Microsoft Windows XP - Self-Executing Folder

Microsoft Windows XP - Self-Executing Folder source: https://www.securityfocus.com/bid/10363/info A vulnerability has been reported in Microsoft Windows XP that may cause malicious code to run in the context of the currently logged-in user. The flaw exists in Windows Explorer and may allow...

CVE-2004-0199: Undefined Security Weakness

Help and Support Center in Microsoft Windows XP and Windows Server 2003 SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code, as demonstrated using certain hcp:// URLs that access the DVD Upgrade capability dvdupgrd.htm...

Microsoft Windows HSC DVD Driver Upgrade Code Execution Vulnerability

Description A security vulnerability has been reported in Microsoft Windows XP and Server 2003 operating systems. This issue exists in the Help and Support Center HSC and is due to how the feature handles HCP invocation URIs for DVD driver upgrades. This issue could be exploited from a malicious...

CVE-2003-0907

Help and Support Center in Microsoft Windows XP SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code via quotation marks in an hcp:// URL, which are not quoted when constructing the argument list to HelpCtr.exe...

CVE-2004-0124: Undefined Security Weakness

The DCOM RPC interface for Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause network communications via an "alter context" call that contains additional data, aka the "Object Identity Vulnerability."...

CVE-2003-0807: Undefined Security Weakness

Buffer overflow in the COM Internet Services and in the RPC over HTTP Proxy components for Microsoft Windows NT Server 4.0, NT 4.0 Terminal Server Edition, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service via a crafted request...

CVE-2004-0116: Undefined Security Weakness

An Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows 2000, XP, and 2003 allows remote attackers to cause a denial of service memory consumption via an activation request with a large length field...

CVE-2003-0906: Undefined Security Weakness

Buffer overflow in the rendering for 1 Windows Metafile WMF or 2 Enhanced Metafile EMF image formats in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1 allows remote attackers to execute arbitrary code via a malformed WMF or EMF image...

CVE-2003-0907: Improper Neutralization of Argument Delimiters in a Command

Help and Support Center in Microsoft Windows XP SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code via quotation marks in an hcp:// URL, which are not quoted when constructing the argument list to HelpCtr.exe...

Microsoft Windows Help And Support Center URI Validation Code Execution Vulnerability

Description Microsoft has reported a vulnerability in the Help and Support Center that is related to how HCP URIs are validated. This issue could reportedly be exploited via a malicious web page or HTML e-mail to execute arbitrary code on a client system. The issue may permit an attacker to injec...

PSOProxy 0.91 - Remote Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/9706/info It has been reported that PSOProxy is prone to a remote buffer overflow vulnerability. The issue is due to the insufficient boundary checking. A malicious user may exploit this condition to potentially corrupt sensitive process memory in the...

EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption

Microsoft ASN.1 Library Length Overflow Heap Corruption Release Date: February 10, 2004 Date Reported: July 25, 2003 Severity: High Remote Code Execution Systems Affected: Microsoft Windows NT 4.0 all versions Microsoft Windows 2000 SP3 and earlier Microsoft Windows XP all versions Software...

MS Windows XP Workstation Service Remote Exploit (MS03-049)

漏洞描述：Microsoft DCE/RPC服务可以提供网络管理功能，这些功能提供管理用户帐户和网络资源管理的功能。部分网络管理功能在Windows目录下的"debug"子目录会生成调试日志文件。Microsoft Workstation服务在处理日志记录时缺少充分的边界缓冲区检查，远程攻击者可以利用这个漏洞提供超长参数触发缓冲区溢出，以SYSTEM权限在系统上执行任意指令。 日志功能中使用vsprintf在日志文件中生成字符串，日志文件名为"NetSetup.LOG"，其保存在Windows "debug"目录中。...

Microsoft Windows XP2000 - RPC DCOM Remote (MS03-026)

Microsoft Windows XP2000 - RPC DCOM Remote MS03-026 / DCOM RPC Overflow Discovered by LSD - Exploit Based on Xfocus's Code Written by H D Moore - Usage: ./dcom - Targets: - 0 Windows 2000 SP0 english - 1 Windows 2000 SP1 english - 2 Windows 2000 SP2 english - 3 Windows 2000 SP3 english - 4 Window...

CVE-2003-0352: Undefined Security Weakness

Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by the Blaster/MSblast/LovSAN and Nachi/Welchia worms...

CVE-2003-0345: Undefined Security Weakness

Buffer overflow in the SMB capability for Microsoft Windows XP, 2000, and NT allows remote attackers to cause a denial of service and possibly execute arbitrary code via an SMB packet that specifies a smaller buffer length than is required...

ST FTP Service v3.0: directory traversal

-----BEGIN PGP SIGNED MESSAGE----- Damage Hacking Group security advisory www.dhgroup.org Product: ST FTP Service v3.0 Authors: stsoft.newmail.ru Vulnerability: directory traversal Overview------------------------------------------------------ Easy russian ftp server for home network...

Microsoft Windows XP - explorer.exe Local Buffer Overflow

Microsoft Windows XP - explorer.exe Local Buffer Overflow include include include include include char shellcode= //download url and exec shellcode //doesn't have any hardcoded values //except the base address of the program //searches the import table for //LoadLibraryA, GetProcAddress and...

Microsoft Windows XP - 'explorer.exe' Local Buffer Overflow

include include include include include char shellcode= //download url and exec shellcode //doesn't have any hardcoded values //except the base address of the program //searches the import table for //LoadLibraryA, GetProcAddress and ExitProcess. //by .einstein., dH team...

sa2003-01.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NSFOCUS Security AdvisorySA2003-01 Topic: Microsoft Windows XP Redirector Local Buffer Overflow Vulnerability Release Date: 2003-3-27 CVE CAN ID: CAN-2003-0004 Affected system: =================== - - Microsoft Windows XP - - Microsoft Windows XP SP1...