Microsoft Windows symbolic link table Privilege Escalation - Ver2 (CVE-1999-1317)

A privilege escalation vulnerability has been reported in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...

Microsoft Windows Shortcut Font Name Buffer Overflow - Ver2 (CVE-2005-0550)

A buffer overflow vulnerability has been reported in Microsoft Windows Xp, Microsoft Windows 2000 and Microsoft Windows 2003 Server. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Microsoft Windows Filename Parsing Remote Code Execution - Ver2 (CVE-2012-4774)

A code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to an error in the way Windows handles a specially crafted file or subfolder name. A remote attacker could exploit this vulnerability by enticing a victim to browse to a filesystem that contains a file...

Microsoft Windows GDI JPEG Processing Buffer Overrun (MS04-028) - Ver2 (CVE-2004-0200)

JPEG is a very popular image file format. Specially crafted JPEG files may be used to create a DoS condition and in some cases, arbitrary code execution...

CVE-2013-7332

The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of nested entity...

Microsoft XMLDOM ActiveX control information disclosure vulnerability

Overview The Microsoft XMLDOM ActiveX control can be used to check for the presence of multiple resources, which can result in unintended information disclosure. Description Microsoft.XMLDOM is an ActiveX control that can run in Internet Explorer without requiring any prompting to the user. This...

CVE-2014-0266

The XMLHTTP ActiveX controls in XML Core Services 3.0 in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to...

Information disclosure

The XMLHTTP ActiveX controls in XML Core Services 3.0 in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to...

Memory corruption

The Direct2D implementation in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a large 2D geometric figure that is encountered with Internet Explorer, ak...

CVE-2014-0266

The XMLHTTP ActiveX controls in XML Core Services 3.0 in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to...

CVE-2014-0254

The CVE-2014-0254 issue affects Microsoft Windows 8, Windows Server 2012, and Windows RT, where the IPv6 TCP/IP stack does not properly validate ICMPv6 Router Advertisement packets, allowing remote denial-of-service that can cause a system hang. Affected component: IPv6 implementation in Windows ...

CVE-2014-0266

CVE-2014-0266 (MS14-005) affects Microsoft XML Core Services (MSXML) 3.0 used by Internet Explorer. The root cause is an information-disclosure vulnerability in the MSXML ActiveX controls that can be triggered when a user visits a specially crafted web page, allowing remote attackers to bypass th...

Microsoft Windows图形组件远程代码执行漏洞(CVE-2014-0263)(MS14-007)

BUGTRAQ ID: 65393 CVECAN ID: CVE-2014-0263 Windows是一款由美国微软公司开发的窗口化操作系统。 Microsoft Windows受影响版本处理特制的2D几何图形时Direct2D存在远程代码执行漏洞，如果用户用IE查看包含了特制图形的文件，该漏洞可造成内存破坏，导致远程代码执行。 0 Microsoft Windows Windows Server 2012 Microsoft Windows Server 2008 Microsoft Windows RT 8.1 Microsoft Windows RT Microsoft Windo...

Microsoft Windows Kernel 'Win32k.sys'本地权限提升漏洞(CVE-2013-3881)(MS13-081)

BUGTRAQ ID: 62830 CVECAN ID: CVE-2013-3881 Windows是一款由美国微软公司开发的窗口化操作系统。 Windows内核模式驱动程序处理内存对象时存在本地权限提升漏洞，成功利用后可在内核模式中运行任意代码。 0 Microsoft Windows XP Microsoft Windows Windows Server 2012 Microsoft Windows Windows RT Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 200...

Microsoft Windows Direct2D Remote Code Execution Vulnerability (2912390)

This host is missing a critical security update according to Microsoft Bulletin MS14-007. OpenVAS Vulnerability Test $Id: secpodms14-007.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows Direct2D Remote Code Execution Vulnerability 2912390 Authors: Antu Sanadi Copyright: Copyright c 2014...

Microsoft Windows TCP/IP IPv6路由器广播数据包拒绝服务漏洞（MS14-006）

BUGTRAQ ID: 65409 CVECAN ID: CVE-2014-0254 Windows是一款由美国微软公司开发的窗口化操作系统。 Windows内TCP/IP IPv6实现存在拒绝服务漏洞，成功利用后可造成受影响系统停止响应。如果用户发送大量的特制 IPv6数据包到受影响系统，该漏洞可造成拒绝服务。要利用此漏洞，攻击者的系统必须和目标系统属于同一个子网。 0 Microsoft Windows Windows Server 2012 Microsoft Windows RT Microsoft Windows 8 厂商补丁： Microsoft ---------...

Microsoft Windows IPv6 Denial of Service Vulnerability (2904659)

This host is missing a important security update according to Microsoft Bulletin MS14-006. OpenVAS Vulnerability Test $Id: secpodms14-006.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows IPv6 Denial of Service Vulnerability 2904659 Authors: Veerendra GG Copyright: Copyright C 2014 SecPod,...

Microsoft Windows IPv6 Denial of Service Vulnerability (2904659)

This host is missing an important security update according to Microsoft Bulletin MS14-006. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Window XML Core Services Information Disclosure Vulnerability (2916036)

This host is missing an important security update according to Microsoft Bulletin MS14-005. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Direct2D Remote Code Execution Vulnerability (2912390)

This host is missing a critical security update according to Microsoft Bulletin MS14-007. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...