CVE-2010-3227

Stack-based buffer overflow in the UpdateFrameTitleForDocument method in the CFrameWnd class in mfc42.dll in the Microsoft Foundation Class MFC Library in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7...

Stack overflow

Stack-based buffer overflow in the UpdateFrameTitleForDocument method in the CFrameWnd class in mfc42.dll in the Microsoft Foundation Class MFC Library in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7...

CVE-2010-3227

CVE-2010-3227 describes a remote code execution vulnerability in the Microsoft Foundation Class (MFC) library: a stack-based buffer overflow in UpdateFrameTitleForDocument() within CFrameWnd of mfc42.dll (and affected MFC components across Windows XP SP3, Server 2003, Vista, Server 2008, and Wind...

Holoo Insecure Library Loading Vulnerability

A vulnerability has been discovered in Holoo, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to the application loading libraries in an insecure manner. Libraries list called is as follows: • idapi32.dll • idr20009.dll • odbc32.dll This c...

Sahar Money Manager Insecure Library Loading Vulnerability

A vulnerability has been discovered in Sahar Money Manager, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to the application loading libraries in an insecure manner. Libraries list called is as follows: unicows.dll This can be exploited ...

Brilliant Accounting System (59) Insecure Library Loading Vulnerability

A vulnerability has been discovered in Brilliant Accounting System 59, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to the application loading libraries in an insecure manner. Libraries list called is as follows: • idapi32.dll •...

Rafe 7 Insecure Library Loading Vulnerability

A vulnerability has been discovered in Rafe 7, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to the application loading libraries in an insecure manner. Libraries list called is as follows: • idapi32.dll • idbat32.dll • idr20009.dll •...

Accounting Pro 2003 Insecure Library Loading Vulnerability

A vulnerability has been discovered in Accounting Pro 2003, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to the application loading libraries in an insecure manner. Libraries list loaded is as follows: • idapi32.dll • idr20009.dll •...

CVE-2010-3222

Stack-based buffer overflow in the Remote Procedure Call Subsystem RPCSS in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted LPC message that requests an LRPC connection from an LPC server to a client, aka "LPC Message Buffer Overrun...

CVE-2010-2740

The OpenType Font OTF format driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly perform memory allocation during font parsing, which allows local users to gain privileges via a crafted application, aka "OpenType Font Parsing Vulnerability."...

Integer overflow

Integer overflow in the Embedded OpenType EOT Font Engine in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to execute arbitrary code via a crafted table in an embedded font, aka...

Heap overflow

Heap-based buffer overflow in Comctl32.dll aka the common control library in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when a third-party SVG viewer is used, allows remote attackers to execute...

Windows Local Procedure Call Privilege Elevation Vulnerability (2360937)

This host is missing a critical security update according to Microsoft Bulletin MS10-084. OpenVAS Vulnerability Test $Id: secpodms10-084.nasl 5361 2017-02-20 11:57:13Z cfi $ Windows Local Procedure Call Privilege Elevation Vulnerability 2360937 Authors: Madhuri D Copyright c 2010 SecPod,...

OpenType Font (OTF) Format Driver Privilege Elevation Vulnerabilities (2279986)

This host is missing a critical security update according to Microsoft Bulletin MS10-078. OpenVAS Vulnerability Test $Id: secpodms10-078.nasl 5361 2017-02-20 11:57:13Z cfi $ OpenType Font OTF Format Driver Privilege Elevation Vulnerabilities 2279986 Authors: Madhuri D Copyright c 2010 SecPod,...

Microsoft Foundation Classes Could Allow Remote Code Execution Vulnerability (2387149)

This host is missing a critical security update according to Microsoft Bulletin MS10-074. OpenVAS Vulnerability Test $Id: secpodms10-074.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Foundation Classes Could Allow Remote Code Execution Vulnerability 2387149 Authors: Madhuri D Copyright:...

Microsoft Foundation Classes Could Allow Remote Code Execution Vulnerability (2387149)

This host is missing a critical security update according to Microsoft Bulletin MS10-074. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2010-1891

The Client/Server Runtime Subsystem aka CSRSS in the Win32 subsystem in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2, when a Chinese, Japanese, or Korean locale is enabled, does not properly allocate memory for transactions, which allows local users to gain privileges via a crafted...

Code injection

The MPEG-4 codec in the Windows Media codecs in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 does not properly handle crafted media content with MPEG-4 video encoding, which allows remote attackers to execute arbitrary code via a file in an...

Vulnerability in Remote Procedure Call Could Allow Remote Code Execution (982802)

This host is missing a critical security update according to Microsoft Bulletin MS10-066. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Vulnerability in Remote Procedure Call Could Allow Remote Code Execution (982802)

This host is missing a critical security update according to Microsoft Bulletin MS10-066. OpenVAS Vulnerability Test $Id: secpodms10-066.nasl 5361 2017-02-20 11:57:13Z cfi $ Vulnerability in Remote Procedure Call Could Allow Remote Code Execution 982802 Authors: Madhuri D Copyright c 2010 SecPod,...