CVE-2009-1538

The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 performs updates to pointers without properly validating unspecified data values, which allows remote attackers to execute...

Microsoft Security Bulletin MS09-032 - Critical Cumulative Security Update of ActiveX Kill Bits (973346)

Microsoft Security Bulletin MS09-032 - Critical Cumulative Security Update of ActiveX Kill Bits 973346 Published: July 14, 2009 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability that is currently being exploited. The vulnerability ...

Microsoft Security Bulletin MS09-028 - Critical Vulnerabilities in Microsoft DirectShow Could Allow Remote Code Execution (971633)

Microsoft Security Bulletin MS09-028 - Critical Vulnerabilities in Microsoft DirectShow Could Allow Remote Code Execution 971633 Published: July 14, 2009 Version: 1.0 General Information Executive Summary This security update resolves one publicly disclosed vulnerability and two privately reporte...

Microsoft Security Bulletin MS09-029 - Critical Vulnerabilities in the Embedded OpenType Font Engine Could Allow Remote Code Execution (961371)

Microsoft Security Bulletin MS09-029 - Critical Vulnerabilities in the Embedded OpenType Font Engine Could Allow Remote Code Execution 961371 Published: July 14, 2009 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in a...

Sun One WebServer 6.1 JSP Source Viewing Vulnerability

No description provided by source. Sun One WebServer 6.1 JSP Source Viewing vulnerability System: Sun-ONE-Web-Server/6.1, Windows Server 2003 SunOne WebServer formerly Netscape Enterprise Server, iPlanet on Windows Systems lets remote people disclose JSP Source code. A normal URL would look like:...

Microsoft to Release Patches for Two Video Control Flaws

Microsoft’s July Patch Tuesday release will include a fix for the DirectShow vulnerability that was revealed in May, and the software giant said it likely will also have a patch available for a related flaw in the MsVidCtl ActiveX control that became public earlier this week and has been under...

Sun One WebServer 6.1 - .JSP Source Viewing

Sun One WebServer 6.1 - .JSP Source Viewing Sun One WebServer 6.1 JSP Source Viewing vulnerability System: Sun-ONE-Web-Server/6.1, Windows Server 2003 SunOne WebServer formerly Netscape Enterprise Server, iPlanet on Windows Systems lets remote people disclose JSP Source code. A normal URL would...

Sun One WebServer 6.1 - .JSP Source Viewing

Sun One WebServer 6.1 JSP Source Viewing vulnerability System: Sun-ONE-Web-Server/6.1, Windows Server 2003 SunOne WebServer formerly Netscape Enterprise Server, iPlanet on Windows Systems lets remote people disclose JSP Source code. A normal URL would look like: http://server/hello.jsp To disclos...

Sun One WebServer 6.1 JSP Source Viewing Vulnerability

Exploit for windows platform in category remote exploits ====================================================== Sun One WebServer 6.1 JSP Source Viewing Vulnerability ====================================================== Sun One WebServer 6.1 JSP Source Viewing vulnerability System:...

How to Protect Against the MSVidCtl Vulnerability

The ongoing exploitation of the vulnerability in an ActiveX control used by Internet Explorer has created a dangerous situation, as there is no patch yet for the MSVidCtl.dll vulnerability. However, there are several steps you can take to protect yourself against attacks. Microsoft has released a...

PT-2009-1181

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 Description A stack-based buffer overflow exists in the CComVariant::ReadFromStream function within the Active Templat...

US-CERT Technical Cyber Security Alert TA09-187A -- Microsoft Video ActiveX Control Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA09-187A Microsoft Video ActiveX Control Vulnerability Original release date: July 06, 2009 Last revised: -- Source: US-CERT Systems Affected Microsoft Windows XP Microsoft Windows Server 200...

Sun One 6.1 JSP Source Disclosure

Sun One WebServer 6.1 JSP Source Viewing vulnerability System: Sun-ONE-Web-Server/6.1, Windows Server 2003 SunOne WebServer formerly Netscape Enterprise Server, iPlanet on Windows Systems lets remote people disclose JSP Source code. A normal URL would look like: http://server/hello.jsp To disclos...

Sun One WebServer 6.1 JSP Source Viewing vulnerability

Sun One WebServer 6.1 JSP Source Viewing vulnerability System: Sun-ONE-Web-Server/6.1, Windows Server 2003 SunOne WebServer formerly Netscape Enterprise Server, iPlanet on Windows Systems lets remote people disclose JSP Source code. A normal URL would look like: http://server/hello.jsp To disclos...

Unisys Business Information Server mnet.exe buffer overflow

Added: 06/30/2009 CVE: CVE-2009-1628 BID: 35494 OSVDB: 55435 Background The Unisys Business Information Server is an information management solution which provides data access across an enterprise. It includes the mnet.exe program which listens for connections on ports 3985/TCP and 3986/TCP...

Unisys Business Information Server mnet.exe buffer overflow

Added: 06/30/2009 CVE: CVE-2009-1628 BID: 35494 OSVDB: 55435 Background The Unisys Business Information Server is an information management solution which provides data access across an enterprise. It includes the mnet.exe program which listens for connections on ports 3985/TCP and 3986/TCP...

Unisys Business Information Server mnet.exe buffer overflow

Added: 06/30/2009 CVE: CVE-2009-1628 BID: 35494 OSVDB: 55435 Background The Unisys Business Information Server is an information management solution which provides data access across an enterprise. It includes the mnet.exe program which listens for connections on ports 3985/TCP and 3986/TCP...

Unisys Business Information Server mnet.exe buffer overflow

Added: 06/30/2009 CVE: CVE-2009-1628 BID: 35494 OSVDB: 55435 Background The Unisys Business Information Server is an information management solution which provides data access across an enterprise. It includes the mnet.exe program which listens for connections on ports 3985/TCP and 3986/TCP...

Mirosoft Windows打印后台程序DLL库加载漏洞(MS09-022)

BUGTRAQ ID: 35209 CVECAN ID: CVE-2009-0230 Microsoft Windows是微软发布的非常流行的操作系统。 Windows打印后台处理程序没有正确地验证可能加载DLL的路径。如果远程攻击者将恶意的DLL存储在了打印后台程序可访问的位置上然后向受影响的系统发送了特制的RPC消息的话，就可能导致打印后台程序加载恶意的DLL并以提升的权限执行代码。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft Windows Vista...

Microsoft Windows内核参数和指针验证权限提升漏洞(MS09-025)

BUGTRAQ ID: 35240,35238 CVECAN ID: CVE-2009-1125,CVE-2009-1124 Microsoft Windows是微软发布的非常流行的操作系统。 Windows内核没有正确地验证传递给系统调用的参数，以及从用户态传递的某些指针，导致权限提升漏洞。成功利用此漏洞的攻击者可以运行内核态中的任意代码。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microso...