PT-2008-3745 · Microsoft · Windows Server 2008 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 2000 SP4 through Server 2008 Description: The issue arises from the Windows kernel's failure to properly validate window properties sent from a parent window to a child window during the creation of a new window. Th...

Mircosoft Windows Token Kidnapping本地提权漏洞

CNCAN ID：CNCAN-2008101007 Microsoft Windows是一款流行的操作系统。 漏洞是由于在NetworkService或LocalService上下文运行的代码，可以访问同样是在 NetworkService或LocalService上下文下运行的进程，部分进程允许提升特权到LocalSystem。 对于IIS，默认安装是不受影响的，以Full Trust运行的ASP.NET代码受此漏洞影响，如果权限低于Full Trust，也不受此漏洞影响。同样旧Asp代码不受此漏洞影响，只有ASP.NET才受影响。 针对SQL...

CVE-2008-4507

Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 8.1.0.1 allows editors to delete pages that were created by a different author via unknown vectors...

Code injection

Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 8.1.0.1 allows editors to delete pages that were created by a different author via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 8.1.0.1 allows a place manager to "demote or delete a place superuser group" via unknown vectors...

Command injection

Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 8.1.0.1 might allow attackers to cause a denial of service system crash via a "nonstandard URL argument" to the OpenDocument command. NOTE: due to lack of details from the vendor, it is not clear whether this is a vulnerability...

CVE-2008-4506

Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 8.1.0.1 allows a place manager to "demote or delete a place superuser group" via unknown vectors...

K-Lite Mega Codec Pack 'vsfilter.dll'拒绝服务漏洞

BUGTRAQ ID: 31400 CNCAN ID：CNCAN-2008092605 K-Lite Mega Codec Pack是一款影音格式的解码器。 K-Lite Mega Codec Pack 'vsfilter.dll'库处理媒体文件存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 构建恶意的flv文件，诱使用户访问可触发。 K-Lite Mega Codec Pack 3.5.7.0 目前没有解决方案提供： http://www.codecguide.com/downloadmega.htm 可参考如下测试程序：...

K-Lite Mega Codec Pack 3.5.7.0 Local Windows Explorer DoS PoC

No description provided by source. K-Lite Mega Codec Pack based Local Windows Explorer DOS PoC. Version:3.5.7.0 "vsfilter.dll"Version 1.0.1.4 that comes bundled with the above Codec Pack crashes when we try to use,select or even highlight the attached "Test7.flv" file in Windows Explorer,causing...

IBM HTTP Server mod_proxy Interim Responses DoS Vulnerability

IBM HTTP Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

K-Lite Mega Codec Pack 3.5.7.0 Local Windows Explorer DoS PoC

Exploit for unknown platform in category dos / poc ============================================================= K-Lite Mega Codec Pack 3.5.7.0 Local Windows Explorer DoS PoC ============================================================= K-Lite Mega Codec Pack based Local Windows Explorer DOS PoC...

K-Lite Mega Codec Pack 3.5.7.0 - Local Windows Explorer Denial of Service (PoC)

K-Lite Mega Codec Pack 3.5.7.0 - Local Windows Explorer Denial of Service PoC K-Lite Mega Codec Pack based Local Windows Explorer DOS PoC. Version:3.5.7.0 "vsfilter.dll"Version 1.0.1.4 that comes bundled with the above Codec Pack crashes when we try to use,select or even highlight the attached...

K-Lite Mega Codec Pack 3.5.7.0 - Local Windows Explorer Denial of Service (PoC)

K-Lite Mega Codec Pack based Local Windows Explorer DOS PoC. Version:3.5.7.0 "vsfilter.dll"Version 1.0.1.4 that comes bundled with the above Codec Pack crashes when we try to use,select or even highlight the attached "Test7.flv" file in Windows Explorer,causing Explorer to Crash. Greetz fly out t...

IBM WebSphere Application Server 6.1 < Fix Pack 19 Unspecified Vulnerability

Binary data 4685.prm...

IBM WebSphere Application Server 6.1 < Fix Pack 19 Multiple Flaws

IBM WebSphere Application Server 6.1 before Fix Pack 19 appears to be running on the remote host. As such, it is reportedly affected by multiple flaws : - An as-yet unspecified security exposure vulnerability exists when the 'FileServing' feature in the Servlet Engine / Web Container component is...

IBM DB2 8 < Fix Pack 17 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 8 running on the remote host is affected by multiple issues : - By sending malicious DB2 UDB v7 client CONNECT/DETACH requests it may be possible to crash the remote DB2 server. IZ08134 - Failure to switch the owner of the 'DB2FMP' process may...

Immunity Canvas: MS08_053

Name| ms08053 ---|--- CVE| CVE-2008-3008 Exploit Pack| CANVAS Description| Internet Explorer GetDetailString Overflow MS08053 Notes| CVE Name: CVE-2008-3008 VENDOR: Microsoft MSADV: MS08-053 Repeatability: One Shot Note: After the exploit works, Internet Explorer might crash. The callback...

Security Update for the 2007 Microsoft Office System (KB951944)

A security vulnerability exists in the 2007 Microsoft Office System and the Compatibility Pack for the 2007 Office System that could allow remote code execution. This update resolves that vulnerability...

Design/Logic Flaw

Secu Star DriveCrypt Plus Pack 3.9 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...

CVE-2008-3898

CVE-2008-3898 affects Secu Star DriveCrypt Plus Pack 3.9. Local attackers can read pre-boot authentication passwords stored in the BIOS keyboard buffer because the buffer is not cleared before/after use, enabling partial disclosure of sensitive data via memory locations associated with that buffe...