CVE-2002-2105: Undefined Security Weakness

Microsoft Windows XP allows local users to prevent the system from booting via a corrupt explorer.exe.manifest file...

CVE-2004-2289

CVE-2004-2289 is the Windows XP Desktop.ini/ShellClassInfo variant that leads to arbitrary code execution via a .ShellClassInfo CLSID pointing to an executable. Connected docs show a related Windows Shell remote-code-execution vulnerability (CVE-2006-0012) in Windows Explorer triggered by COM obj...

CVE-2004-2290

Microsoft Windows XP Explorer allows attackers to execute arbitrary code via a HTML and script in a self-executing folder that references an executable file within the folder, which is automatically executed when a user accesses the folder...

CVE-2004-2289: Undefined Security Weakness

Microsoft Windows XP Explorer allows local users to execute arbitrary code via a system folder with a Desktop.ini file containing a .ShellClassInfo specifier with a CLSID value that is associated with an executable file...

CVE-2004-2290: Undefined Security Weakness

Microsoft Windows XP Explorer allows attackers to execute arbitrary code via a HTML and script in a self-executing folder that references an executable file within the folder, which is automatically executed when a user accesses the folder...

CVE-2004-2176: Undefined Security Weakness

The Internet Connection Firewall ICF in Microsoft Windows XP SP2 is configured by default to trust sessmgr.exe, which allows local users to use sessmgr.exe to create a local listening port that bypasses the ICF access controls...

[NT] Microsoft Windows XP RPC Cache Memory Leak Vulnerabiliry

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVE-2002-1932: Undefined Security Weakness

Microsoft Windows XP and Windows 2000, when configured to send administrative alerts and the "Do not overwrite events clear log manually" option is set, does not notify the administrator when the log reaches its maximum size, which allows local users and remote attackers to avoid detection...

CVE-2002-1670: Undefined Security Weakness

Microsoft Windows XP Professional upgrade edition overwrites previously installed patches for Internet Explorer 6.0, leaving Internet Explorer unpatched...

CVE-2005-1207: Undefined Security Weakness

Buffer overflow in the Web Client service in Microsoft Windows XP and Windows Server 2003 allows remote authenticated users to execute arbitrary code via a crafted WebDAV request containing special parameters...

CVE-2005-1206: Undefined Security Weakness

Buffer overflow in the Server Message Block SMB functionality for Microsoft Windows 2000, XP SP1 and SP2, and Server 2003 and SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka the "Server Message Block Vulnerability."...

CVE-2000-1218: Origin Validation Error

The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts that it did not query, which allows remote attackers to poison the DNS cache...

CVE-2005-0048: Undefined Security Weakness

Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Server 2003, and older operating systems allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IP packets with malformed options, aka the "IP Validation Vulnerability."...

CVE-2005-0059: Undefined Security Weakness

Buffer overflow in the Message Queuing component of Microsoft Windows 2000 and Windows XP SP1 allows remote attackers to execute arbitrary code via a crafted message...

CVE-2005-0060: Undefined Security Weakness

Buffer overflow in the font processing component of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application...

CVE-2005-0852: Undefined Security Weakness

Microsoft Windows XP SP1 allows local users to cause a denial of service system crash via an empty datagram to a raw IP over IP socket IP protocol 4, as originally demonstrated using code in Python 2.3...

Non-administrators can shut down Windows XP SP1 thru TSShutdn.exe (889323)

The version of Microsoft Windows XP SP1 on the remote host is missing security update KB889323. A non-administrative user can remotely shut down the remote host by using the TSShutdn.exe command. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17607;...

Microsoft Windows XP - 'TSShutdn.exe' Remote Denial of Service

source: https://www.securityfocus.com/bid/12889/info Microsoft Windows XP is prone to a remote denial of service vulnerability. This issue can allow a remote unauthorized user to shutdown an affected computer. A remote attacker uses the TSShutdn.exe command to restart or shutdown a computer. It...

Microsoft Windows XP - TSShutdn.exe Remote Denial of Service

Microsoft Windows XP - TSShutdn.exe Remote Denial of Service source: https://www.securityfocus.com/bid/12889/info Microsoft Windows XP is prone to a remote denial of service vulnerability. This issue can allow a remote unauthorized user to shutdown an affected computer. A remote attacker uses the...

Microsoft Windows XP - Local Denial of Service

source: https://www.securityfocus.com/bid/12870/info It is reported that Microsoft Windows XP Service Pack 1 is prone to a local denial of service vulnerability. The issue is reported to manifest when a raw IP over IP socket is created and data is transferred over the newly created socket. It is...