPU data structures, which allows local users to cause a denial of service system crash via a malicious program...
CVE-2004-0840: Improper Input Validation
The SMTP Simple Mail Transfer Protocol component of Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows Server 2003 64-bit Edition, and the Exchange Routing Engine component of Exchange Server 2003, allows remote attackers to execute arbitrary code via a malicious DNS response messa...
CVE-2004-0208: Undefined Security Weakness
The Virtual DOS Machine VDM subsystem of Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to access kernel memory and gain privileges via a malicious program that modified some system structures in a way that is not properly validated by privileged...
CVE-2003-0825: Improper Input Validation
The Windows Internet Naming Service WINS for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly validate the length of certain packets, which allows attackers to cause a denial of service and possibly execute arbitrary code...
CVE-2004-0199: Undefined Security Weakness
Help and Support Center in Microsoft Windows XP and Windows Server 2003 SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code, as demonstrated using certain hcp:// URLs that access the DVD Upgrade capability dvdupgrd.htm...
Microsoft Windows HSC DVD Driver Upgrade Code Execution Vulnerability
Description A security vulnerability has been reported in Microsoft Windows XP and Server 2003 operating systems. This issue exists in the Help and Support Center HSC and is due to how the feature handles HCP invocation URIs for DVD driver upgrades. This issue could be exploited from a malicious...
CVE-2003-0807: Undefined Security Weakness
Buffer overflow in the COM Internet Services and in the RPC over HTTP Proxy components for Microsoft Windows NT Server 4.0, NT 4.0 Terminal Server Edition, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service via a crafted request...
CVE-2004-0124: Undefined Security Weakness
The DCOM RPC interface for Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause network communications via an "alter context" call that contains additional data, aka the "Object Identity Vulnerability."...
Microsoft Windows Help And Support Center URI Validation Code Execution Vulnerability
Description Microsoft has reported a vulnerability in the Help and Support Center that is related to how HCP URIs are validated. This issue could reportedly be exploited via a malicious web page or HTML e-mail to execute arbitrary code on a client system. The issue may permit an attacker to injec...
CVE-2003-0825
The Windows Internet Naming Service WINS for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly validate the length of certain packets, which allows attackers to cause a denial of service and possibly execute arbitrary code...
