Microsoft IE Developer Tools WMITools and Windows Messenger ActiveX Control Vulnerability (2508272)

This host is missing a critical security update according to Microsoft Bulletin MS11-027. OpenVAS Vulnerability Test $Id: secpodms11-027.nasl 8724 2018-02-08 15:02:56Z cfischer $ Microsoft IE Developer Tools WMITools and Windows Messenger ActiveX Control Vulnerability 2508272 Authors: Veerendra G...

Security Update for the 2007 Microsoft Office System (KB2466156)

A security vulnerability exists in the 2007 Microsoft Office System and the Microsoft Office Compatibility Pack that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

MS11-024: Vulnerability in Windows Fax Cover Page Editor could allow remote code execution: April 12, 2011

Resolves a vulnerability in Windows that could allow remote code execution if a user opened a specially crafted fax cover page file .cov by using Windows Fax Cover Page Editor.Support for Windows Vista Service Pack 1 SP1 ends on July 12, 2011. To continue receiving security updates for Windows,...

MS11-019: Vulnerabilities in SMB Client could allow remote code execution: April 12, 2011

None None...

Wordtrainer 3.0 Buffer Overflow

!/usr/bin/python +Exploit Title: Wordtrainer V3.0 .ORD File Buffer Overflow Vulnerability +Date: 12\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.wordtrainer.net/software/files/wt307shwexe/wt307shw.exe +Version: 3.0 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A from struct impo...

MS11-026: Vulnerability in MHTML could allow information disclosure: April 12, 2011

None None...

Microsoft PowerPoint Invalid 'PersistDirectoryEntry' Record Remote Code Execution Vulnerability

Description Microsoft PowerPoint is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing a victim to open a malicious PowerPoint file. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the application...

Microsoft Windows Kernel 'Win32k.sys' (CVE-2011-1234) Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel due to a NULL-pointer dereference. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete...

Description of the Office Online update: April 12, 2011

None None...

SAP Crystal Reports Print ActiveX Control Buffer Overflow Vulnerability

SAP Crystal Reports is prone to heap-based buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Immunity Canvas: CVE_2011_0997

Name| CVE20110997 ---|--- CVE| CVE-2011-0997 Exploit Pack| CANVAS Description| CVE20110997 DHClient Exploit Notes| CVE Name: CVE-2011-0997 NOTES: -This exploit answers dhcp requests with crafted packets to get commands executed by scripts using the hostname. For this exploit to work, the target...

Immunity Canvas: CVE_2011_0182

Name| CVE20110182 ---|--- CVE| CVE-2011-0182 Exploit Pack| CANVAS Description| CVE-2011-0182: i386setldt Notes| CVE Name: CVE-2011-0182 VENDOR: Apple Notes: Tested on OSX 10.6.6 Repeatability: Infinite CVE Url: https://vulners.com/cve/CVE-2011-0182 NOTES:...

DSquare Exploit Pack: D2SEC_MAJORDOMO2

Name| d2secmajordomo2 ---|--- CVE| CVE-2011-0063 Exploit Pack| D2ExploitPack Description| d2secmajordomo2 Notes|...

IBM WebSphere Application Server 7.0 < Fix Pack 15 Multiple Vulnerabilities

IBM WebSphere Application Server 7.0 before Fix Pack 15 appears to be running on the remote host. As such, it is reportedly affected by the following vulnerabilities : - A double free error in BBOOORBR control block could trigger a denial of service condition. PM17170 - A cross-site scripting...

Microsoft Groove Remote Code Execution Vulnerability (2494047)

This host is missing a critical security update according to Microsoft Bulletin MS11-016. OpenVAS Vulnerability Test $Id: secpodms11-016.nasl 6538 2017-07-05 11:38:27Z cfischer $ Microsoft Groove Remote Code Execution Vulnerability 2494047 Authors: Madhuri D Copyright: Copyright c 2011 SecPod,...

MS11-015: Vulnerability in Microsoft DirectShow could allow remote code execution: March 8, 2011

Resolves vulnerabilities in Windows Media Player and Windows Media Center that could allow remote code execution if a user opens a specially crafted Microsoft Digital Video Recording .dvr-ms file.Support for Windows Vista Service Pack 1 SP1 ends on July 12, 2011. To continue receiving security...

MS11-017: Description of the security update for Remote Desktop client 7.0: March 8, 2011

None None...

Microsoft Windows Kernel整数截断本地权限提升漏洞

BUGTRAQ ID: 46136 CVE ID: CVE-2011-0045 Windows是微软发布的非常流行的操作系统。 Windows Kernel在实现上存在本地权限提升漏洞，攻击者可利用此漏洞以内核级别权限执行任意代码，从而完全控制受影响计算机。 此漏洞源于Kernel对跟踪事件的支持。由于畸形转换，Kernel为用户空间中的数据分配使用截断的长度。在填充此缓冲区时，Kernel将使用造成缓冲区溢出的另一个长度。这将造成内存破坏并导致执行任意代码。 Microsoft Windows XP Tablet PC Edition SP3 Microsoft Windows XP...

Microsoft Windows SMB Registry : Win 7 / Server 2008 R2 Service Pack Detection

It is possible to determine the Service Pack version of the Windows 7 / Server 2008 R2 system by reading the registry key 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CSDVersion'. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid52459; scriptversion"1.9";...

Citrix Provisioning Services streamprocess.exe Stack Overflow

Added: 02/24/2011 BID: 45914 OSVDB: 70597 Background Citrix Provisioning Services dynamically provisions virtual servers to simplify and streamline server management, while reducing software rollout risk. Problem Citrix Provisioning Service 5.6 and prior are vulnerable to a remotely exploitable...