CVE-2007-0084

Buffer overflow in the Windows NT Message Compiler MC 1.00.5239 on Microsoft Windows XP allows local users to gain privileges via a long MC-filename. NOTE: this issue has been disputed by a reliable third party who states that the compiler is not a privileged program, so privilege boundaries cann...

CVE-2007-0084

Buffer overflow in the Windows NT Message Compiler MC 1.00.5239 on Microsoft Windows XP allows local users to gain privileges via a long MC-filename. NOTE: this issue has been disputed by a reliable third party who states that the compiler is not a privileged program, so privilege boundaries cann...

CVE-2007-0084: Undefined Security Weakness

Buffer overflow in the Windows NT Message Compiler MC 1.00.5239 on Microsoft Windows XP allows local users to gain privileges via a long MC-filename. NOTE: this issue has been disputed by a reliable third party who states that the compiler is not a privileged program, so privilege boundaries cann...

CVE-2006-6723: Undefined Security Weakness

The Workstation service in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to cause a denial of service memory consumption via a large maxlen value in an NetrWkstaUserEnum RPC request...

CVE-2006-6601

Windows Media Player 10.00.00.4036 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of service via a .MID MIDI file with a malformed header chunk without any track chunks, possibly involving 1 number of tracks of 2 time division fields that are set to 0...

CVE-2006-6601

Windows Media Player 10.00.00.4036 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of service via a .MID MIDI file with a malformed header chunk without any track chunks, possibly involving 1 number of tracks of 2 time division fields that are set to 0...

CVE-2006-6579

Microsoft Windows XP has weak permissions FILEWRITEDATA and FILEREADDATA for Everyone for %WINDIR%\pchealth\ERRORREP\QHEADLES, which allows local users to write and read files in this folder, as demonstrated by an ASP shell that has write access by IWAMmachine and read access by IUSRMachine...

CVE-2006-6602: Undefined Security Weakness

explorer.exe in Windows Explorer 6.00.2900.2180 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of service via a crafted WMV file...

CVE-2006-6579: Undefined Security Weakness

Microsoft Windows XP has weak permissions FILEWRITEDATA and FILEREADDATA for Everyone for %WINDIR%\pchealth\ERRORREP\QHEADLES, which allows local users to write and read files in this folder, as demonstrated by an ASP shell that has write access by IWAMmachine and read access by IUSRMachine...

Microsoft Windows Media ASF和ASX解析缓冲区溢出漏洞

Windows Media Player是Microsoft开发的流行的媒体播放程序。 Windows Media Format Runtime处理特殊的ASF和ASX文件存在问题，远程攻击者可利用漏洞以应用程序进程权限执行任意指令。 攻击者可以构建包含特殊Windows Media Player的内容恶意页面，诱使用户访问，可以以应用程序进程权限执行任意指令。目前没有详细漏洞细节提供。 Microsoft Windows Media Format 7.1 through 9.5 Series Runtime -Microsoft Windows 2000 Service Pack 4...

CVE-2006-5585: Undefined Security Weakness

The Client-Server Run-time Subsystem in Microsoft Windows XP SP2 and Server 2003 allows local users to gain privileges via a crafted file manifest within an application, aka "File Manifest Corruption Vulnerability."...

Microsoft Internet Explorer IMSKDIC.DLL拒绝服务漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer实例化IMSKDIC.DLL COM对象存在问题，远程攻击者可以利用漏洞进行内存破坏攻击，可能以进程权限执行任意指令。 当Microsoft Internet Explorer尝试以ActiveX控件实例化IMSKDIC.DLLMicrosoft IME COM对象，可能破坏系统内存造成拒绝服务，可能导致任意代码执行。 Microsoft Internet Explorer 6.0 SP2 Microsoft Internet Explorer 6.0...

CVE-2006-4691

Stack-based buffer overflow in the NetpManageIPCConnect function in the Workstation service wkssvc.dll in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to execute arbitrary code via NetrJoinDomain2 RPC messages with a long hostname...

CVE-2006-4688: Undefined Security Weakness

Buffer overflow in Client Service for NetWare CSNW in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via crafted messages, aka "Client Service for NetWare Memory Corruption Vulnerability."...

CVE-2006-4689: Undefined Security Weakness

Unspecified vulnerability in the driver for the Client Service for NetWare CSNW in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to cause a denial of service hang and reboot via has unknown attack vectors, aka "NetWare Driver Denial of Service Vulnerability...

CVE-2006-4691: Undefined Security Weakness

Stack-based buffer overflow in the NetpManageIPCConnect function in the Workstation service wkssvc.dll in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to execute arbitrary code via NetrJoinDomain2 RPC messages with a long hostname...

Microsoft Internet Explorer CreateTextRange远程代码执行漏洞(MS06-013)

Microsoft Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer的createTextRange函数实现上存在漏洞，远程攻击者可能利用此漏洞在客户机器上执行任意指令。 Internet Explorer使用createTextRange时在某些环境下可能导致无需的列表指针引用，这样在试图调用引用的32位地址时就会出现错误，如下所示： 0x7D53C15D MOV ECX, DWORD PTR DS:EDI .. 0x7D53C166 CALL DWORD PTR ECX...

Microsoft Internet Explorer远程HTA执行漏洞（MS06-013）

Microsoft Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer处理HTA的方式存在漏洞，远程攻击者可能利用此漏洞在客户机器上执行任意代码。 Internet Explorer中初始化HTML应用（HTA）的方式可能绕过安全控制，允许执行HTA而不在Internet Explorer中显示正常的安全对话框。攻击者可以通过创建恶意的Web页面来利用这个漏洞。如果用户访问了该页面，就会导致执行任意代码。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer...

Microsoft Internet Explorer无效HTML解析代码执行漏洞（MS06-013）

Microsoft Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer处理特制的无效HTML时存在漏洞。攻击者可以创建恶意的Web页面，如果用户访问了该页面的话就会导致内存破坏。成功利用这个漏洞的攻击者可以完全控制受影响的系统。 Microsoft Internet Explorer 5.0 Microsoft Internet Explorer 6.0 - Microsoft Windows XP SP2 - Microsoft Windows Server 2003 SP1...

MS Windows XP Task Scheduler (.job) Universal Exploit (MS04-022)

No description provided by source. / HOD-ms04022-task-expl.c: MS04-022 Microsoft Windows XP Task Scheduler .job Universal Exploit Exploit version 0.1 coded by .:: houseofdabus ::. at inbox dot ru ------------------------------------------------------------------- Tested on: - Internet Explorer 6....