Microsoft Windows Media Player Remote Code Execution Vulnerability (2378111))

This host is missing a critical security update according to Microsoft Bulletin MS10-082. OpenVAS Vulnerability Test $Id: secpodms10-082.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft Windows Media Player Remote Code Execution Vulnerability 2378111 Authors: Sooraj KS Copyright: Copyright c 2010...

CVE-2010-3229: Improper Input Validation

The Secure Channel aka SChannel security package in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when IIS 7.x is used, does not properly process client certificates during SSL and TLS handshakes, which allows remote attackers to cause a denial of...

CVE-2010-3225: Undefined Security Weakness

Use-after-free vulnerability in the Media Player Network Sharing Service in Microsoft Windows Vista SP1 and SP2 and Windows 7 allows remote attackers to execute arbitrary code via a crafted Real Time Streaming Protocol RTSP packet, aka "RTSP Use After Free Vulnerability."...

Microsoft Windows Media Player Remote Code Execution Vulnerability (2378111)

This host is missing a critical security update according to Microsoft Bulletin MS10-082. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows 7 rdp DLL Hijacking Exploit

Exploit for windows platform in category local exploits ============================================= Microsoft Windows 7 rdp DLL Hijacking Exploit ============================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /,...

Microsoft Windows 7 wab.exe DLL Hijacking Exploit

/ Exploit Title: Microsoft Windows 7 wab.exe DLL Hijacking Exploit wab32res.dll Date: 24/08/2010 Author: TheLeader Email: gsog2009 a7 hotmail d0t com Version: 6.1.7600 and prior Tested on: Windows 7 x86 6.1.7600 There's a chance this one works with vista. Instructions: Compile and rename to...

Microsoft Windows 7 wab.exe DLL Hijacking Exploit (wab32res.dll)

Exploit for windows platform in category local exploits ================================================================ Microsoft Windows 7 wab.exe DLL Hijacking Exploit wab32res.dll ================================================================ / Exploit Title: Microsoft Windows 7 wab.exe DLL...

Microsoft Windows 7 - 'wab32res.dll wab.exe' DLL Hijacking

/ Exploit Title: Microsoft Windows 7 wab.exe DLL Hijacking Exploit wab32res.dll Date: 24/08/2010 Author: TheLeader Email: gsog2009 a7 hotmail d0t com Version: 6.1.7600 and prior Tested on: Windows 7 x86 6.1.7600 There's a chance this one works with vista. Instructions: Compile and rename to...

MS Windows nt!SeObjectCreateSaclAccessBits() Missed ACE (MS10-047)

Exploit for windows platform in category dos / poc ================================================================== MS Windows nt!SeObjectCreateSaclAccessBits Missed ACE MS10-047 ================================================================== Microsoft Windows nt!SeObjectCreateSaclAccessBits...

Microsoft Windows TCP/IP实现IppSortDestinationAddresses()函数整数溢出漏洞（MS10-058）

BUGTRAQ ID: 42254 CVE ID: CVE-2010-1893 Microsoft Windows是微软发布的非常流行的操作系统。 Windows系统中TCP/IP实现的IppSortDestinationAddresses函数在处理SOCKETADDRESSLIST 结构时存在整数溢出漏洞，本地用户可以通过调用WSAIoctl和使用SIOADDRESSLISTSORT IOCTL破坏内核内存，以系统级权限执行任意代码。 在IppSortDestinationAddresses函数的开始处存在以下伪代码： DestinationAddresses =...

CVE-2010-2551: Improper Input Validation

The SMB Server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate an internal variable in an SMB packet, which allows remote attackers to cause a denial of service system hang via a crafted 1 SMBv1 or 2 SMBv2 packet, aka "SMB...

CVE-2010-2552: Undefined Security Weakness

Stack consumption vulnerability in the SMB Server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to cause a denial of service system hang via a malformed SMBv2 compounded request, aka "SMB Stack Exhaustion Vulnerability."...

CVE-2010-2555: Undefined Security Weakness

The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly determine the length of strings in the registry, which allows local users to gain privileges or cause a denial of service memory corruption via vectors...

Microsoft Windows TCP/IP IPv6 Extension Header Remote Denial of Service Vulnerability

Description Microsoft Windows TCP/IP protocol implementation is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to render the affected system unresponsive, resulting in denial-of-service conditions. Technologies Affected Avaya Aura Conferencing 6.0 Standard...

Corel VideoStudio Pro X3 Boundary Condition

/ DISCLAIMER THIS PROGRAM IS NOT INTENDED TO BE USED ON OTHER COMPUTERS AND IT IS DESTINED FOR PERSONAL RESEARCH ONLY!!!! The programs are provided as is without any guarantees or warranty. The author is not responsible for any damage or losses of any kind caused by the use or misuse of the...

Microsoft Windows OpenType Compact Font Format Driver Privilege Escalation Vulnerability (980218)

This host is missing an important security update according to Microsoft Bulletin MS10-037. OpenVAS Vulnerability Test $Id: secpodms10-037.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Windows OpenType Compact Font Format Driver Privilege Escalation Vulnerability 980218 Authors: Sooraj KS...

Microsoft Windows Kernel 'Win32k.sys' Window Creation Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel when a new window is created. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromis...

WebKit 532.5 Stack Exhaustion

loop; function loop setIntervaldoit,0; function doit var b=""; document.writeb; setIntervalloop,0;...

Microsoft Windows畸形图形文件处理本地拒绝服务漏洞（MS10-021）

BUGTRAQ ID: 39320 CVE ID: CVE-2010-0482 Microsoft Windows是微软发布的非常流行的操作系统。 Windows内核没有正确地验证畸形图形文件的重新定位部分。攻击者可以通过运行特制应用程序来利用该漏洞，导致系统变得没有响应并自动重新启动。 Microsoft Windows Server 2008 R2 Microsoft Windows 7 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS10-021）以及相应补丁: MS10-021：Vulnerabilities in Windo...

Microsoft Windows 7 / Server 2008 R2 SMB Client Infinite Loop

This module exploits a denial of service flaw in the Microsoft Windows SMB client on Windows 7 and Windows Server 2008 R2. To trigger this bug, run this module as a service and forces a vulnerable client to access the IP of this system as an SMB server. This can be accomplished by embedding a UNC...