3995 matches found
Microsoft GDI+ EMF文件远程代码执行漏洞（MS08-052）
BUGTRAQ ID: 31019 CVE ID：CVE-2008-3012 CNCVE ID：CNCVE-20083012 Microsoft Windows是一款微软开发的操作系统。 Microsoft Windows GDI+子系统解析特殊构建的EMF文件存在问题，远程攻击者可以利用漏洞进行内存破坏，可导致以登录用户进程权限执行任意代码。 处理EMF图像文件时由于GDI+分配内存存在错误，构建特殊的EMF文件，诱使用户访问，可触发此漏洞。 Microsoft Works 8.0 Microsoft Windows XP Professional x64 Edition SP2...
CVE-2008-3014
CVE-2008-3014 is the GDI+ WMF Buffer Overrun vulnerability. A buffer overflow in gdiplus.dll (GDI+) allows remote code execution when processing a malformed WMF image, affecting multiple Windows and Office components listed in the description (e.g., Internet Explorer 6 SP1 on various Windows vers...
CVE-2008-3013
CVE-2008-3013 corresponds to a GDI+ GIF parsing vulnerability. The connected KB954593 (MS08-052) describes remote code execution in Windows GDI+ when a user views a specially crafted GIF, affecting multiple Windows versions and Office components. The underlying issue is memory corruption during G...
CVE-2008-3012
CVE-2008-3012 corresponds to an in-GDI+ memory allocation flaw in gdiplus.dll that could allow remote code execution when a specially crafted EMF image is viewed. Connected docs confirm this as MS08-052, addressing vulnerabilities in GDI+ across Windows and Office components (IE6, Windows XP, Ser...
CVE-2008-3014
Buffer overflow in gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digita...
Microsoft Security Bulletin MS08-052 – Critical Vulnerabilities in GDI+ Could Allow Remote Code Execution (954593)
Microsoft Security Bulletin MS08-052 – Critical Vulnerabilities in GDI+ Could Allow Remote Code Execution 954593 Published: September 9, 2008 Version: 1.0 General Information Executive Summary This security update resolves several privately reported vulnerabilities in Microsoft Windows GDI+. Thes...
Microsoft Security Bulletin MS08-053 – Critical Vulnerability in Windows Media Encoder 9 Could Allow Remote Code Execution (954156)
Microsoft Security Bulletin MS08-053 – Critical Vulnerability in Windows Media Encoder 9 Could Allow Remote Code Execution 954156 Published: September 9, 2008 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Windows Media Encod...
Najdi.si Toolbar ActiveX Remote Buffer Overflow PoC
No description provided by source. ----------------------------------------------------------------------------- Najdi.si Toolbar Remote Buffer Overflow url: http://www.najdi.si/ Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational...
Najdi.si Toolbar - ActiveX Remote Buffer Overflow (PoC)
Najdi.si Toolbar - ActiveX Remote Buffer Overflow PoC ----------------------------------------------------------------------------- Najdi.si Toolbar Remote Buffer Overflow url: http://www.najdi.si/ Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written...
najdisi-overflow.txt
----------------------------------------------------------------------------- Najdi.si Toolbar Remote Buffer Overflow url: http://www.najdi.si/ Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose. Use it at your own risk...
Najdi.si Toolbar ActiveX Remote Buffer Overflow PoC
Exploit for unknown platform in category dos / poc =================================================== Najdi.si Toolbar ActiveX Remote Buffer Overflow PoC =================================================== ----------------------------------------------------------------------------- Najdi.si...
Najdi.si Toolbar - ActiveX Remote Buffer Overflow (PoC)
----------------------------------------------------------------------------- Najdi.si Toolbar Remote Buffer Overflow url: http://www.najdi.si/ Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose. Use it at your own risk...
Microsoft Windows IPsec信息泄露漏洞（MS08-047）
BUGTRAQ ID: 30634 CVECAN ID: CVE-2008-2246 Microsoft Windows是微软发布的非常流行的操作系统。 在从Windows Server 2003域向Windows Server 2008域导入IPsec策略时，系统可能会忽略IPsec策略，这样会以明文传输本应加密的数据。导致泄露在网络上本应被加密的信息，查看网络通讯的攻击者能够查看并且可能修改通讯的内容。请注意此漏洞不允许攻击者直接执行代码或提升他们的用户权限，但可能用于收集有用的信息，从而试图进一步入侵受影响的系统或网络。 Microsoft Windows Vista SP1...
CVE-2008-2245
Heap-based buffer overflow in the InternalOpenColorProfile function in mscms.dll in Microsoft Windows Image Color Management System MSCMS in the Image Color Management ICM component on Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code...
iDefense Security Advisory 08.12.08: Microsoft Windows Color Management Module Heap Buffer Overflow Vulnerability
iDefense Security Advisory 08.12.08 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 12, 2008 I. BACKGROUND Microsoft Windows Color Management Module provides consistent color mappings between different devices and applications. It is also used to transform colors between color spaces...
Microsoft Windows Event System User Subscription Request Remote Code Execution Vulnerability
Description Microsoft Windows Event System is prone to a remote code-execution vulnerability. Remote authenticated attackers can exploit this issue to execute arbitrary code with SYSTEM privileges. A successful attack can result in a full compromise of the affected computer. Technologies Affected...
Microsoft Windows Event System Array Index Verification Remote Code Execution Vulnerability
Description Microsoft Windows Event System is prone to a remote code-execution vulnerability. Remote authenticated attackers can exploit this issue to execute arbitrary code with SYSTEM privileges. A successful attack can result in a full compromise of the affected computer. Technologies Affected...
Microsoft Windows Image Color Management Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability because of a flaw in the Microsoft Color Management System MSCMS module of the Image Color Management System ICM. An attacker could exploit this issue by enticing a victim to open a malicious image file. Successfully...
Microsoft Security Bulletin MS08-048 - Important Security Update for Outlook Express and Windows Mail (951066)
Microsoft Security Bulletin MS08-048 - Important Security Update for Outlook Express and Windows Mail 951066 Published: August 12, 2008 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Outlook Express and Windows Mail. The...
Microsoft Security Bulletin MS08-049 – Important Vulnerabilities in Event System Could Allow Remote Code Execution (950974)
Microsoft Security Bulletin MS08-049 – Important Vulnerabilities in Event System Could Allow Remote Code Execution 950974 Published: August 12, 2008 Version: 1.0 General Information Executive Summary This update resolves two privately reported vulnerabilities in Microsoft Windows Event System tha...