bsod in win32k.sys(Multi-User Win32 Driver)

Hello vuln, OS: Microsoft Windows XP, SP2, other not tested VULNERABILITY: file : win32k.sys version : 5.1.2600.2180 xpspsp2rtm.040803-2158 description : Multi-User Win32 Driver author : 6star aka mg BUG DESCRIPTION: When you try HOW TO CHECK: 1. Click on Desktop to call Context Menu. 2. Then...

Microsoft Windows XP SP2 - rdpwd.sys Remote Kernel Denial of Service

Microsoft Windows XP SP2 - rdpwd.sys Remote Kernel Denial of Service // get SPIKE here: http://www.immunitysec.com/resources-freesoftware.shtml /str0ke // // Windows XP SP2 'rdpwd.sys' Remote Kernel DoS // // Discovered by: // Tom Ferris // tommyatsecurity-protocolsdotcom // // Tested on: //...

CVE-2002-2105

Microsoft Windows XP allows local users to prevent the system from booting via a corrupt explorer.exe.manifest file...

CVE-2004-2290

Microsoft Windows XP Explorer allows attackers to execute arbitrary code via a HTML and script in a self-executing folder that references an executable file within the folder, which is automatically executed when a user accesses the folder...

CVE-2004-2289

CVE-2004-2289 is the Windows XP Desktop.ini/ShellClassInfo variant that leads to arbitrary code execution via a .ShellClassInfo CLSID pointing to an executable. Connected docs show a related Windows Shell remote-code-execution vulnerability (CVE-2006-0012) in Windows Explorer triggered by COM obj...

[NT] Microsoft Windows XP RPC Cache Memory Leak Vulnerabiliry

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Non-administrators can shut down Windows XP SP1 thru TSShutdn.exe (889323)

The version of Microsoft Windows XP SP1 on the remote host is missing security update KB889323. A non-administrative user can remotely shut down the remote host by using the TSShutdn.exe command. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17607;...

Microsoft Windows XP - TSShutdn.exe Remote Denial of Service

Microsoft Windows XP - TSShutdn.exe Remote Denial of Service source: https://www.securityfocus.com/bid/12889/info Microsoft Windows XP is prone to a remote denial of service vulnerability. This issue can allow a remote unauthorized user to shutdown an affected computer. A remote attacker uses the...

Microsoft Windows XP - 'TSShutdn.exe' Remote Denial of Service

source: https://www.securityfocus.com/bid/12889/info Microsoft Windows XP is prone to a remote denial of service vulnerability. This issue can allow a remote unauthorized user to shutdown an affected computer. A remote attacker uses the TSShutdn.exe command to restart or shutdown a computer. It...

Microsoft Windows XP - Local Denial of Service

source: https://www.securityfocus.com/bid/12870/info It is reported that Microsoft Windows XP Service Pack 1 is prone to a local denial of service vulnerability. The issue is reported to manifest when a raw IP over IP socket is created and data is transferred over the newly created socket. It is...

Microsoft Windows XP SP2 non-executable memory (DEP) protection bypass

By using small memory regisouns it's possible to place executable code into non-executable memory regions...

ieBarBypass.txt

Application: Internet Explorer Vendors: http://www.microsoft.com Versions: 6.0.2900.2180.xpspsp2rtm.040803-2158 Patched With: SP2; Platforms: Windows Bug: Remote File Download Information Bar Bypass Exploitation: Remote with browser Date: 13 Jan 2005 Author: Rafel Ivgi, The-Insider e-mail:...

CVE-2004-0897

The Indexing Service for Microsoft Windows XP and Server 2003 does not properly validate the length of a message, which allows remote attackers to execute arbitrary code via a buffer overflow attack...

[Full-Disclosure] Remote code execution with parameters without user interaction, even with XP SP2

PoC called CMDExe: http://www.freewebs.com/shreddersub7/htm.htm Discussion: http://www.freewebs.com/shreddersub7/expl-discuss.htm ------------------Which systems are vulnerable?-------- Any system running any Microsoft Windows XP edition with Internet Explorer 6 or higher, even with SP2 applied...

CVE-2004-2290

Microsoft Windows XP Explorer allows attackers to execute arbitrary code via a HTML and script in a self-executing folder that references an executable file within the folder, which is automatically executed when a user accesses the folder...

CVE-2004-2289

Microsoft Windows XP Explorer allows local users to execute arbitrary code via a system folder with a Desktop.ini file containing a .ShellClassInfo specifier with a CLSID value that is associated with an executable file...

Microsoft Internet Explorer (Windows XP SP2) - HTML Help Control Local Zone Bypass

Microsoft Internet Explorer Windows XP SP2 - HTML Help Control Local Zone Bypass // sp2rc.htm // localpage.HHClick; setTimeout"inject.HHClick",100; // writehta.txt // Dim Conn, rs Set Conn = CreateObject"ADODB.Connection" Conn.Open "Driver=Microsoft Text Driver .txt; .csv;" & "Dbq=http://server;"...

MSIE DHTML Edit Control Cross Site Scripting Vulnerability

Note: This vulnerability as well as many more can be seen at http://freehost07.websamba.com/greyhats/ MSIE DHTML Edit Control Cross Site Scripting Vulnerability Tested IEXPLORE.EXE file version 6.0.2900.2180 MSHTML.DLL file version 6.00.2800.1400 Microsoft Windows XP Home SP2 Discussion I...

CVE-2004-0840

The SMTP Simple Mail Transfer Protocol component of Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows Server 2003 64-bit Edition, and the Exchange Routing Engine component of Exchange Server 2003, allows remote attackers to execute arbitrary code via a malicious DNS response messa...

Presentation: Bypassing client application protection techniques with notepad

Topic: Bypassing client application protection techniques Category: Protection bypass Affected products: CheckPoint VPN-1TM & FireWall-1R NG with Application Intelligence R55 HFA 9 Microsoft Windows XP SP2 Agnitum Outpost Pro 2.1, 2.5 Tiny Firewall Pro v6.0.100 ZoneAlarm Pro with Web Filtering...