Stack overflow

Stack-based buffer overflow in the CreateSizedDIBSECTION function in shimgvw.dll in the Windows Shell graphics processor aka graphics rendering engine in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary...

Memory corruption

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption Vulnerability."...

PT-2010-5195

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 Gold, SP2, and R2 Description The issue allows guest OS users to cause a denial of service, resulting in the host OS hanging, by sending a crafted encapsulated packet over the VMBus. Recommendations For Microsoft...

CVE-2010-3966: Undefined Security Weakness

Untrusted search path vulnerability in Microsoft Windows Server 2008 R2 and Windows 7, when BranchCache is supported, allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains an EML file, an RSS file, or a WPOST...

CVE-2010-3944: Improper Input Validation

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption Vulnerability."...

CVE-2010-3960: Improper Input Validation

Hyper-V in Microsoft Windows Server 2008 Gold, SP2, and R2 allows guest OS users to cause a denial of service host OS hang by sending a crafted encapsulated packet over the VMBus, aka "Hyper-V VMBus Vulnerability."...

CVE-2010-3961: Undefined Security Weakness

The Consent User Interface UI in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly handle an unspecified registry-key value, which allows local users with SeImpersonatePrivilege rights to gain privileges via a crafted application, aka...

PT-2010-4258

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2003 SP2 Microsoft Windows Server 2008 Gold, SP2, and R2 Description The issue concerns a denial of service NULL pointer dereference and reboot in the Netlogon RPC Service when the domain controller role is enabled. Th...

CVE-2010-2742: Undefined Security Weakness

The Netlogon RPC Service in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, and R2, when the domain controller role is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and reboot via a crafted RPC packet, aka "Netlogon RPC Null dereference DOS...

PT-2010-5201

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 R2 Windows 7 Description The issue allows local users to gain privileges via a Trojan horse DLL in the current working directory. This can be demonstrated by a directory that contains specific file types. A remote...

Microsoft Windows win32k.sys驱动"GreEnableEUDC()"权限提升漏洞

Microsoft Windows是微软发布的非常流行的操作系统。 Windows的win32k.sys驱动实现上存在漏洞，本地攻击者可能利用此漏洞提升权限或导致拒绝服务。 此漏洞源于驱动中的"GreEnableEUDC"函数，通过构造畸形的"SystemDefaultEUDCFont"注册表项，本地攻击者可以给"RtlQueryRegistryValues"函数的"QueryTable"参数提供恶意数据，导致"EntryContext" 缓冲区溢出。 Microsoft Windows XP Professional Microsoft Windows XP Home Edition...

Microsoft Foundation Classes Could Allow Remote Code Execution Vulnerability (2387149)

This host is missing a critical security update according to Microsoft Bulletin MS10-074. OpenVAS Vulnerability Test $Id: secpodms10-074.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Foundation Classes Could Allow Remote Code Execution Vulnerability 2387149 Authors: Madhuri D Copyright:...

CVE-2010-3223: Undefined Security Weakness

The user interface in Microsoft Cluster Service MSCS in Microsoft Windows Server 2008 R2 does not properly set administrative-share permissions for new cluster disks that are shared as part of a failover cluster, which allows remote attackers to read or modify data on these disks via requests to...

CVE-2010-3229: Improper Input Validation

The Secure Channel aka SChannel security package in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when IIS 7.x is used, does not properly process client certificates during SSL and TLS handshakes, which allows remote attackers to cause a denial of...

MPEG-4 Codec RCE Vulnerability (975558)

This host is missing a critical security update according to Microsoft Bulletin MS10-062. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows TCP/IP实现IppSortDestinationAddresses()函数整数溢出漏洞（MS10-058）

BUGTRAQ ID: 42254 CVE ID: CVE-2010-1893 Microsoft Windows是微软发布的非常流行的操作系统。 Windows系统中TCP/IP实现的IppSortDestinationAddresses函数在处理SOCKETADDRESSLIST 结构时存在整数溢出漏洞，本地用户可以通过调用WSAIoctl和使用SIOADDRESSLISTSORT IOCTL破坏内核内存，以系统级权限执行任意代码。 在IppSortDestinationAddresses函数的开始处存在以下伪代码： DestinationAddresses =...

CVE-2010-2551: Improper Input Validation

The SMB Server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate an internal variable in an SMB packet, which allows remote attackers to cause a denial of service system hang via a crafted 1 SMBv1 or 2 SMBv2 packet, aka "SMB...

CVE-2010-2552: Undefined Security Weakness

Stack consumption vulnerability in the SMB Server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to cause a denial of service system hang via a malformed SMBv2 compounded request, aka "SMB Stack Exhaustion Vulnerability."...

CVE-2010-2555: Undefined Security Weakness

The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly determine the length of strings in the registry, which allows local users to gain privileges or cause a denial of service memory corruption via vectors...

Microsoft Windows TCP/IP IPv6 Extension Header Remote Denial of Service Vulnerability

Description Microsoft Windows TCP/IP protocol implementation is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to render the affected system unresponsive, resulting in denial-of-service conditions. Technologies Affected Avaya Aura Conferencing 6.0 Standard...