PT-2012-2353

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 R2 and R2 SP1 Microsoft Windows 7 Gold and SP1 Description A denial of service issue exists in the Remote Desktop Protocol RDP service, allowing remote attackers to cause the application to hang via crafted packet...

Microsoft SMB Transaction Parsing RCE Vulnerability

This host is missing a critical security update according to Microsoft Bulletin MS11-020. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Windows Kernel-Mode Drivers Remote Code Execution Vulnerabilities (2660465)

This host is missing a critical security update according to Microsoft Bulletin MS12-008. OpenVAS Vulnerability Test $Id: secpodms12-008.nasl 8724 2018-02-08 15:02:56Z cfischer $ Windows Kernel-Mode Drivers Remote Code Execution Vulnerabilities 2660465 Authors: Sooraj KS Copyright: Copyright c 20...

Microsoft Windows Kernel 'win32k.sys' Memory Corruption Vulnerability

Microsoft Windows 7 Professional 64-bit is prone to memory corruption vulnerability. This NVT has been replaced by NVT secpodms12-008.nasl OID:1.3.6.1.4.1.25623.1.0.902810. OpenVAS Vulnerability Test $Id: gbmswinkernelwin32ksysmemcorruptionvuln.nasl 5342 2017-02-18 17:02:54Z cfi $ Microsoft Windo...

Microsoft Windows Media Could Allow Remote Code Execution Vulnerabilities (2636391)

This host is missing a critical security update according to Microsoft Bulletin MS12-004. OpenVAS Vulnerability Test $Id: secpodms12-004.nasl 5341 2017-02-18 16:59:12Z cfi $ Microsoft Windows Media Could Allow Remote Code Execution Vulnerabilities 2636391 Authors: Sooraj KS Copyright: Copyright c...

CVE-2012-0001: Undefined Security Weakness

The kernel in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly load structured exception handling tables, which allows context-dependent attackers to bypass the SafeSEH security feature by...

Microsoft Windows CSRSS本地权限提升漏洞(MS11-097)

BUGTRAQ ID: 50972 CVE ID: CVE-2011-3408 csrss.exe系统进程是微软客户端、服务端运行时子系统，管理Windows图形相关任务。 Microsoft Windows CSRSS在实现上存在本地权限提升漏洞，成功利用后可允许本地攻击者以管理员权限执行任意代码。 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2003 Microsoft Windows 7 厂商补丁： Microsoft...

Microsoft Windows Time Component Remote Code Execution Vulnerability (2618451)

This host is missing a critical security update according to Microsoft Bulletin MS11-090. OpenVAS Vulnerability Test $Id: secpodms11-090.nasl 8724 2018-02-08 15:02:56Z cfischer $ Microsoft Windows Time Component Remote Code Execution Vulnerability 2618451 Authors: Sooraj KS Copyright: Copyright c...

Windows Client/Server Run-time Subsystem Privilege Elevation Vulnerability (2620712)

This host is missing an important security update according to Microsoft Bulletin MS11-097. OpenVAS Vulnerability Test $Id: secpodms11-097.nasl 5362 2017-02-20 12:46:39Z cfi $ Windows Client/Server Run-time Subsystem Privilege Elevation Vulnerability 2620712 Authors: Rachana Shetty Copyright:...

CVE-2011-4695

Unspecified vulnerability in Microsoft Windows 7 SP1, when Java is installed, allows local users to bypass Internet Explorer sandbox restrictions and gain privileges via unknown vectors, as demonstrated by the White Phosphorus wpiesandboxescape module for Immunity CANVAS. NOTE: as of 20111207, th...

Code injection

Unspecified vulnerability in Microsoft Windows 7 SP1, when Java is installed, allows local users to bypass Internet Explorer sandbox restrictions and gain privileges via unknown vectors, as demonstrated by the White Phosphorus wpiesandboxescape module for Immunity CANVAS. NOTE: as of 20111207, th...

CVE-2011-4695

Unspecified vulnerability in Microsoft Windows 7 SP1, when Java is installed, allows local users to bypass Internet Explorer sandbox restrictions and gain privileges via unknown vectors, as demonstrated by the White Phosphorus wpiesandboxescape module for Immunity CANVAS. NOTE: as of 20111207, th...

CVE-2011-4695

Technical details (affected product, specific vulnerability vectors, impact, and fixes) are not publicly available in the provided documents. Monitor for updates from official advisories and vendor CVE pages.

PT-2011-5041

Name of the Vulnerable Software and Affected Versions Microsoft Windows 7 SP1 Description The issue allows local users to bypass Internet Explorer sandbox restrictions and gain privileges via unknown vectors when Java is installed. This is demonstrated by the White Phosphorus wp ie sandbox escape...

CVE-2011-4695: Undefined Security Weakness

Unspecified vulnerability in Microsoft Windows 7 SP1, when Java is installed, allows local users to bypass Internet Explorer sandbox restrictions and gain privileges via unknown vectors, as demonstrated by the White Phosphorus wpiesandboxescape module for Immunity CANVAS. NOTE: as of 20111207, th...

PT-2011-4951

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 R2 and R2 SP1 Microsoft Windows 7 Gold and SP1 Description The issue allows local users to bypass intended access restrictions by exploiting a weakness in how AppLocker rules are enforced. This can be achieved via...

Windows Mail and Windows Meeting Space Remote Code Execution Vulnerability (2620704)

This host is missing an important security update according to Microsoft Bulletin MS11-085. OpenVAS Vulnerability Test $Id: secpodms11-085.nasl 5362 2017-02-20 12:46:39Z cfi $ Windows Mail and Windows Meeting Space Remote Code Execution Vulnerability 2620704 Authors: Antu Sanadi Copyright:...

PT-2011-3553 · Microsoft · Windows Meeting Space +6

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2008 R2 SP1 Microsoft Windows 7 Gold Microsoft Windows 7 SP1 Description: A vulnerability exists in the way Windows Mail a...

Microsoft Windows Client/Server Run-time Subsystem Privilege Escalation Vulnerability (2567680)

This host is missing a critical security update according to Microsoft Bulletin MS11-063. OpenVAS Vulnerability Test $Id: secpodms11-063.nasl 8724 2018-02-08 15:02:56Z cfischer $ Microsoft Windows Client/Server Run-time Subsystem Privilege Escalation Vulnerability 2567680 Authors: Antu Sanadi...

CVE-2011-1965: Undefined Security Weakness

Tcpip.sys in the TCP/IP stack in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 does not properly implement URL-based QoS, which allows remote attackers to cause a denial of service reboot via a crafted URL to a web server, aka "TCP/IP QOS Denial of Service Vulnerability."...