CVE-2011-0040

The server in Microsoft Active Directory on Windows Server 2003 SP2 does not properly handle an update request for a service principal name SPN, which allows remote attackers to cause a denial of service authentication downgrade or outage via a crafted request that triggers name collisions, aka...

CVE-2011-0030

CVE-2011-0030 describes a CSRSS Elevation of Privilege vulnerability in Windows XP SP2/SP3 and Windows Server 2003 SP2. The Client/Server Run-time Subsystem (CSRSS) does not properly terminate processes after a user logs out, allowing a local attacker to keep a crafted process running into the ne...

Microsoft Ships 12 Bulletins in February's Patch Tuesday

Microsoft addressed 22 flaws with 12 separate bulletins in February’s edition of Patch Tuesday, including three bulletins that were rated critical with the remaining nine rated as important. Among the programs affected are Microsoft Windows, Internet Explorer, Office, Visual Studio, and IIS. The...

PT-2011-2077 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Windows XP versions SP2 and SP3 Windows Server 2003 version SP2 Windows Vista versions SP1 and SP2 Windows Server 2008 versions Gold and SP2 Description: The issue arises from insufficient validation of user-mode input by the win32k.sys drive...

Microsoft Windows OpenType Compact Font Format Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability that affects the OpenType Compact Font Format CFF driver. An attacker can exploit this issue to execute arbitrary code in kernel mode. Successful exploits will completely compromise an affected computer. Failed attemp...

PT-2011-2076 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Windows XP versions SP2 through SP3 Windows Server 2003 version SP2 Windows Vista versions SP1 through SP2 Windows Server 2008 versions Gold through SP2 and R2 Windows 7 affected versions not specified Description: The issue arises from...

Islam Sound IV2 - details.php SQL Injection

Islam Sound IV2 - details.php SQL Injection Lab : ZxH-Lab's Locate : Jordan - Amman City Exploit Title : Islam Sound IV2 details.php Remote SQL Injection Date : 2-2-2011 Author : ZxH-Labs HomeScript : http://www.emides.com/ Version : 2.0 Tested On : Windows Server 2003 IIS...

Islam Sound IV2 - 'details.php' SQL Injection

Lab : ZxH-Lab's Locate : Jordan - Amman City Exploit Title : Islam Sound IV2 details.php Remote SQL Injection Date : 2-2-2011 Author : ZxH-Labs HomeScript : http://www.emides.com/ Version : 2.0 Tested On : Windows Server 2003 IIS ====================================================...

CVE-2011-0096

The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle a MIME format in a request for content blocks in a document, which allows remote...

PT-2011-2085 · Microsoft · Windows Xp +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through R2 SP1 Microsoft Windows 7 versions Gold through SP1...

KLA12360 ACE vulnerability in Microsoft Windows

Code execution vulnerability was found in Microsoft Windows. Malicious users can exploit this vulnerability in Human Interface Device HID to execute arbitrary code. Original advisories CVE-2011-0638 Related products Microsoft-Windows-Vista Microsoft-Windows-Server-2012 Microsoft-Windows-8...

Heap overflow

Heap-based buffer overflow in the CDrawPoly::Serialize function in fxscover.exe in Microsoft Windows Fax Services Cover Page Editor 5.2 r2 in Windows XP Professional SP3, Server 2003 R2 Enterprise Edition SP2, and Windows 7 Professional allows remote attackers to execute arbitrary code via a long...

HP OpenView Network Node Manager nnmRptConfig.exe nameParams text1 Buffer Overflow

Added: 01/20/2011 CVE: CVE-2011-0268 BID: 45762 OSVDB: 70473 Background HP OpenView Network Node Manager is network availability and performance management software. Problem A stack buffer overflow vulnerability allows remote attackers to execute arbitrary commands by requesting the...

HP OpenView Network Node Manager nnmRptConfig.exe nameParams text1 Buffer Overflow

Added: 01/20/2011 CVE: CVE-2011-0268 BID: 45762 OSVDB: 70473 Background HP OpenView Network Node Manager is network availability and performance management software. Problem A stack buffer overflow vulnerability allows remote attackers to execute arbitrary commands by requesting the...

HP OpenView Network Node Manager nnmRptConfig.exe nameParams text1 Buffer Overflow

Added: 01/20/2011 CVE: CVE-2011-0268 BID: 45762 OSVDB: 70473 Background HP OpenView Network Node Manager is network availability and performance management software. Problem A stack buffer overflow vulnerability allows remote attackers to execute arbitrary commands by requesting the...

Microsoft in Windows hacking warning !

Some versions of Microsoft's Windows operating system are vulnerable to attack from hackers exploiting a flaw in the software that could allow them to remotely take control of a personal computer. The software giant warned of the problem in a special alert. It said it has yet to develop software ...

Microsoft Windows "CreateSizedDIBSECTION()"缩略视图栈缓冲区溢出漏洞

BUGTRAQ ID: 45662 CVE ID: CVE-2010-3970 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows的Windows Graphics Rendering Engine在实现上存在远程栈缓冲区溢出漏洞，远程攻击者可利用此漏洞通过诱使用户访问恶意网页或打开处理恶意Office文档破坏内存执行任意代码或造成拒绝服务。 Microsoft Windows XP Professional Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsof...

Microsoft Warns Of Security Hole in Windows Graphics Engine

Microsoft issued an advisory to Windows users about a security vulnerability in a common Windows component that could be used by remote attackers to run malicious code on machines running the Windows XP, Vista and Windows Server 2003 operating systems. The company said on Tuesday that it is...

Microsoft Windows Fax Services Cover Page Editor - .cov Memory Corruption

Microsoft Windows Fax Services Cover Page Editor - .cov Memory Corruption !load ./winext/msec.dll ... 20d4.2728: C++ EH exception - code e06d7363 first chance 20d4.2728: Access violation - code c0000005 first chance First chance exceptions are reported before any exception handling. This exceptio...

Social Engine 4.x (Music Plugin) Arbitrary File Upload Vulnerability

Exploit Title: Social Engine 4.x Music Plugin Arbitrary File Upload Google Dork: inurl:"user/auth/forgot" Date: 22/12/2010 Author: MyDoom Moroccan Hacker Contact: [email protected] Software Link: http://http://www.socialengine.net Version: Social Engine 4.x should work on previous versions but...