CVE-2017-0083

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0072,...

[SECURITY] Fedora 25 Update: icoutils-0.31.2-1.fc25

The icoutils are a set of programs for extracting and converting images in Microsoft Windows icon and cursor files. These files usually have the extension .ico or .cur, but they can also be embedded in executables or libraries...

[SECURITY] Fedora 24 Update: icoutils-0.31.2-1.fc24

The icoutils are a set of programs for extracting and converting images in Microsoft Windows icon and cursor files. These files usually have the extension .ico or .cur, but they can also be embedded in executables or libraries...

Microsoft Windows Graphics Component Local Information Disclosure Vulnerability

Microsoft Windows is an operating system developed by the American company Microsoft. A local information disclosure vulnerability exists in Microsoft Windows Graphics Component. An attacker could exploit this vulnerability to obtain sensitive information...

Microsoft Windows - LoadUvsTable() Heap-based Buffer Overflow Vulnerability

Exploit for windows platform in category dos / poc Date: 15-03-2017 Author: Hossein Lotfi https://twitter.com/hosselot CVE: CVE-2016-7274 1. Description An integer overflow error within the "LoadUvsTable" function of usp10.dll can be exploited to cause a heap-based buffer overflow. Full analysis ...

Microsoft Windows Graphics Local Mobilization Vulnerability (CNVD-2017-03621)

Microsoft Windows is an operating system developed by the American company Microsoft. A local elevation vulnerability exists in Microsoft Windows Graphics. An attacker could exploit this vulnerability to execute arbitrary code with kernel privileges...

Microsoft Windows Graphics Local Elevation of Privilege Vulnerability (CNVD-2017-03705)

Microsoft Windows is the popular computer operating system. An elevation of privilege vulnerability exists in the Windows Graphics Device Interface GDI Handling Memory Object, which can be exploited by an attacker to execute arbitrary code in kernel mode...

Microsoft Windows Memory Corruption Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A memory corruption vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to execute arbitrary code...

Microsoft Windows - COM Session Moniker Privilege Escalation (MS17-012)

Microsoft Windows - COM Session Moniker Privilege Escalation MS17-012 / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1021 Windows: COM Session Moniker EoP Platform: Tested on Windows 10 14393, Server 2012 R2 Class: Elevation of Privilege Summary: When activating an object usi...

Microsoft Windows - LoadUvsTable() Heap Buffer Overflow

Microsoft Windows - LoadUvsTable Heap Buffer Overflow Date: 15-03-2017 Author: Hossein Lotfi https://twitter.com/hosselot CVE: CVE-2016-7274 1. Description An integer overflow error within the "LoadUvsTable" function of usp10.dll can be exploited to cause a heap-based buffer overflow. Full analys...

MS17-021: Security Update for Windows DirectShow (4010318)

The remote Windows host is missing a security update. It is, therefore, affected by an information disclosure vulnerability in Windows DirectShow due to improper handling of objects in memory. An unauthenticated, remote attacker can exploit this, by convincing a user to visit a website containing...

Microsoft Windows Kernel Privilege Escalation Vulnerability (4013081)

This host is missing an important security update according to Microsoft Bulletin MS17-017 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (4013083)

This host is missing an important security update according to Microsoft Bulletin MS17-018. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows - 'LoadUvsTable()' Heap Buffer Overflow

Date: 15-03-2017 Author: Hossein Lotfi https://twitter.com/hosselot CVE: CVE-2016-7274 1. Description An integer overflow error within the "LoadUvsTable" function of usp10.dll can be exploited to cause a heap-based buffer overflow. Full analysis is available at:...

Microsoft Windows LoadUvsTable() Buffer Overflow

Date: 15-03-2017 Author: Hossein Lotfi https://twitter.com/hosselot CVE: CVE-2016-7274 1. Description An integer overflow error within the "LoadUvsTable" function of usp10.dll can be exploited to cause a heap-based buffer overflow. Full analysis is available at:...

Microsoft Windows Hyper-V Multiple Vulnerabilities (4013082)

This host is missing a critical security update according to Microsoft Bulletin MS17-008. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Graphics Component Multiple Vulnerabilities (4013075)

This host is missing a critical security update according to Microsoft Bulletin MS17-013. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows XML Core Services Information Disclosure Vulnerability (4010321)

This host is missing an important security update according to Microsoft Bulletin MS17-022. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft updates fail: 80071a91, 80070BC9, 80079c59, 8007000e, or prompt for restart forever

Microsoft Windows OS update fails with an error and requests a desktop reboot on all subsequent attempts to check for updates. The most common update failure codes are 0x80071a91, 0x80070BC9, 0x80079c59,0x8007000e...

Microsoft Windows PDF Memory Corruption Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. PDF library is one of the PDF library. A memory corruption vulnerability exists in Microsoft Windows PDF. A remote attacker could exploit this vulnerability to build a malicious web page, which could ...