CVE-2009-4210: Improper Control of Generation of Code

The Indeo codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via crafted media content...

Remote code execution

Active Directory Federation Services ADFS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly validate headers in HTTP requests, which allows remote authenticated users to execute arbitrary code via a crafted request to an IIS web server, aka "Remote Code Execution...

CVE-2009-2508

The single sign-on implementation in Active Directory Federation Services ADFS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly remove credentials at the end of a network session, which allows physically proximate attackers to obtain the credentials of a previou...

CVE-2009-2509: Improper Input Validation

Active Directory Federation Services ADFS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly validate headers in HTTP requests, which allows remote authenticated users to execute arbitrary code via a crafted request to an IIS web server, aka "Remote Code Execution...

CVE-2009-2508: Undefined Security Weakness

The single sign-on implementation in Active Directory Federation Services ADFS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly remove credentials at the end of a network session, which allows physically proximate attackers to obtain the credentials of a previou...

CVE-2009-3675: Undefined Security Weakness

LSASS.exe in the Local Security Authority Subsystem Service LSASS in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote authenticated users to cause a denial of service CPU consumption via a malformed ISAKMP request over IPsec, aka "Local Security Authority Subsystem...

CVE-2009-3676: Undefined Security Weakness

The SMB client in the kernel in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to cause a denial of service infinite loop and system hang via a 1 SMBv1 or 2 SMBv2 response packet that contains a an incorrect length value in a NetBIOS heade...

Microsoft Windows Kernel GDI Data Validation Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. This issue affects the Graphics Device Interface GDI. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result ...

Microsoft Windows Kernel NULL Pointer Dereference Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. This issue stems from a NULL-pointer dereference. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in t...

CVE-2009-2507: Undefined Security Weakness

A certain ActiveX control in the Indexing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly process URLs, which allows remote attackers to execute arbitrary programs via unspecified vectors that cause a "vulnerable binary" to load and run, aka "Memory...

CVE-2009-2517: Undefined Security Weakness

The kernel in Microsoft Windows Server 2003 SP2 does not properly handle unspecified exceptions when an error condition occurs, which allows local users to cause a denial of service reboot via a crafted application, aka "Windows Kernel Exception Handler Vulnerability."...

CVE-2009-1132: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the Wireless LAN AutoConfig Service aka Wlansvc in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a malformed wireless frame, aka "Wireless Frame Parsing Remote Code Execution Vulnerabilit...

CVE-2009-1925: Improper Control of Generation of Code

The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly manage state information, which allows remote attackers to execute arbitrary code by sending packets to a listening service, and thereby triggering misinterpretation of an...

Microsoft Windows Server 2003 OpenType Font Engine DoS Vulnerability

This host is running Windows Server 2003 operating system and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbmswin2k3dosvulnsep09.nasl 5363 2017-02-20 13:07:22Z cfi $ Microsoft Windows Server 2003 OpenType Font Engine DoS Vulnerability Authors: Antu Sanadi Copyrigh...

CVE-2009-3020

win32k.sys in Microsoft Windows Server 2003 SP2 allows remote attackers to cause a denial of service system crash by referencing a crafted .eot file in the src descriptor of an @font-face Cascading Style Sheets CSS rule in an HTML document, possibly related to the Embedded OpenType EOT Font Engin...

CVE-2009-3020: Undefined Security Weakness

win32k.sys in Microsoft Windows Server 2003 SP2 allows remote attackers to cause a denial of service system crash by referencing a crafted .eot file in the src descriptor of an @font-face Cascading Style Sheets CSS rule in an HTML document, possibly related to the Embedded OpenType EOT Font Engin...

Microsoft Windows AVI Media File Parsing Vulnerabilities (971557)

This host is missing a critical security update according to Microsoft Bulletin MS09-038. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2009-1923: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the Windows Internet Name Service WINS component for Microsoft Windows 2000 SP4 and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted WINS replication packet that triggers an incorrect buffer-length calculation, aka "WINS Heap Overflow...

CVE-2009-1922: Undefined Security Weakness

The Message Queuing aka MSMQ service for Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP2, and Vista Gold does not properly validate unspecified IOCTL request data from user mode before passing this data to kernel mode, which allows local users to gain privileges via a crafted request, aka "MS...

Microsoft Windows Server 2003 - .EOT Blue Screen of Death Crash

Microsoft Windows Server 2003 - .EOT Blue Screen of Death Crash MS Windows 2003 EOT File BSOD Crash Exploit author: webDEViL https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/9417.zip 2009-wwbsod.zip milw0rm.com 2009-08-11...