365 matches found
Microsoft Windows OpenType Compact Font Format Driver Privilege Escalation Vulnerability (980218)
This host is missing an important security update according to Microsoft Bulletin MS10-037. OpenVAS Vulnerability Test $Id: secpodms10-037.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Windows OpenType Compact Font Format Driver Privilege Escalation Vulnerability 980218 Authors: Sooraj KS...
Microsoft Windows Kernel 'Win32k.sys' Window Creation Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel when a new window is created. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromis...
WebKit 532.5 Stack Exhaustion
loop; function loop setIntervaldoit,0; function doit var b=""; document.writeb; setIntervalloop,0;...
Microsoft Windows畸形图形文件处理本地拒绝服务漏洞(MS10-021)
BUGTRAQ ID: 39320 CVE ID: CVE-2010-0482 Microsoft Windows是微软发布的非常流行的操作系统。 Windows内核没有正确地验证畸形图形文件的重新定位部分。攻击者可以通过运行特制应用程序来利用该漏洞,导致系统变得没有响应并自动重新启动。 Microsoft Windows Server 2008 R2 Microsoft Windows 7 厂商补丁: Microsoft --------- Microsoft已经为此发布了一个安全公告(MS10-021)以及相应补丁: MS10-021:Vulnerabilities in Windo...
Microsoft Windows 7 / Server 2008 R2 SMB Client Infinite Loop
This module exploits a denial of service flaw in the Microsoft Windows SMB client on Windows 7 and Windows Server 2008 R2. To trigger this bug, run this module as a service and forces a vulnerable client to access the IP of this system as an SMB server. This can be accomplished by embedding a UNC...
Microsoft SMB Client Remote Code Execution Vulnerabilities (980232)
This host is missing a critical security update according to Microsoft Bulletin MS10-020. OpenVAS Vulnerability Test $Id: secpodms10-020.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft SMB Client Remote Code Execution Vulnerabilities 980232 Authors: Antu Sanadi Updated By: Madhuri D on...
Microsoft Windows Kernel Virtual Path Local Denial Of Service Vulnerability
Description Microsoft Windows is prone to a local denial-of-service vulnerability that affects the Windows kernel. Attackers may exploit this issue to cause affected computers to become unresponsive and restart, causing a denial-of-service condition. Technologies Affected Avaya Meeting Exchange -...
CVE-2010-1118
Unspecified vulnerability in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to a use-after-free issue, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 2010...
Heap overflow
Heap-based buffer overflow in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to discover the base address of a Windows .dll file, and possibly have unspecified other impact, via unknown vectors, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 20...
Design/Logic Flaw
Unspecified vulnerability in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to a use-after-free issue, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 2010...
CVE-2010-1118
Technical details for CVE-2010-1118 are not publicly available in the provided connected documents. The Initial Description notes an unspecified vulnerability in IE8 on Windows 7. Monitor for updates for any concrete impact, affected products, or fixes.
CVE-2010-1118
Unspecified vulnerability in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to a use-after-free issue, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 2010...
Microsoft SMB Client Remote Code Execution Vulnerabilities (978251)
This host is missing a critical security update according to Microsoft Bulletin MS10-006. OpenVAS Vulnerability Test $Id: secpodms10-006.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft SMB Client Remote Code Execution Vulnerabilities 978251 Authors: Antu Sanadi Updated By: Madhuri D on...
Microsoft Data Analyzer ActiveX Control Vulnerability (978262)
This host is missing a critical security update according to Microsoft Bulletin MS10-008. OpenVAS Vulnerability Test $Id: secpodms10-008.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft Data Analyzer ActiveX Control Vulnerability 978262 Authors: Veerendra GG Updated By: Madhuri D on 2010-11-22 - To...
Microsoft DirectShow Remote Code Execution Vulnerability (977935)
This host is missing a critical security update according to Microsoft Bulletin MS10-013. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Windows SMB Client Race Condition Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute code with SYSTEM-level privileges. On some systems, remote attacks may result in denial-of-service conditions. Technologies Affected Avaya Meeting Exchange - Client...
Microsoft Data Analyzer 'max3activex.dll' ActiveX Control Remote Code Execution Vulnerability
Description The Microsoft Data Analyzer is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user to view a malicious webpage. Successful exploits will allow the attacker to execute arbitrary code within the context of the application...
Microsoft Windows 7 & 2008 'KeAccumulateTicks()' SMB2 Packet Remote Denial of Service
No description provided by source. win7-crash.py: Trigger a remote kernel crash on Win7 and server 2008R2 infinite loop Crash in KeAccumulateTicks due to NTASSERT/DbgRaiseAssertionFailure caused by an infinite loop. NO BSOD, YOU GOTTA PULL THE PLUG. To trigger it fast from the target:...
Microsoft Windows 7/2008 R2 - Remote Kernel Crash
!/usr/bin/python win7-crash.py: Trigger a remote kernel crash on Win7 and server 2008R2 infinite loop Crash in KeAccumulateTicks due to NTASSERT/DbgRaiseAssertionFailure caused by an infinite loop. NO BSOD, YOU GOTTA PULL THE PLUG. To trigger it fast; from the target: \thisscriptipaddr\BLAH ,...
Microsoft Windows SMB2 '_Smb2ValidateProviderCallback()' RCE Vulnerability
Microsoft Windows is prone to a remote code execution RCE vulnerability when processing the protocol headers for the Server Message Block SMB Negotiate Protocol Request. NOTE: Reportedly, for this issue to be exploitable, file sharing must be enabled. SPDX-FileCopyrightText: 2009 Greenbone AG Som...