ZDI-09-001: Microsoft SMB NT Trans Request Parsing Remote Code Execution Vulnerability

ZDI-09-001: Microsoft SMB NT Trans Request Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-001 January 13, 2009 -- CVE ID: CVE-2008-4834 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Windows XP Microsoft Windows 2000 SP4 Microsoft...

Microsoft Internet Explorer Javascript Denial Of Service

svchost.exe CPU usage boils up to almost 100 percent when we open the malicious webpage and IE7 Version 7.0.5730.13 closes with all tabs. Tested On: MicrosoftR WindowsR Server 2003, Standard Edition with Service Pack 2 With: IE Version 7.0.5730.13 I didn't use Javascript anywhere in the HTML belo...

Integer Overflow vulnerability in Microsoft Windows Media Player

This host has Windows Media Player installed and is prone to Integer Overflow vulnerability OpenVAS Vulnerability Test $Id: gbmswinmediaplayerintoverflowvuln.nasl 6532 2017-07-05 07:42:05Z cfischer $ Integer Overflow vulnerability in Microsoft Windows Media Player Authors: Sharath S Copyright:...

Integer Overflow vulnerability in Microsoft Windows Media Player

Windows Media Player is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Computer Associates License Service invalid command buffer overflow

Added: 12/24/2008 CVE: CVE-2005-0581 BID: 12705 OSVDB: 14389 Background The License service comes with most Computer Associatesproducts and exchanges license information over ports 10202/tcp and 10203/tcp. Problem A buffer overflow vulnerability allows a remote attacker to execute arbitrary...

Microsoft写字板文件转换器远程代码执行漏洞

BUGTRAQ ID: 32718 CVECAN ID: CVE-2008-4841 写字板是Windows操作系统中附件所提供的简单文本编辑工具。 对于没有安装Word的用户，可以使用写字板的文本转换器来打开.doc格式文档。如果用户使用转换器打开了特制的.doc、.wri或.rtf格式文档的话，就可能触发内存破坏，导致执行任意代码。目前这个漏洞正在被积极的利用。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Server 2003 SP2 Microsoft Windows Server 200...

CVE-2008-3465

Heap-based buffer overflow in an API in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows context-dependent attackers to cause a denial of service or execute arbitrary code via a WMF file with a malformed file-size parameter,...

Stack overflow

Stack-based buffer overflow in Microsoft Internet Explorer 5.01 SP4, 6 SP1 on Windows 2000, and 6 on Windows XP and Server 2003 does not properly handle extraneous data associated with an object embedded in a web page, which allows remote attackers to execute arbitrary code via crafted HTML tags...

CVE-2008-4261

CVE-2008-4261 describes a stack-based buffer overflow in Microsoft Internet Explorer (IE) affecting IE 5.01 SP4, IE 6 SP1 on Windows 2000, and IE 6 on Windows XP/Server 2003. The vulnerability stems from improper handling of extraneous data tied to an embedded object in a web page, enabling remot...

CVE-2008-4841

The WordPad Text Converter for Word 97 files in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted 1 .doc, 2 .wri, or 3 .rtf Word 97 file that triggers memory corruption, as exploited in the wild in December 2008. NOTE: ...

Microsoft Internet Explorer HTML对象远程代码执行漏洞(MS08-073)

Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the underlying computer. Failed attacks wi...

Microsoft Security Bulletin MS08-071 – Critical Vulnerabilities in GDI Could Allow Remote Code Execution (956802)

Microsoft Security Bulletin MS08-071 – Critical Vulnerabilities in GDI Could Allow Remote Code Execution 956802 Published: December 9, 2008 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in GDI. Exploitation of either of the...

PT-2008-5544 · Microsoft · Internet Explorer +2

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 5.01 SP4, 6 SP1 Microsoft Internet Explorer version 6 on Windows XP and Server 2003 Description: The issue arises from a stack-based buffer overflow that occurs when Microsoft Internet Explorer does not...

Microsoft Windows GDI WMF Integer Overflow Vulnerability

Description The GDI component of Microsoft Windows is prone to an integer-overflow vulnerability that may be triggered by a malicious WMF Windows Metafile image. A successful exploit will let the attacker execute arbitrary code in the context of the currently logged-in user. Technologies Affected...

Microsoft Windows 'UnhookWindowsHookEx' Local DoS Vulnerability

This Microsoft Windows host is prone to denial of service vulnerability. The flaw is due to error in 'UnhookWindowsHookEx' function. This can be exploited to cause system hang. OpenVAS Vulnerability Test $Id: secpodmswinlocaldosvuln900178.nasl 7293 2017-09-27 08:49:48Z cfischer $ Description:...

Microsoft Windows 'UnhookWindowsHookEx' Local DoS Vulnerability

This Microsoft Windows host is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GoodTech SSH Server SFTP buffer overflow

Added: 11/28/2008 CVE: CVE-2008-4726 BID: 31879 OSVDB: 49249 Background GoodTech SSH Server is an SSH Server providing secure remote console, secure file transfer, and secure port forwarding capabilities for Windows platforms. Problem Buffer overflow vulnerabilities in GoodTech SSH Server allow...

CA ARCserve Backup for Laptops and Desktops LGServer password integer overflow

Added: 11/28/2008 CVE: CVE-2007-5004 BID: 24348 OSVDB: 41352 Background BrightStor ARCserve Backup for Laptops and Desktops is an automated backup solution optimized for low-bandwidth, intermittent network connections. Problem An integer overflow vulnerability allows remote attackers to execute...

CA ARCserve Backup for Laptops and Desktops LGServer password integer overflow

Added: 11/28/2008 CVE: CVE-2007-5004 BID: 24348 OSVDB: 41352 Background BrightStor ARCserve Backup for Laptops and Desktops is an automated backup solution optimized for low-bandwidth, intermittent network connections. Problem An integer overflow vulnerability allows remote attackers to execute...

CA ARCserve Backup for Laptops and Desktops LGServer password integer overflow

Added: 11/28/2008 CVE: CVE-2007-5004 BID: 24348 OSVDB: 41352 Background BrightStor ARCserve Backup for Laptops and Desktops is an automated backup solution optimized for low-bandwidth, intermittent network connections. Problem An integer overflow vulnerability allows remote attackers to execute...