Microsoft Windows PGM UAF Elevation of Privilege Vulnerability (3116130)

This host is missing an important security update according to Microsoft Bulletin MS15-133 SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

KLA10714 Multiple vulnerabilities in Microsoft Windows

Multiple serious vulnerabilities have been found in Microsoft Windows. Malicious users can exploit these vulnerabilities to cause denial of service or gain privileges. Below is a complete list of vulnerabilities 1. Improper requests parsing at Windows Domain Name System DNS can be exploited...

MS15-133: Security Update for Windows PGM to Address Elevation of Privilege (3116130)

The remote Windows host is missing a security update. It is, therefore, affected by an elevation of privilege vulnerability in the Pragmatic General Multicast PGM protocol, installed with the MSMQ service, due to a race condition that can result in references being made to already freed memory. A...

MS15-133: Description of the security update for Windows PGM: December 8, 2015

None None...

Crafted IP Option Vulnerability (cisco-sa-20070124-crafted-ip-option)

Cisco routers and switches running Cisco IOS XR software may be vulnerable to a remotely exploitable crafted IP option Denial of Service DoS attack. Exploitation of the vulnerability may potentially allow for arbitrary code execution. The vulnerability may be exploited after processing an Interne...

Design/Logic Flaw

Untrusted search path vulnerability in ALSee 6.20.0.1 allows local users to gain privileges via a Trojan horse patchani.dll file in the current working directory, as demonstrated by a directory that contains a .ani, .bmp, .cal, .hdp, .jpe, .mac, .pbm, .pcx, .pgm, .png, .psd, .ras, .tga, or .tiff...

Microsoft Pragmatic General Multicast (PGM) DoS Vulnerability (950762)

This host is missing a critical security update according to Microsoft Bulletin MS08-036. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Pragmatic General Multicast (PGM) Denial of Service Vulnerability (950762)

This host is missing a critical security update according to Microsoft Bulletin MS08-036. OpenVAS Vulnerability Test $Id: gbms08-036.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Pragmatic General Multicast PGM Denial of Service Vulnerability 950762 Authors: Madhuri D Copyright: Copyright c...

Crafted IP Option Vulnerability

Cisco routers and switches running Cisco IOS or Cisco IOS XR software may be vulnerable to a remotely exploitable crafted IP option Denial of Service DoS attack. Exploitation of the vulnerability may potentially allow for arbitrary code execution. The vulnerability may be exploited after processi...

FreeBSD : multiple vulnerabilities in ethereal (cdf18ed9-7f4a-11d8-9645-0020ed76ef5a)

Stefan Esser of e-matters Security discovered a baker's dozen of buffer overflows in Ethereal's decoders, including : - NetFlow - IGAP - EIGRP - PGM - IRDA - BGP - ISUP - TCAP - UCP In addition, a vulnerability in the RADIUS decoder was found by Jonathan Heusser. Finally, there is one uncredited...

Arbitrary file deletion

asciiview in aview 1.3.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/aview.pgm temporary file...

Sql injection

SQL injection vulnerability in index.php in AlstraSoft Affiliate Network Pro allows remote attackers to execute arbitrary SQL commands via the pgm parameter in a directory action...

Alstrasoft Affiliate Network Pro - pgm SQL Injection

Alstrasoft Affiliate Network Pro - pgm SQL Injection || | |AlstraSoft Affiliate Network Pro pgm Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script ...

Microsoft Windows PGM DoS

Infinite loop on PGM packet parsing...

Microsoft Windows PGM报文多个拒绝服务漏洞（MS08-036）

BUGTRAQ ID: 29508,29509 CVECAN ID: CVE-2008-1440,CVE-2008-1441 Microsoft Windows是微软发布的非常流行的操作系统。 Windows的实际通用多播（PGM）协议实现中存在多个拒绝服务漏洞，如果远程攻击者发送了带有无效长度的PGM报文，或PGM畸形碎片的话，就可能导致系统停止响应。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP1 Microsoft Windows Vista Microsoft Window...

Microsoft Security Bulletin MS08-036 – Important Vulnerabilities in Pragmatic General Multicast (PGM) Could Allow Denial of Service (950762)

Microsoft Security Bulletin MS08-036 – Important Vulnerabilities in Pragmatic General Multicast PGM Could Allow Denial of Service 950762 Published: June 10, 2008 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in the Pragmati...

Microsoft Windows PGM Fragment Handling Denial of Service (MS08-036; CVE-2008-1441)

PGM is a reliable and scalable multicast protocol that enables receivers to detect loss, request retransmission of lost data, or notify an application of unrecoverable loss. The vulnerability is due to the PGM's parsing code that fails to properly handle malformed PGM packets that contain an...

CVE-2008-1441

Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to cause a denial of service system hang via a series of Pragmatic General Multicast PGM packets with invalid fragment options, aka the "PGM Malformed Fragment Vulnerability."...

Design/Logic Flaw

Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to cause a denial of service system hang via a series of Pragmatic General Multicast PGM packets with invalid fragment options, aka the "PGM Malformed Fragment Vulnerability."...

CVE-2008-1440

Microsoft Windows XP SP2 and SP3, and Server 2003 SP1 and SP2, does not properly validate the option length field in Pragmatic General Multicast PGM packets, which allows remote attackers to cause a denial of service infinite loop and system hang via a crafted PGM packet, aka the "PGM Invalid...