Microsoft Windows Media ASF和ASX解析缓冲区溢出漏洞

Windows Media Player是Microsoft开发的流行的媒体播放程序。 Windows Media Format Runtime处理特殊的ASF和ASX文件存在问题，远程攻击者可利用漏洞以应用程序进程权限执行任意指令。 攻击者可以构建包含特殊Windows Media Player的内容恶意页面，诱使用户访问，可以以应用程序进程权限执行任意指令。目前没有详细漏洞细节提供。 Microsoft Windows Media Format 7.1 through 9.5 Series Runtime -Microsoft Windows 2000 Service Pack 4...

Microsoft Internet Explorer IMSKDIC.DLL拒绝服务漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer实例化IMSKDIC.DLL COM对象存在问题，远程攻击者可以利用漏洞进行内存破坏攻击，可能以进程权限执行任意指令。 当Microsoft Internet Explorer尝试以ActiveX控件实例化IMSKDIC.DLLMicrosoft IME COM对象，可能破坏系统内存造成拒绝服务，可能导致任意代码执行。 Microsoft Internet Explorer 6.0 SP2 Microsoft Internet Explorer 6.0...

Microsoft Internet Explorer CreateTextRange远程代码执行漏洞(MS06-013)

Microsoft Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer的createTextRange函数实现上存在漏洞，远程攻击者可能利用此漏洞在客户机器上执行任意指令。 Internet Explorer使用createTextRange时在某些环境下可能导致无需的列表指针引用，这样在试图调用引用的32位地址时就会出现错误，如下所示： 0x7D53C15D MOV ECX, DWORD PTR DS:EDI .. 0x7D53C166 CALL DWORD PTR ECX...

Microsoft Internet Explorer无效HTML解析代码执行漏洞（MS06-013）

Microsoft Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer处理特制的无效HTML时存在漏洞。攻击者可以创建恶意的Web页面，如果用户访问了该页面的话就会导致内存破坏。成功利用这个漏洞的攻击者可以完全控制受影响的系统。 Microsoft Internet Explorer 5.0 Microsoft Internet Explorer 6.0 - Microsoft Windows XP SP2 - Microsoft Windows Server 2003 SP1...

Microsoft Windows TCP/IP协议驱动远程溢出漏洞（MS06-032）

Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows的TCP/IP协议驱动处理特定畸形的IP源路由报文时存在缓冲区溢出漏洞，远程攻击者可以通过发送有Loose Source and Record Route选项的特制ICMP报文触发这个漏洞，导致tcpip.sys或ntoskrnl.exe中出现错误而造成拒绝服务或执行任意指令。 默认情况下，Windows系统的路由及远程访问服务是关闭的，也就是说默认情况下系统不受此漏洞影响。 Microsoft Windows XP SP2 Microsoft Windows XP SP1...

Microsoft Windows XML核心服务XSLT缓冲区溢出漏洞（MS06-061）

Microsoft Windows是微软发布的非常流行的操作系统。 Windows的XML核心服务在处理MSXML中可扩展样式表语言转换（XSLT）控件时存在字符串缓冲区溢出漏洞，成功利用此漏洞的攻击者可以完全控制受影响的系统。 攻击者可以通过建立恶意网页来利用此漏洞，如果用户访问该页面，即有可能允许远程执行指令。 Microsoft Office 2003 Service Pack 2 Microsoft Office 2003 Service Pack 1 Microsoft Windows XP SP2 Microsoft Windows XP SP1 Microsoft...

CVE-2006-4692: Improper Neutralization of Argument Delimiters in a Command

Argument injection vulnerability in the Windows Object Packager packager.exe in Microsoft Windows XP SP1 and SP2 and Server 2003 SP1 and earlier allows remote user-assisted attackers to execute arbitrary commands via a crafted file with a "/" slash character in the filename of the Command Line...

CVE-2006-4696: Improper Control of Generation of Code

Unspecified vulnerability in the Server service in Microsoft Windows 2000 SP4, Server 2003 SP1 and earlier, and XP SP2 and earlier allows remote attackers to execute arbitrary code via a crafted packet, aka "SMB Rename Vulnerability."...

Microsoft Windows Server 2003 - NetpIsRemote() Remote Overflow (MS06-040) (Metasploit)

Microsoft Windows Server 2003 - NetpIsRemote Remote Overflow MS06-040 Metasploit netapiwin2003.pm MS06-040 Exploit for Windows Server 2003 SP0 Author: Trirat Puttaraksa Kira http://sf-freedom.blogspot.com For educational purpose only Note: This exploit is developed because of my question "Is it...

CVE-2006-0032: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Indexing Service in Microsoft Windows 2000, XP, and Server 2003, when the Encoding option is set to Auto Select, allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded URL, which is injected into an error message whose...

Microsoft Windows Server 2000 - Multiple COM Object Instantiation Code Execution Vulnerabilities

Microsoft Windows Server 2000 - Multiple COM Object Instantiation Code Execution Vulnerabilities source: https://www.securityfocus.com/bid/19636/info Microsoft Windows 2000 is prone to multiple memory-corruption vulnerabilities that are related to the instantiation of COM objects. These issues ma...

Multiple Microsoft Windows Server service security vulnerabilities

Kernel mode heap overflow on mailslots processing. Information leak from SMB buffers...

Microsoft Windows Server Service RPC Request Buffer Overrun (MS06-040; CVE-2006-3439)

The Server Service SRVSVC is one of the network services supplied by Microsoft. It supports file, print, and named-pipe sharing over Windows-based networks, and allows named pipe communication between applications running on distributed systems. By supplying malformed parameters to some of the AP...

CVE-2006-3440: Undefined Security Weakness

Buffer overflow in the Winsock API in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka "Winsock Hostname Vulnerability."...

CVE-2006-3439: Undefined Security Weakness

Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers, including anonymous users, to execute arbitrary code via a crafted RPC message, a different vulnerability than CVE-2006-1314...

CVE-2006-3648: Undefined Security Weakness

Unspecified vulnerability in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 and 2003 SP1, allows remote attackers to execute arbitrary code via unspecified vectors involving unhandled exceptions, memory resident applications, and incorrectly "unloading chained exception."...

Microsoft Windows Server service buffer overflow

Overview A stack-based buffer overflow exists in the Microsoft Server service. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code with SYSTEM privileges. Description Microsoft Server ServiceMS06-040 includes the following information: The Server service...

CVE-2006-3942: Improper Input Validation

The server driver srv.sys in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service system crash via an SMBCOMTRANSACTION SMB message that contains a string without null character termination, which leads to a NULL dereference in the...

Heap overflow

Heap-based buffer overflow in the Server Service SRV.SYS driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote attackers to execute arbitrary code via crafted first-class Mailslot messages that triggers memory corruption and bypasses size...

CVE-2006-1300: Undefined Security Weakness

Microsoft .NET framework 2.0 ASP.NET in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1 allows remote attackers to bypass access restrictions via unspecified "URL paths" that can access Application Folder objects "explicitly by name."...