3995 matches found
Microsoft MDAC RDS.Dataspace ActiveX控件远程代码执行漏洞（MS06-014）
Microsoft Windows是微软发布的非常流行的操作系统。 Windows的RDS.Dataspace ActiveX实现上存在漏洞，远程攻击者可能利用此漏洞在获取主机的控制。 在某些情况下，MDAC所捆绑的RDS.Dataspace ActiveX控件无法确保能够进行安全的交互，导致远程代码执行漏洞，成功利用这个漏洞的攻击者可以完全控制受影响的系统。 Microsoft Windows XP SP2 Microsoft Windows XP SP1 Microsoft Windows Server 2003 SP1 Microsoft Windows Server 2003...
Microsoft Windows Internet Explorer地址栏伪造漏洞(MS04-038)
Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer处理部分URL时存在问题，远程攻击者可以利用这个漏洞伪造地址，欺骗用户。 在双字节字符设置系统中的Microsoft Internet Explorer处理部分URL存在问题，攻击者可以导致不正确的URL列在地址栏中，而非实际用户要访问的URL，造成一定的欺骗，可能导致用户访问恶意站点，泄露敏感信息。 Microsoft Internet Explorer 6.0SP1 Microsoft Internet Explorer 5.5SP2 Microso...
Microsoft Windows SMB驱动本地拒绝服务漏洞（MS06-030）
Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft客户端缓存（CSCDLL.DLL）和Microsoft服务器消息块重新定向器驱动（MRXSMB.SYS）代码中存在漏洞，本地攻击者可能利用此漏洞在机器上创建无法中止的进程。...
Microsoft Winsock Gethostbyname远程缓冲区溢出漏洞（MS06-041）
Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows的Winsock API Gethostbyname处理恶意的文件或WEB页面时存在溢出漏洞，如果用户受骗打开了恶意文件或访问了恶意的WEB站点的话就会触发这个漏洞，导致执行任意代码。 Microsoft Windows XP SP2 Microsoft Windows XP SP1 Microsoft Windows Server 2003 SP1 Microsoft Windows Server 2003 Microsoft Windows 2000SP4...
Microsoft Windows TCP/IP协议驱动远程溢出漏洞（MS06-032）
Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows的TCP/IP协议驱动处理特定畸形的IP源路由报文时存在缓冲区溢出漏洞，远程攻击者可以通过发送有Loose Source and Record Route选项的特制ICMP报文触发这个漏洞，导致tcpip.sys或ntoskrnl.exe中出现错误而造成拒绝服务或执行任意指令。 默认情况下，Windows系统的路由及远程访问服务是关闭的，也就是说默认情况下系统不受此漏洞影响。 Microsoft Windows XP SP2 Microsoft Windows XP SP1...
Microsoft XML核心服务信息泄露漏洞（MS06-061）
Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft XML核心服务中的XMLHTTP ActiveX控件没有正确地解析HTTP服务器端重定向，远程攻击者可能利用此漏洞非授权访问用户信息。 攻击者可以通过构建特制网页来利用此漏洞，如果用户访问该网页或单击特制电子邮件中的链接，就可能导致信息泄露。成功利用这个漏洞的攻击者可能以在客户端浏览Web用户的权限访问其他域的内容。不过，要利用此漏洞，需要进行用户交互。 Microsoft Office 2003 Service Pack 2 Microsoft Office 2003 Service Pack 1...
Microsoft Windows XML核心服务XSLT缓冲区溢出漏洞（MS06-061）
Microsoft Windows是微软发布的非常流行的操作系统。 Windows的XML核心服务在处理MSXML中可扩展样式表语言转换（XSLT）控件时存在字符串缓冲区溢出漏洞，成功利用此漏洞的攻击者可以完全控制受影响的系统。 攻击者可以通过建立恶意网页来利用此漏洞，如果用户访问该页面，即有可能允许远程执行指令。 Microsoft Office 2003 Service Pack 2 Microsoft Office 2003 Service Pack 1 Microsoft Windows XP SP2 Microsoft Windows XP SP1 Microsoft...
Microsoft IPv6 TCP/IP Loopback LAND攻击拒绝服务(MS05-019/MS06-064)
Microsoft Windows是微软发布的非常流行的操作系统。 关闭了Windows防火墙的Windows Server 2003和XP SP2受LAND攻击的影响。攻击者可以发送设置了SYN标记的TCP报文，将源IP地址和目标IP地址及源端口和目标端口都设置为目标机器，导致15-30秒的DoS情况。 向文件服务器发送单个LAND报文就可能导致当前连接到服务器上所有工作站的Windows explorer僵死，服务器的CPU使用率达到100%。有时有漏洞服务器上的网络监控甚至无法嗅探的出恶意的报文。使用tcpreplay重现攻击可以导致网络完全瘫痪。 Microsoft Window...
Microsoft索引服务查询验证跨站脚本执行漏洞（MS06-053）
Microsoft索引服务可以为文件系统和虚拟Web服务器创建内容和属性的索引目录。 索引服务没有正确地验证查询参数，可能允许跨站脚本执行。 如果用户受骗访问了恶意站点的话，就可能允许攻击者代表用户运行客户端脚本。该脚本可能欺骗内容、泄露信息或执行用户可以在受影响的网站上执行的任何操作。成功攻击要求可以通过IIS访问索引服务。 Microsoft Windows XP SP2 Microsoft Windows XP SP1 Microsoft Windows Server 2003 SP1 Microsoft Windows Server 2003 Microsoft Windows...
MS Internet Explorer (VML) Remote Buffer Overflow Exploit (XP SP1)
No description provided by source. !/usr/bin/perl Microsoft Internet Explorer VML Remote Buffer Overflow Windows XP SP0-SP1 + Windows 2000 SP4 Author: Trirat Puttaraksa Kira trir00t at gmail.com http://sf-freedom.blogspot.com For educational purpose only Note: This exploit is modified from...
MS Windows NetpIsRemote() Remote Overflow Exploit (MS06-040) (2k3)
No description provided by source. netapiwin2003.pm MS06-040 Exploit for Windows Server 2003 SP0 Author: Trirat Puttaraksa Kira trir00t at gmail.com http://sf-freedom.blogspot.com For educational purpose only Note: This exploit is developed because of my question "Is it exploitable on Windows...
BrightStor ARCserve discovery service ASBRDCST.DLL buffer overflow
Added: 10/19/2006 CVE: CVE-2006-5143 BID: 20365 OSVDB: 29534 Background The BrightStor ARCserve Backup server includes a discovery service which listens on ports 41523/TCP and 41524/UDP. Problem A buffer overflow vulnerability in the ASBRDCST.DLL library allows remote attackers to execute arbitra...
BrightStor ARCserve discovery service ASBRDCST.DLL buffer overflow
Added: 10/19/2006 CVE: CVE-2006-5143 BID: 20365 OSVDB: 29534 Background The BrightStor ARCserve Backup server includes a discovery service which listens on ports 41523/TCP and 41524/UDP. Problem A buffer overflow vulnerability in the ASBRDCST.DLL library allows remote attackers to execute arbitra...
BrightStor ARCserve discovery service ASBRDCST.DLL buffer overflow
Added: 10/19/2006 CVE: CVE-2006-5143 BID: 20365 OSVDB: 29534 Background The BrightStor ARCserve Backup server includes a discovery service which listens on ports 41523/TCP and 41524/UDP. Problem A buffer overflow vulnerability in the ASBRDCST.DLL library allows remote attackers to execute arbitra...
BrightStor ARCserve discovery service ASBRDCST.DLL buffer overflow
Added: 10/19/2006 CVE: CVE-2006-5143 BID: 20365 OSVDB: 29534 Background The BrightStor ARCserve Backup server includes a discovery service which listens on ports 41523/TCP and 41524/UDP. Problem A buffer overflow vulnerability in the ASBRDCST.DLL library allows remote attackers to execute arbitra...
Microsoft Security Bulletin MS06-064 Vulnerabilities in TCP/IP IPv6 Could Allow Denial of Service (922819)
Microsoft Security Bulletin MS06-064 Vulnerabilities in TCP/IP IPv6 Could Allow Denial of Service 922819 Published: October 10, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows. Impact of Vulnerability: Denial of Service Maximum Severity Rating: Low...
Microsoft Security Bulletin MS06-056 Vulnerability in ASP.NET 2.0 Could Allow Information Disclosure (922770)
Microsoft Security Bulletin MS06-056 Vulnerability in ASP.NET 2.0 Could Allow Information Disclosure 922770 Published: October 10, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows .NET Framework 2.0 Impact of Vulnerability: Information Disclosure Maximu...
Microsoft Security Bulletin MS06-057 Vulnerability in Windows Explorer Could Allow Remote Execution (923191)
Microsoft Security Bulletin MS06-057 Vulnerability in Windows Explorer Could Allow Remote Execution 923191 Published: October 10, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating:...
Microsoft Security Bulletin MS06-065 Vulnerability in Windows Object Packager Could
Microsoft Security Bulletin MS06-065 Vulnerability in Windows Object Packager Could Allow Remote Execution 924496 Published: October 10, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity...
Microsoft Security Bulletin MS06-063 Vulnerability in Server Service Could Allow Denial of Service (923414)
Microsoft Security Bulletin MS06-063 Vulnerability in Server Service Could Allow Denial of Service 923414 Published: October 10, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Denial of Service Maximum Severity Rating: Importa...