Design/Logic Flaw

Microsoft Pinyin IME 2010, when used in conjunction with Microsoft Office 2010 SP1, does not properly restrict configuration options, which allows local users to gain privileges by starting Internet Explorer from the IME toolbar, aka "Chinese IME Vulnerability."...

CVE-2013-3859

Microsoft Pinyin IME 2010, when used in conjunction with Microsoft Office 2010 SP1, does not properly restrict configuration options, which allows local users to gain privileges by starting Internet Explorer from the IME toolbar, aka "Chinese IME Vulnerability."...

CVE-2013-3859

CVE-2013-3859 affects Microsoft Office IME 2010 (Chinese) installed with Office 2010 SP1. A local attacker can escalate privileges by using the MSPY Chinese IME toolbar to start Internet Explorer, leading to kernel-mode arbitrary code execution. Vendors issued MS13-075 with patches; affected prod...

CVE-2013-3859

Microsoft Pinyin IME 2010, when used in conjunction with Microsoft Office 2010 SP1, does not properly restrict configuration options, which allows local users to gain privileges by starting Internet Explorer from the IME toolbar, aka "Chinese IME Vulnerability."...

Microsoft Office Pinyin IME 2010 CVE-2013-3859 Local Privilege Escalation Vulnerability

Description Microsoft Office is prone to a local privilege-escalation vulnerability that exists in the Pinyin Input Method Editor IME. A local attacker can exploit this issue to execute arbitrary code with system-level privileges, resulting in a complete compromise of the affected computer...

WIN8系统QQ拼音输入法绕过认证获取访问漏洞

No description provided by source...

Win8 Remote Desktop vulnerabilities: the use of QQ Pinyin pure version achieve to mention the right-vulnerability warning-the black bar safety net

Foreword The discovery of this vulnerability, the author is the room class. Are looking to With 3 3 8 9 Remote Desktop to control the hostel computer all the time, because to redo the system to forget its own IP address, and therefore can readily scan a bit in the IP section of the opening 3 3 8 ...

Microsoft中文输入系统（Pinyin IME）本地权限提升漏洞(MS11-088)

BUGTRAQ ID: 50950 CVE ID: CVE-2011-2010 Microsoft Office IME CN是微软的中文输入系统。 Microsoft Office IME CN错误公开了不能在安全桌面上运行的配置选项，在实现上存在权限提升漏洞，本地攻击者可利用此漏洞以内核权限执行任意代码，成功利用后可完全控制受影响计算机 Microsoft Pinyin IME 2010 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS11-088）以及相应补丁: MS11-088：Vulnerability in Microso...

Privilege escalation

The Microsoft Office Input Method Editor IME for Simplified Chinese in Microsoft Pinyin IME 2010, Office Pinyin SimpleFast Style 2010, and Office Pinyin New Experience Style 2010 does not properly restrict access to configuration options, which allows local users to gain privileges via the...

CVE-2011-2010

The CVE-2011-2010 issue affects the Microsoft Office IME (Chinese) for Simplified Chinese in Pinyin IME 2010 family (MSPY), including Office Pinyin SimpleFast Style 2010 and Office Pinyin New Experience Style 2010. The root cause is improper restriction of configuration options in the IME toolbar...

Microsoft Office IME (Chinese) Privilege Elevation Vulnerability (2652016)

This host is missing an important security update according to Microsoft Bulletin MS11-088. OpenVAS Vulnerability Test $Id: secpodms11-088.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Office IME Chinese Privilege Elevation Vulnerability 2652016 Authors: Antu Sanadi Copyright: Copyright c 2011...

CVE-2011-2010

The Microsoft Office Input Method Editor IME for Simplified Chinese in Microsoft Pinyin IME 2010, Office Pinyin SimpleFast Style 2010, and Office Pinyin New Experience Style 2010 does not properly restrict access to configuration options, which allows local users to gain privileges via the...

MS11-088: Vulnerability in Microsoft Office IME (Chinese) could allow elevation of privilege: December 13, 2011

Resolves security vulnerabilities that exist in Microsoft Office Pinyin IME Chinese that could allow arbitrary code to run when a maliciously modified file is opened.IntroductionMicrosoft has released security bulletin MS11-088. To view the complete security bulletin, visit one of the following...

Microsoft Pinyin IME (CVE-2011-2010) Local Privilege Escalation Vulnerability

Description Microsoft Pinyin IME is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers. Failed exploit attempts may...

Hackers can invade Vientiane, the server of the method of analysis-vulnerability warning-the black bar safety net

Today, many Internet cafes have installed a Vientiane cafe management system, this system brings convenience is obvious. However, the more convenient the system The existence of security risks is greater, many hackers will come up with a hack of this management system approach, and some can even...

Talking about password psychology analytical thinking-vulnerability warning-the black bar safety net

Hack crack inevitable to crack the password, this article is not from the hack technologies to start with, and from the hacking tricks to start with the analysis of password psychology. This article completely does not relate to a specific technology, is entirely psychology, Informatics content...

DEBIAN-CVE-2007-2835

Multiple stack-based buffer overflows in 1 CCEpinyin.c and 2 xlpinyin.c in ImmModules/cce/ in unicon-imc2 3.0.4, as used by zhcon and other applications, allow local users to gain privileges via a long HOME environment variable...

Windows Vista输入法状态判断错误绕过认证漏洞

Microsoft Windows Vista是一款微软公司新开发的操作系统。 Microsoft Windows Vista提供的输入法机制存在设计问题，远程攻击者可以利用漏洞未授权访问应用系统。 一个输入法被安装到Vista系统，默认会出现在登录界面或锁屏状态中，操作系统默认应该根据自身运行状态提供不同的功能。不过Windows Vista没有正确检查当前系统登录状态，会不正确的把特权功能提供给未登录进系统的用户。在恶意用户可以接触物理终端或者通过终端服务会话访问有此漏洞系统，通过执行输入法提供的某些帮助功能可绕过访问机制，获得对系统的控制。...