CVE-2014-1824

CVE-2014-1824 affects Windows Journal remote code execution via a crafted .JNT journal file. Concrete details show impact on multiple Windows client/server platforms (Windows Vista SP2; Server 2008 SP2/R2; Windows 7 SP1; Windows 8/8.1; Windows Server 2012/2012 R2; Windows RT/RT 8.1). Root cause i...

CVE-2014-2781

CVE-2014-2781 describes a local privilege-escalation in Windows On-Screen Keyboard (OSK). A low-integrity process could interact with OSK to load a crafted program, bypassing integrity checks and achieving elevation. Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Win...

Microsoft Windows Journal File Processing CVE-2014-1824 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Avaya Au...

Microsoft Windows On-Screen Keyboard CVE-2014-2781 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker may exploit this issue to execute arbitrary programs with elevated privileges. Technologies Affected Avaya Aura Conferencing 6.0 SP1 Standard Avaya Aura Conferencing 6.0 Standard Avaya Aura...

Microsoft Windows Ancillary Function Driver CVE-2014-1767 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with elevated privileges. Successful exploits will result in the complete compromise of affected computers. Technologies Affected Avaya Aura...

百度浏览器海外版（Spark Browser） v26.5.9999.3511 - Remote Stack Overflow Vulnerability (DoS)

Vendor: Baidu, Inc. Product web page: http://www.baidu.com Affected version: 26.5.9999.3511 Summary: Spark Browser is a free Internet browser with very sharp UIs and cool utilities. It's based on the Chromium technology platform, giving it fast browsing capabilities. Desc: Spark Browser version...

Advance Notification Service for the July 2014 Security Bulletin Release

Today, we provide advance notification for the release of six Security Bulletins. Two of these are rated Critical, three are rated as Important, and one is rated Moderate in severity. These Updates are for Microsoft Windows and Internet Explorer. This month we will also premier the new format for...

Microsoft Windows Media Player 9/10/11 WAV File Parsing Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/33042/info Microsoft Windows Media Player is prone to a code-execution vulnerability. An attacker can exploit this issue by tricking an unsuspecting victim into opening a malicious file with the vulnerable application. A...

GoAhead WebServer 2.1 - Remote Arbitrary Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5464/info GoAhead WebServer is an Open Source embedded web server which supports Active Server Pages, embedded javascript, and SSL authentication and encryption. It is available for a variety of platforms including...

Microsoft Windows XP/VISTA/2000/2003/2008 - Kernel Usermode Callback Local Privilege Escalation Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/28554/info Microsoft Windows is prone to a local privilege-escalation vulnerability. The vulnerability resides in the Windows kernel. A locally logged-in user can exploit this issue to gain kernel-level access to the...

Microsoft Windows 2000/XP Registry Access Local Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18995/info Microsoft Windows is prone to a denial-of-service vulnerability. This issue occurs when a program calls certain API calls for manipulating Windows registry keys. This may crash the affected computer. NOTE: This...

Microsoft Windows Explorer 2000/2003/XP Drag and Drop Remote Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19389/info Microsoft Windows is prone to a remote code-execution vulnerability. This issue affects the Windows Explorer component. This issue is caused by insecure handling of Drag and Drop events. There is a public...

Sun Java Plug-In 1.4 Unauthorized Java Applet Floppy Access Weakness

No description provided by source. source: http://www.securityfocus.com/bid/8867/info A weakness has been reported in Java implementations that may constitute unauthorized access by Java applets to floppy devices. This weakness appears to present a flaw in the Java security model. This issue was...

BrowseFTP Client 1.62 Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3781/info BrowseFTP is an ftp client that runs on various Microsoft Windows operating systems. An issue has been reported which could allow for a malicious ftp server to execute arbitrary code on a BrowseFTP client user...

ZoneAlarm 3.7 .202/PRO 4.0/PRO 4.5 Random UDP Flood Denial of Service Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/8525/info A denial of service vulnerability has been alleged in ZoneAlarm. It is reportedly possible to reproduce this condition by sending a flood of UDP packets of random sizes to random ports on a system hosting the...

Intel Graphics Accelerator Driver Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16127/info The Intel Graphics Accelerator driver is susceptible to a remote denial of service vulnerability. This issue is demonstrated to occur when the affected driver attempts to display an overly long text in a text...

Microsoft Windows XP .Manifest Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3942/info To enable desktop skinning, Microsoft Windows XP uses '.manifest' files 'filename.exe.manifest'. This file contains XML code that tells Windows XP to use the XP controls. Due to a flaw, Windows XP fails to...

MyWebServer 1.0.2 Long HTTP Request HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5470/info MyWebServer is an application and web server for Microsoft Windows operating systems. If an oversized HTTP request is received by MyWebServer, some content provided as a URL is included in the page generated. An...

Ecometry SGDynamo 5.32/6.1/7.0 Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4720/info SGDynamo is a web application engine for Microsoft Windows operating systems. Script code is not filtered from URL parameters that are used as output by the SGDynamo program. This may enable an attacker to injec...

MDaemon WorldClient 5.0.x Folder Creation Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4689/info MDaemon is an integrated mail transport agent, webmail, and mail anti-virus package. It is available for Microsoft Windows operating systems. It may be possible for a remote user to take advantage of a buffer...