CVE-2014-0266

The XMLHTTP ActiveX controls in XML Core Services 3.0 are vulnerable to an information disclosure vulnerability (MSXML Information Disclosure Vulnerability) on multiple versions of Microsoft Windows , including XP, Vista, 7, 8, 8.1, and Windows Server 2003, 2008, 2008 R2, and 2012. The root cause...

Microsoft Windows Direct2D Remote Code Execution Vulnerability (2912390)

This host is missing a critical security update according to Microsoft Bulletin MS14-007. OpenVAS Vulnerability Test $Id: secpodms14-007.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows Direct2D Remote Code Execution Vulnerability 2912390 Authors: Antu Sanadi Copyright: Copyright c 2014...

Microsoft Windows图形组件远程代码执行漏洞(CVE-2014-0263)(MS14-007)

BUGTRAQ ID: 65393 CVECAN ID: CVE-2014-0263 Windows是一款由美国微软公司开发的窗口化操作系统。 Microsoft Windows受影响版本处理特制的2D几何图形时Direct2D存在远程代码执行漏洞，如果用户用IE查看包含了特制图形的文件，该漏洞可造成内存破坏，导致远程代码执行。 0 Microsoft Windows Windows Server 2012 Microsoft Windows Server 2008 Microsoft Windows RT 8.1 Microsoft Windows RT Microsoft Windo...

Microsoft Windows Kernel 'Win32k.sys'本地权限提升漏洞(CVE-2013-3881)(MS13-081)

BUGTRAQ ID: 62830 CVECAN ID: CVE-2013-3881 Windows是一款由美国微软公司开发的窗口化操作系统。 Windows内核模式驱动程序处理内存对象时存在本地权限提升漏洞，成功利用后可在内核模式中运行任意代码。 0 Microsoft Windows XP Microsoft Windows Windows Server 2012 Microsoft Windows Windows RT Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 200...

Microsoft Windows IPv6 Denial of Service Vulnerability (2904659)

This host is missing a important security update according to Microsoft Bulletin MS14-006. OpenVAS Vulnerability Test $Id: secpodms14-006.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows IPv6 Denial of Service Vulnerability 2904659 Authors: Veerendra GG Copyright: Copyright C 2014 SecPod,...

Microsoft Windows TCP/IP IPv6路由器广播数据包拒绝服务漏洞（MS14-006）

BUGTRAQ ID: 65409 CVECAN ID: CVE-2014-0254 Windows是一款由美国微软公司开发的窗口化操作系统。 Windows内TCP/IP IPv6实现存在拒绝服务漏洞，成功利用后可造成受影响系统停止响应。如果用户发送大量的特制 IPv6数据包到受影响系统，该漏洞可造成拒绝服务。要利用此漏洞，攻击者的系统必须和目标系统属于同一个子网。 0 Microsoft Windows Windows Server 2012 Microsoft Windows RT Microsoft Windows 8 厂商补丁： Microsoft ---------...

Microsoft Windows IPv6 Denial of Service Vulnerability (2904659)

This host is missing an important security update according to Microsoft Bulletin MS14-006. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Window XML Core Services Information Disclosure Vulnerability (2916036)

This host is missing an important security update according to Microsoft Bulletin MS14-005. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Direct2D Remote Code Execution Vulnerability (2912390)

This host is missing a critical security update according to Microsoft Bulletin MS14-007. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows multiple security vulnerabilities

XML services information leakage, IPv6 DoS, Direct2D memory corruption, .Net privilege escalation, VBScript code execution...

Microsoft Windows Graphics Component CVE-2014-0263 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file or webpage. A successful exploit may allow arbitrary code to run in the context of the currently logged-in user. Failed...

Microsoft XML Core Services CVE-2014-0266 Information Disclosure Vulnerability

Description Microsoft XML Core Services MSXML is prone to an information-disclosure vulnerability. An attacker can leverage this issue to read files on the local file system or obtain sensitive information; this may aid in other attacks. Attackers can exploit this issue by enticing an unsuspectin...

Microsoft Windows TCP/IP IPv6 Router Advertisement Remote Denial of Service Vulnerability

Description Microsoft Windows TCP/IP IPv6 protocol implementation is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to render the affected system unresponsive, resulting in a denial-of-service condition. Technologies Affected Microsoft Windows 8 for 32-bit...

Asseco SEE iBank FX Client 2.0.9.3 - Local Privilege Escalation

Asseco SEE iBank FX Client 2.0.9.3 - Local Privilege Escalation Asseco SEE iBank FX Client = 2.0.9.3 Local Privilege Escalation Vulnerability Vendor: Asseco SEE Product web page: http://www.asseco.com Affected version: 2.0.9.3 Build 22.06.2011 - Desktop/Enterprise Edition 1.2 1.1.5.1270 Service...

Microsoft Windows Printer Spooler GetPrinterData Denial Of Service - Ver2 (CVE-2006-6296)

A denial-of-service vulnerability has been reported in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

NCH Software Inventoria 3.45 Cross Site Scripting Vulnerability

NCH Software Inventoria version 3.45 suffers from a cross site scripting vulnerability. NCH Software Inventoria 3.45 id param Reflected Cross-Site Scripting Vulnerability Vendor: NCH Software Product web page: http://www.nchsoftware.com Affected version: 3.45 Summary: Inventoria is a business...

NCH Software Inventoria 3.45 (id param) Reflected Cross-Site Scripting Vulnerability

Summary Inventoria is a business inventory management and stock control software that allows you to manage and monitor your inventory to help streamline your operations and boost profits. Description The application suffers from a reflected XSS issue due to a failure to properly sanitize...

Microsoft Windows WinVerifyTrust PE Validation Security Bypass (MS13-098; CVE-2013-3900)

A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to an error in the way the WinVerifyTrust function handles Windows Authenticode signature verification for portable executable PE files. A remote attacker could trigger this flaw by sending a...

sstp-discover NSE Script

Check if the Secure Socket Tunneling Protocol is supported. This is accomplished by trying to establish the HTTPS layer which is used to carry SSTP traffic as described in: - Current SSTP server implementations: - Microsoft Windows Server 2008/Server 2012 - MikroTik RouterOS - SEIL Example...

CVE-2014-0262

The CVE-2014-0262 issue affects Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1, specifically the Win32k.sys kernel-mode driver. The vulnerability arises during the processing of window handles, where thread-owned objects are not properly considered, enabling local privilege escalation via...