3999 matches found
CVE-2010-0476
CVE-2010-0476 is a remote code-execution vulnerability in the Microsoft SMB client. The issue occurs when the SMB client implementation on Windows platforms (including Windows Server 2003 SP2, Windows Vista SP1/SP2, and Windows Server 2008 SP2) improperly parses or handles certain crafted SMB res...
Microsoft Windows SMTP Server组件MX记录解析拒绝服务漏洞（MS10-024）
BUGTRAQ ID: 39308 CVE ID: CVE-2010-0024 Microsoft Windows是微软发布的非常流行的操作系统。 Windows的SMTP组件处理特制的DNS邮件交换器（MX）资源记录的方式中存在拒绝服务漏洞。利用该漏洞的尝试不要求进行认证，攻击者可以通过向运行SMTP服务的计算机发送特制网络消息来利用该漏洞。成功利用此漏洞的攻击者可能会导致SMTP服务停止响应，直至重新启动。 Microsoft Exchange Server 2003 SP2 Microsoft Windows XP SP3 Microsoft Windows XP SP2...
PT-2010-2237 · Microsoft · Windows Vista +3
Name of the Vulnerable Software and Affected Versions: Microsoft Windows Server 2003 SP2 Microsoft Windows Vista Gold, SP1, and SP2 Microsoft Windows Server 2008 Gold and SP2 Description: The issue allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a deni...
Microsoft Windows MP3音频解码器栈溢出漏洞（MS10-026）
BUGTRAQ ID: 39303 CVE ID: CVE-2010-0480 Microsoft Windows是微软发布的非常流行的操作系统。 Windows中所使用的MP3编码解码器处理AVI媒体文件的方式中存在栈溢出漏洞。如果用户打开包含MP3音频流的特制的AVI文件，此漏洞可能允许远程执行代码。如果用户使用管理用户权限登录，成功利用此漏洞的攻击者便可完全控制受影响的系统。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft Windows Vista SP...
Microsoft Plugs Critical Drive-By Download Holes
Microsoft today released 11 security bulletins with fixes for a total of 25 security vulnerabilities, including several flaws that expose users to browse-and-you’re-hacked malicious drive-by download attacks. Two of the bulletins are rated “critical” for all versions of Microsoft’s flagship...
Microsoft Windows Kernel Registry Key Symbolic Link Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers. Fail...
Microsoft Windows Kernel NULL Pointer Local Denial Of Service Vulnerability
Description Microsoft Windows is prone to a local denial-of-service vulnerability that affects the Windows kernel. Attackers can exploit this issue to cause affected computers to become unresponsive and restart, causing a denial-of-service condition. Due to the nature of this issue, code executio...
Easy FTP Server MKD command buffer overflow
Added: 04/08/2010 BID: 38102 OSVDB: 62134 Background UplusFTP formerly Easy FTP Server is a free FTP server for Windows platforms. Problem A buffer overflow vulnerability allows remote, authenticated attackers to execute arbitrary commands by sending a MKD command with a specially crafted argumen...
Microsoft Internet Explorer Unspecified vulnerability
This host is installed with Microsoft Internet Explorer and is prone to unspecified vulnerability. OpenVAS Vulnerability Test $Id: gbmsieunspecifiedvuln.nasl 5656 2017-03-21 11:03:12Z cfi $ Microsoft Internet Explorer Unspecified vulnerability Authors: Madhuri D Copyright: Copyright c 2010...
Design/Logic Flaw
Microsoft Internet Explorer 7.0 on Windows XP and Windows Server 2003 allows remote attackers to have an unspecified impact via a certain XML document that references a crafted web site in the SRC attribute of an image element, related to a "0day Vulnerability."...
CVE-2010-1175
Microsoft Internet Explorer 7.0 on Windows XP and Windows Server 2003 is affected by CVE-2010-1175. The vulnerability is described as an unspecified impact triggered when processing a crafted XML document that references a specific web site in the SRC attribute of an image element. Affected produ...
CVE-2010-1175
Microsoft Internet Explorer 7.0 on Windows XP and Windows Server 2003 allows remote attackers to have an unspecified impact via a certain XML document that references a crafted web site in the SRC attribute of an image element, related to a "0day Vulnerability."...
Windows写字板HTML帮助文件处理远程代码执行漏洞
写字板是Windows操作系统中附件所提供的简单文本编辑工具。 如果相对路径为参数的话hhctrl.ocx控件的HtmlHelpA函数就会打开当前目录中的CHM文件。攻击者可以诱骗用户打开与特制notepad.chm文件处于同一目录中的.txt文件，notepad.exe打开该文件后用户在文档中按下F1键获得帮助时就会以本地安全环境执行任意JavaScript代码。 经现场测试，该漏洞不仅适用于 Microsoft Windows XP SP3、Microsoft Windows 2000SP4，同样适用于Microsoft Windows Server 2003...
Apache 2.2.14 mod_isapi Dangling Pointer Remote SYSTEM Exploit
No description provided by source. / Apache 2.2.14 modisapi Dangling Pointer Remote SYSTEM Exploit CVE-2010-0425 ------------------------------------------------------------------------------ Advisory: http://www.senseofsecurity.com.au/advisories/SOS-10-002 Description: pwn-isapi.cpp exploits a...
Internet Explorer winhlp32.exe 'MsgBox()'远程代码执行漏洞
BUGTRAQ ID: 38463 CVECAN ID: CVE-2010-0483 Internet Explorer是Windows操作系统中默认捆绑的web浏览器。 用户可以使用VBScript从IE调用winhlp32.exe服务，如果向该服务传送了恶意的.HLP文件就会导致执行任意命令。 必需一些用户交互才可以触发这个漏洞，在显示MsgBox弹出框时用户需要按下F1。以下是MsgBox函数的句法： MsgBoxprompt,buttons,title,helpfile,context...
Microsoft DirectX DirectShow AVI文件解析堆溢出漏洞（MS10-013）
BUGTRAQ ID: 38112 CVE ID: CVE-2010-0250 Microsoft DirectX是Windows操作系统中的一项功能，流媒体在玩游戏或观看视频时通过这个功能支持图形和声音。 DirectX的DirectShow组件（quartz.dll）在解析AVI文件中的特定类型视频流时没有正确的使用分配所用的长度字段，导致分配了不充分的缓冲区。用户打开特制的AVI文件就可以触发堆溢出，导致执行任意代码。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2...
Microsoft Windows内核双重释放本地权限提升漏洞（MS10-015）
BUGTRAQ ID: 38044 CVECAN ID: CVE-2010-0233 Microsoft Windows是微软发布的非常流行的操作系统。 当释放内存时，Windows内核没有正确地重置指针，导致内核中出现双重释放的情况。成功利用此漏洞的攻击者可以运行任意内核态代码。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft...
Microsoft画图工具JPEG图形处理整数溢出溢出漏洞（MS10-005）
BUGTRAQ ID: 38042 CVE ID: CVE-2010-0028 画图是Windows操作系统中默认捆绑的图形编辑软件。 画图工具在解码JPEG图形时存在可导致堆溢出的整数溢出漏洞，用户受骗打开了特制的JPEG图形文件就会导致执行任意代码。成功利用此漏洞的攻击者便可完全控制受影响的系统。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Server 2003 SP2 Microsoft Windows 2000SP4 临时解决方法： 禁用或删除画图工具。 厂商补丁： Microsoft...
Microsoft Windows CSRSS本地权限提升漏洞（MS10-011）
BUGTRAQ ID: 38098 CVE ID: CVE-2010-0023 Microsoft Windows是微软发布的非常流行的操作系统。 当用户注销时Windows客户端/服务器运行时环境子系统（CSRSS）没有正确的终止用户进程，这可能允许本地用户以其他用户的权限执行任意代码。 如果要利用这个漏洞，攻击者首先要登录到系统，之后启动在注销后仍可继续运行的应用程序。当新的用户以自己的凭据登录后，攻击者的进程就可以监控新登录用户所执行的所有操作。如果该用户为管理员，攻击者就可以利用监控到的信息进一步入侵系统。 Microsoft Windows XP SP3 Microsoft...
CVE-2010-0028
Integer overflow in Microsoft Paint in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted JPEG .JPG file, aka "MS Paint Integer Overflow Vulnerability."...