Arbitrary file deletion

The ShellExecute API in Windows Shell in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly implement file associations, which allows local...

CVE-2014-0255: Improper Input Validation

Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 allow remote attackers to cause a denial of service iSCSI service outage by sending many crafted packets, aka "iSCSI Target Remote Denial of Service Vulnerability."...

CVE-2014-0256: Improper Input Validation

Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold allow remote attackers to cause a denial of service iSCSI service outage by sending many crafted packets, aka "iSCSI Target Remote Denial of Service Vulnerability."...

PT-2014-1012

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows Server 2012 Gold and R2 Description A denial of service issue exists in the Windows operating system related to the processing of iSCSI packets. Successful exploitation of this iss...

PT-2014-1183

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 SP2 Microsoft Windows Server 2008 R2 SP1 Microsoft Windows Server 2012 Gold Description The issue is related to errors in processing iSCSI connections, which can be exploited to cause a denial of service. This can...

Microsoft DirectShow Remote Code Execution Vulnerability (2929961)

This host is missing a critical security update according to Microsoft Bulletin MS14-013. OpenVAS Vulnerability Test $Id: gbms14-013.nasl 6715 2017-07-13 09:57:40Z teissa $ Microsoft DirectShow Remote Code Execution Vulnerability 2929961 Authors: Veerendra GG Copyright: Copyright C 2014 Greenbone...

Microsoft XML Core Services CVE-2014-0266 Information Disclosure Vulnerability

Description Microsoft XML Core Services MSXML is prone to an information-disclosure vulnerability. An attacker can leverage this issue to read files on the local file system or obtain sensitive information; this may aid in other attacks. Attackers can exploit this issue by enticing an unsuspectin...

Design/Logic Flaw

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 SP1 and Windows 7 SP1 on 64-bit platforms allows local users to gain privileges via a crafted application, aka "Win32k Use After Free Vulnerability."...

CVE-2013-3902: Undefined Security Weakness

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 SP1 and Windows 7 SP1 on 64-bit platforms allows local users to gain privileges via a crafted application, aka "Win32k Use After Free Vulnerability."...

EMC Data Protection Advisor DPA Illuminator - EJBInvokerServlet Remote Code Execution

EMC Data Protection Advisor DPA Illuminator - EJBInvokerServlet Remote Code Execution EMC Data Protection Advisor DPA Illuminator EJBInvokerServlet Remote Code Execution tested against: Microsoft Windows Server 2008 r2 sp1 EMC Data Protection Advisor 5.8 sp5 vulnerability: the "DPA Illuminator"...

PT-2013-4728

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 R2 SP1 Microsoft Windows 7 SP1 Description The issue is caused by improper handling of objects in memory by the Windows kernel, allowing local users to gain privileges via a crafted application. This could enable ...

PT-2013-4710

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Description The issue allows local users to gain privileges by operating an LRPC server that sends a crafted LPC port message. An elevation of privilege...

CVE-2013-6999: Undefined Security Weakness

The IsHandleEntrySecure function in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 SP2 does not properly validate the tagPROCESSINFO pW32Job field, which allows local users to cause a denial of service NULL pointer dereference and system crash via a crafted...

CVE-2013-5065: Undefined Security Weakness

NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in November 2013...

Microsoft Windows Digital Signatures Denial of Service Vulnerability (2868626)

This host is missing an important security update according to Microsoft Bulletin MS13-095. OpenVAS Vulnerability Test $Id: secpodms13-095.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows Digital Signatures Denial of Service Vulnerability 2868626 Authors: Shashi Kiran N Copyright: Copyright...

MS Windows Ancillary Function Driver Information Disclosure Vulnerability (2875783)

This host is missing an important security update according to Microsoft Bulletin MS13-093 OpenVAS Vulnerability Test $Id: secpodms13-093.nasl 32358 2013-11-11 09:00:42Z nov$ MS Windows Ancillary Function Driver Information Disclosure Vulnerability 2875783 Authors: Shakeel Copyright: Copyright c...

Microsoft Windows Ancillary Function Driver CVE-2013-3887 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. An attacker can leverage this issue to disclose kernel memory and obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows 7 for x64-based Systems SP1 Microsoft...

CVE-2013-6230

The Winsock WSAIoctl API in Microsoft Windows Server 2008, as used in ISC BIND 9.6-ESV before 9.6-ESV-R10-P1, 9.8 before 9.8.6-P1, 9.9 before 9.9.4-P1, 9.9.3-S1, 9.9.4-S1, and other products, does not properly support the SIOGETINTERFACELIST command for netmask 255.255.255.255, which allows remot...

Command injection

The Winsock WSAIoctl API in Microsoft Windows Server 2008, as used in ISC BIND 9.6-ESV before 9.6-ESV-R10-P1, 9.8 before 9.8.6-P1, 9.9 before 9.9.4-P1, 9.9.3-S1, 9.9.4-S1, and other products, does not properly support the SIOGETINTERFACELIST command for netmask 255.255.255.255, which allows remot...

CVE-2013-6230

The Winsock WSAIoctl API in Microsoft Windows Server 2008, as used in ISC BIND 9.6-ESV before 9.6-ESV-R10-P1, 9.8 before 9.8.6-P1, 9.9 before 9.9.4-P1, 9.9.3-S1, 9.9.4-S1, and other products, does not properly support the SIOGETINTERFACELIST command for netmask 255.255.255.255, which allows remot...