CVE-2011-1248: Improper Input Validation

WINS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, R2, and R2 SP1 does not properly handle socket send exceptions, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted packets, related to unintended stack-frame values...

Microsoft Windows WINS Remote Code Execution Vulnerability (2524426)

This host is missing a critical security update according to Microsoft Bulletin MS11-035. OpenVAS Vulnerability Test $Id: secpodms11-035.nasl 7582 2017-10-26 11:56:51Z cfischer $ Microsoft Windows WINS Remote Code Execution Vulnerability 2524426 Authors: Sooraj KS Copyright: Copyright c 2011...

PT-2011-2986

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2003 SP2 Microsoft Windows Server 2008 Gold Microsoft Windows Server 2008 SP2 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2008 R2 SP1 Description The issue is related to the WINS service in Microsoft...

PHP 5.2.x<5.2.11,5.3.x<5.3.1 在microsoft windows_server_2008上popen_fdopen拒绝服务攻击漏洞

No description provided by source...

CVE-2011-1234

CVE-2011-1234 is a use-after-free vulnerability in the Windows kernel-mode driver component win32k.sys that enables local privilege escalation. The issue arises from incorrect driver object management in the kernel, affecting multiple Windows versions (XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, ...

Microsoft IE Developer Tools WMITools and Windows Messenger ActiveX Control Vulnerability (2508272)

This host is missing a critical security update according to Microsoft Bulletin MS11-027. OpenVAS Vulnerability Test $Id: secpodms11-027.nasl 8724 2018-02-08 15:02:56Z cfischer $ Microsoft IE Developer Tools WMITools and Windows Messenger ActiveX Control Vulnerability 2508272 Authors: Veerendra G...

CVE-2011-0028: Improper Control of Generation of Code

WordPad in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly parse fields in Word documents, which allows remote attackers to execute arbitrary code via a crafted .doc file, aka "WordPad Converter Parsing Vulnerability."...

CVE-2011-0660: Improper Input Validation

The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote SMB servers to execute arbitrary code via a crafted 1 SMBv1 or 2 SMBv2 response, aka "SMB Client Response...

CVE-2011-0661: Improper Input Validation

The SMB Server service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate fields in SMB requests, which allows remote attackers to execute arbitrary code via ...

Microsoft Windows Kernel 'Win32k.sys' (CVE-2011-1237) Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel due to a use-after-free condition. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete...

Microsoft GDI+ EMF Image Processing Integer Overflow Memory Corruption Vulnerability

Description Microsoft GDI+ is prone to a remote memory-corruption vulnerability that occurs when an application that uses the library tries to process a specially crafted Enhanced Metafile EMF image file. An attacker can exploit this issue to execute arbitrary code with the privileges of the...

Microsoft WordPad Text Converter (CVE-2011-0028) Remote Code Execution Vulnerability

Description Microsoft WordPad is prone to a remote code-execution vulnerability. An attacker could exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts may result in denial-of-service conditions. Technologies Affected Avaya...

PT-2011-2532

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through R2 SP1 Microsoft Windows 7 versions Gold through SP1...

Microsoft Windows Server 2003 - AD BROWSER ELECTION Remote Heap Overflow

Microsoft Windows Server 2003 - AD BROWSER ELECTION Remote Heap Overflow MS Windows Server 2003 AD Pre-Auth BROWSER ELECTION Remote Heap Overflow Release date: 2011-02-14 Author: Cupidon-3005 Greet: Winny Thomas, Laurent Gaffie, h07 Bug: Heap Overflow Remote Exploitability: Unlikely Local...

PT-2011-2040

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Description The issue concerns a weakness in the Kerberos implementation, specifically its support for weak hashing algorithms. This weakness can be...

CVE-2011-0043: Undefined Security Weakness

Kerberos in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 supports weak hashing algorithms, which allows local users to gain privileges by operating a service that sends crafted service tickets, as demonstrated by the CRC32 algorithm, aka "Kerberos Unkeyed Checksum Vulnerability."...

CVE-2011-0091: Improper Authentication

Kerberos in Microsoft Windows Server 2008 R2 and Windows 7 does not prevent a session from changing from strong encryption to DES encryption, which allows man-in-the-middle attackers to spoof network traffic and obtain sensitive information via a DES downgrade, aka "Kerberos Spoofing Vulnerabilit...

CVE-2011-0031: Exposure of Sensitive Information to an Unauthorized Actor

The 1 JScript 5.8 and 2 VBScript 5.8 scripting engines in Microsoft Windows Server 2008 R2 and Windows 7 do not properly load decoded scripts obtained from web pages, which allows remote attackers to trigger memory corruption and consequently obtain sensitive information via a crafted web site, a...

Microsoft Windows Kernel 'Win32k.sys' (CVE-2011-0086) Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers. Fail...

PT-2011-2027

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Description An issue exists in the way the Windows Client/Server Run-time Subsystem CSRSS terminates a process when a user logs off, allowing local users t...