Microsoft GDI+ CCITT G4 TIFF File Processing Memory Corruption Remote Code Execution Vulnerability

Description Microsoft GDI+ is prone to a remote code-execution vulnerability because the vector graphics link library improperly processes TIFF image files. This issue occurs when CCITT G4 compressed TIFF images are decompressed. An attacker could exploit this issue to execute arbitrary code with...

Microsoft Windows LSASS NTLM Implementation Remote Denial of Service Vulnerability

Description Microsoft Windows Local Security Authority Subsystem Service LSASS is prone to a remote denial-of-service vulnerability. A remote attacker can exploit this issue to cause the affected computer to crash and restart, denying service to legitimate users. Technologies Affected Avaya Meeti...

Microsoft Security Bulletin MS09-051 - Critical Vulnerabilities in Windows Media Runtime Could Allow Remote Code Execution (975682)

Microsoft Security Bulletin MS09-051 - Critical Vulnerabilities in Windows Media Runtime Could Allow Remote Code Execution 975682 Published: October 13, 2009 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in Windows Media...

Microsoft Windows Kernel NULL Pointer Dereference Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. The vulnerability stems from a NULL-pointer dereference. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful exploits will resu...

Microsoft Security Bulletin MS09-058 - Important Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (971486)

Microsoft Security Bulletin MS09-058 - Important Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege 971486 Published: October 13, 2009 Version: 1.0 General Information Executive Summary This security update resolves several privately reported vulnerabilities in the Windows kerne...

Microsoft Security Bulletin MS09-052 - Critical Vulnerability in Windows Media Player Could Allow Remote Code Execution (974112)

Microsoft Security Bulletin MS09-052 - Critical Vulnerability in Windows Media Player Could Allow Remote Code Execution 974112 Published: October 13, 2009 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Windows Media Player. T...

Code injection

Unspecified vulnerability in HP ProCurve Identity Driven Manager IDM A.02.x through A.02.03 and A.03.x through A.03.00, on Windows Server 2003 with IAS and Windows Server 2008 with NPS, allows local users to gain privileges via unknown vectors...

Microsoft Confirms SMB2 Flaw, Heightens Severity

Microsoft has issued a formal security advisory to confirm the remote reboot flaw in its implementation of the SMB2 protocol, going a step further to warn that a successful attack could lead to remote code execution and full system takeover. The vulnerability, which was originally released as a...

Microsoft Windows TCP/IP在处理特制报文中远程拒绝服务漏洞（MS09-048）

BUGTRAQ ID: 36269 CVECAN ID: CVE-2009-1926 Microsoft Windows是微软发布的非常流行的操作系统。 由于处理TCP接收窗口大小很小或为0的特制报文中的错误，导致Microsoft Windows的TCP/IP处理中存在拒绝服务漏洞。如果应用关闭了仍要发送数据的TCP连接且攻击者设置了很小的或为0的TCP接收窗口大小，受影响的服务器就无法彻底关闭TCP连接。攻击者可以通过向系统发送大量特制报文来利用这个漏洞，导致受影响的系统停止响应新的请求。即使在攻击者停止发送恶意报文之后系统仍保持无响应。 Microsoft Windows Vist...

Microsoft Security Bulletin MS09-046 - Critical Vulnerability in DHTML Editing Component ActiveX Control Could Allow Remote Code Execution (956844)

Microsoft Security Bulletin MS09-046 - Critical Vulnerability in DHTML Editing Component ActiveX Control Could Allow Remote Code Execution 956844 Published: September 08, 2009 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in th...

JVN#62211338 Buffer overflow vulnerability in Microsoft Windows

Windows Media Format Runtime included in Microsoft Windows contains a buffer overflow vulnerability when parsing specific files. Impact If a user opens a specially crafted file, an attacker may execute arbitrary code. Solution Update the software Apply the update according to the information...

CVE-2009-3099

Unspecified vulnerability in HP OpenView Operations Manager 8.1 on Windows Server 2003 SP2 allows remote attackers to have an unknown impact, related to a "Remote exploit," as demonstrated by a certain module in VulnDisco Pack Professional 8.11, a different vulnerability than CVE-2007-3872. NOTE:...

Design/Logic Flaw

Multiple unspecified vulnerabilities in HP Performance Insight 5.3 allow remote attackers to have an unknown impact, related to 1 a "Remote exploit" on Windows platforms, and 2 a "Remote preauthentication exploit" on the Windows Server 2003 SP2 platform, as demonstrated by certain modules in...

CVE-2009-3098

Unspecified vulnerability in the Portal in HP Operations Dashboard 2.1 on Windows Server 2003 SP2 allows remote attackers to have an unknown impact, related to a "Remote exploit," as demonstrated by a certain module in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this disclosure has no...

Code injection

Unspecified vulnerability in the Portal in HP Operations Dashboard 2.1 on Windows Server 2003 SP2 allows remote attackers to have an unknown impact, related to a "Remote exploit," as demonstrated by a certain module in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this disclosure has no...

CVE-2009-3087

Unspecified vulnerability in nserver.exe in the server in IBM Lotus Domino 8.0 on Windows Server 2003 allows remote attackers to cause a denial of service daemon crash via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this disclosu...

Code injection

Unspecified vulnerability in HP OpenView Operations Manager 8.1 on Windows Server 2003 SP2 allows remote attackers to have an unknown impact, related to a "Remote exploit," as demonstrated by a certain module in VulnDisco Pack Professional 8.11, a different vulnerability than CVE-2007-3872. NOTE:...

Code injection

Unspecified vulnerability in nserver.exe in the server in IBM Lotus Domino 8.0 on Windows Server 2003 allows remote attackers to cause a denial of service daemon crash via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this disclosu...

CVE-2009-3098

Technical details for CVE-2009-3098 are not publicly provided in the supplied documents; the records describe an unspecified remote vulnerability in HP Operations Dashboard 2.1 with no actionable information. Monitor for updates.

CVE-2009-3087

The vulnerability (CVE-2009-3087) affects IBM Lotus Domino 8.0 Server on Windows Server 2003, specifically the nserver.exe component in the server. It allows remote attackers to trigger a denial of service (daemon crash) via unknown vectors. The description notes actionability is limited and does...