Microsoft IIS WebDav ScStoragePathFromUrl Overflow

Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services IIS 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: use exploit/windows/iis/iis/webdavscstoragepathfromurl ms...

HP Intelligent Management Center < 5.0 E0102 - UAM Buffer Overflow Exploit

Exploit for windows platform in category local exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'HP Intelligent Management Center UAM Buffer Overflow', 'Description' = ...

Analysis of Kerberos constrained delegation SPN security vulnerabilities-vulnerability warning-the black bar safety net

In the past few years, more and more security researchers began to study Kerberos security, eventually found in support of the authentication Protocol of the network environment a lot of interesting attacks. In this post, I will describe my in the Windows Kerberos constrained delegation feature...

KLA10977 Multiple vulnerabilities in Microsoft Server Message Block (SMB)

Multiple serious vulnerabilities have been found in Microsoft Server Message Block 1.0SMBv1. Malicious users can exploit these vulnerabilities to execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities: 1. An improper handling of certain requests can be...

MS12-035: Description of the security update for the .NET Framework 2.0 Service Pack 2 on Windows XP and Windows Server 2003: May 8, 2012

MS12-035: Description of the security update for the .NET Framework 2.0 Service Pack 2 on Windows XP and Windows Server 2003: May 8, 2012 Microsoft has released the security bulletin MS12-035. You can view the complete security bulletin by visiting one of the following Microsoft websites: Home...

Description of the security update for the .NET Framework 4 on Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: December 10, 2013

Description of the security update for the .NET Framework 4 on Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: December 10, 2013 September 9, 2014 This security update has been re-released and contains updated files. We recommend that you apply this...

MS13-082: Description of the security update for the .NET Framework 3.5 Service Pack 1 on Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008: October 8, 2013

MS13-082: Description of the security update for the .NET Framework 3.5 Service Pack 1 on Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008: October 8, 2013 View products that this article applies to. Introduction This update resolves a vulnerability in the Microsoft .NET...

MS13-007: Description of the security update for the .NET Framework 3.5 Service Pack 1 on Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008: January 8, 2013

MS13-007: Description of the security update for the .NET Framework 3.5 Service Pack 1 on Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008: January 8, 2013 View products that this article applies to. Introduction Microsoft has released security bulletin MS13-007. You can vi...

MS10-070: Description of the security update for the Microsoft .NET Framework 3.5 Service Pack 1 on Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008

MS10-070: Description of the security update for the Microsoft .NET Framework 3.5 Service Pack 1 on Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008 Support for Windows Vista Service Pack 1 SP1 ends on July 12, 2011. To continue receiving security updates for Windows, make...

MS13-057: Description of the security update for Windows Media Format Runtime 9.5 and 11 (wmvdecod.dll) on Windows XP and Windows Server 2003: July 9, 2013

MS13-057: Description of the security update for Windows Media Format Runtime 9.5 and 11 wmvdecod.dll on Windows XP and Windows Server 2003: July 9, 2013 INTRODUCTION Microsoft has released security bulletin MS13-057. To view the complete security bulletin, go to one of the following Microsoft...

MS13-082: Description of the security update for the .NET Framework 4 on Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008: October 8, 2013

MS13-082: Description of the security update for the .NET Framework 4 on Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008: October 8, 2013 View products that this article applies to. Introduction This update resolves vulnerabilities in the Microsoft .NET Framework that coul...

MS10-070: Description of the security update for the Microsoft .NET Framework 3.5 on Windows Server 2008, on Windows Vista, on Windows XP, and on Windows Server 2003

MS10-070: Description of the security update for the Microsoft .NET Framework 3.5 on Windows Server 2008, on Windows Vista, on Windows XP, and on Windows Server 2003 INTRODUCTION Microsoft has released security bulletin MS10-070. To view the complete security bulletin, visit one of the following...

MS12-074: Description of the security update for the .NET Framework 2.0 Service Pack 2 on Windows XP and Windows Server 2003: November 13, 2012

MS12-074: Description of the security update for the .NET Framework 2.0 Service Pack 2 on Windows XP and Windows Server 2003: November 13, 2012 View products that this article applies to.Microsoft has released the security bulletin MS12-074. You can view the complete security bulletin by going to...

MS12-034: Description of the security update for CVE-2012-0181 in Windows XP and Windows Server 2003: May 8, 2012

MS12-034: Description of the security update for CVE-2012-0181 in Windows XP and Windows Server 2003: May 8, 2012 INTRODUCTION Microsoft has released security bulletin MS12-034. To view the complete security bulletin, visit one of the following Microsoft websites: Home users:...

LSASS SMB NTLM Exchange Remote Memory Corruption

MS16-137: LSASS Remote Memory Corruption Advisory Title: LSASS SMB NTLM Exchange Remote Memory Corruption Version: 1.0 Issue type: Null Pointer Dereference Authentication: Pre-Authenticated Affected vendor: Microsoft Release date: 8/11/2016 Discovered by: Laurent GaffiAc Advisory by: Laurent...

Microsoft Windows (x86) - 'afd.sys' Local Privilege Escalation (MS11-046)

/ Exploit Title: Windows x86 all versions AFD privilege escalation MS11-046 Date: 2016-10-16 Exploit Author: Tomislav Paskalev Vulnerable Software: Windows XP SP3 x86 Windows XP Pro SP2 x64 Windows Server 2003 SP2 x86 Windows Server 2003 SP2 x64 Windows Server 2003 SP2 Itanium-based Systems Windo...

PT-2020-7789 · Libuv +1 · Libuv +1

Name of the Vulnerable Software and Affected Versions: libuv versions prior to 1.7.4 Description: The issue is related to the uv rwlock t fallback implementation for Windows XP and Server 2003 in libuv. It does not properly prevent threads from releasing the locks of other threads, which allows...

Microsoft Office 2007 - Malformed Document Stack Buffer Overflow

Source: https://code.google.com/p/google-security-research/issues/detail?id=170&can=1 The following access violation was observed in Microsoft Office 2007 Word document: e24.e28: Access violation - code c0000005 first chance First chance exceptions are reported before any exception handling. This...

Microsoft Office 2007 - Malformed Document Stack Buffer Overflow

Microsoft Office 2007 - Malformed Document Stack Buffer Overflow Source: https://code.google.com/p/google-security-research/issues/detail?id=170&can=1 The following access violation was observed in Microsoft Office 2007 Word document: e24.e28: Access violation - code c0000005 first chance First...

Microsoft Office 2007 - OneTableDocumentStream Invalid Object

Source: https://code.google.com/p/google-security-research/issues/detail?id=171&can=1 The following access violation was observed in Microsoft Office 2007 Word document: 8c0.e68: Access violation - code c0000005 first chance First chance exceptions are reported before any exception handling. This...